r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 715.514904] binder: 31191:31194 got transaction with invalid data ptr 07:59:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000002900)="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", 0xffffffffffffff30}, {&(0x7f0000000340)="84dd14d90496398302bdda8599caffdc51aed16975aece052f", 0xfffffffffffffebd}], 0x1f5, 0x0) fchdir(r0) r3 = socket(0x80000000000010, 0x802, 0x0) write(r3, &(0x7f00000001c0)="240000001a0025f0046bbc04fef7001c020b49ff00000000800008ea0700040001000000", 0x24) creat(&(0x7f0000000280)='./bus\x00', 0x14c) creat(&(0x7f00000000c0)='./bus\x00', 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept4$inet(r5, 0x0, 0x0, 0x80800) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000480)=0x8b21d7b36ca52682) r8 = syz_open_procfs(r7, &(0x7f0000000300)='coredump_filter\x00') ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000500)) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x4003, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x3, 0x3, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100000, 0x0, 0x0, 0x5, @perf_bp, 0x0, 0x7e0, 0x2000000, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$packet(0x11, 0x0, 0x300) fsetxattr$security_smack_transmute(r5, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='\x00\x00S\x00', 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0xfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) bind$inet6(r8, &(0x7f00000003c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$sock_int(r10, 0x1, 0x23, &(0x7f0000f59ffc)=0x194, 0x4) socket$inet6(0xa, 0x4, 0x0) setsockopt$sock_int(r10, 0x1, 0xb, &(0x7f00000000c0)=0x6, 0x15a) getpid() [ 715.555605] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.563211] binder: BINDER_SET_CONTEXT_MGR already set [ 715.597235] binder: 31191:31194 transaction failed 29201/-14, size 72-0 line 3155 [ 715.620069] binder: 31188:31190 ioctl 40046207 0 returned -16 [ 715.627924] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.667415] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.721879] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.775539] binder: undelivered TRANSACTION_ERROR: 29201 [ 715.830641] binder: release 31092:31101 transaction 3786 out, still active [ 715.900275] binder: unexpected work type, 4, not freed [ 715.929213] binder: unexpected work type, 4, not freed [ 715.981108] binder: unexpected work type, 4, not freed [ 716.015321] binder: undelivered TRANSACTION_COMPLETE [ 716.054255] binder: release 31092:31101 transaction 3779 out, still active [ 716.095209] binder: unexpected work type, 4, not freed [ 716.120987] binder: unexpected work type, 4, not freed [ 716.167441] binder: unexpected work type, 4, not freed [ 716.214808] binder: undelivered TRANSACTION_COMPLETE 07:59:26 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000002280)=""/4105, 0xa4a7}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000007c0)='/s|li\xc9\xd5\x1bYconte\xafo\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r5, &(0x7f0000000080)=0x80, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r7, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0) sendfile(r7, r8, 0x0, 0xfffffffffffffff9) sendfile(r7, r8, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r8, &(0x7f0000000780)='./bus\x00', 0x184) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') openat$cgroup_ro(r9, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x9, &(0x7f00000001c0)={0x2, 0x6}) getuid() lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000005c0)) 07:59:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:26 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='veth0\x00', 0x800000000000, 0x200, 0x8000}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x105d) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x25, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048"], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) memfd_create(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) 07:59:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x400000)=nil, 0x400000, 0x100000a, 0x11, r4, 0x1d) read(r2, &(0x7f0000000000)=""/250, 0xedf1d44) r5 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x10) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fcntl$setstatus(r6, 0x4, 0x40400) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000100)) write$FUSE_WRITE(r5, &(0x7f0000000080)={0x18}, 0x18) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 07:59:26 executing program 0: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x6, 0x718, [0x0, 0x20000a80, 0x20000cb8, 0x20000f6c], 0x0, &(0x7f0000000080), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x8, 0xc, 'gretap0\x00', 'yam0\x00', 'sit0\x00', 'sit0\x00', @empty, [0x181, 0x7f], @local, [0x0, 0x0, 0x0, 0x101, 0xff, 0x7f], 0x6e, 0x96, 0xbe, [], [@common=@AUDIT={'AUDIT\x00', 0x4}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x2}}}}, {0xa, 0x41, 0x8863, 'rose0\x00', 'bridge_slave_0\x00', 'bridge_slave_0\x00', 'eql\x00', @empty, [0x7f, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, [0x0, 0x0, 0x0, 0x0, 0xff, 0x1fe], 0xda, 0x102, 0x14a, [@time={'time\x00', 0x18, {{0x6, 0x401, 0x36, 0x1265f, 0x7, 0x3f, 0x3}}}, @mac={'mac\x00', 0xc, {{@empty, 0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x4}], @common=@IDLETIMER={'IDLETIMER\x00', 0x24, {{0x0, 'syz1\x00', 0x4}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x8, 0xec7, 'vxcan1\x00', 'team0\x00', 'veth1\x00', 'dummy0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @random="a9f0a43a3b85", [0x0, 0x0, 0x5c6c60aae886a5df, 0x0, 0xff, 0x6b4200138d63482f], 0xda, 0x13e, 0x186, [@connbytes={'connbytes\x00', 0x18, {{0x5, 0x6d, 0x2}}}, @mark_m={'mark_m\x00', 0xc, {{0x6}}}], [@common=@RATEEST={'RATEEST\x00', 0x18, {{'syz0\x00', 0x8, 0x7, 0x80000000}}}, @common=@STANDARD={'\x00', 0x4, {0x3}}], @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x0, 0xfffffff8}}}}, {0x11, 0x7e, 0x8035, 'vxcan1\x00', 'netdevsim0\x00', 'hsr0\x00', 'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x1fe, 0xff], 0xce, 0xce, 0xfe, [@vlan={'vlan\x00', 0x8, {{0x1, 0x0, 0x86dd, 0x0, 0xf61b9a3e805be73d}}}, @cluster={'cluster\x00', 0x10, {{0x0, 0x2, 0xdb}}}], [], @common=@dnat={'dnat\x00', 0xc, {{@remote, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x9, 0x54, 0x888e, 'team_slave_1\x00', 'ifb0\x00', 'sit0\x00', 'bpq0\x00', @remote, [0x0, 0xff, 0x7f, 0x0, 0x7f], @local, [0x7f, 0xff, 0x0, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0xe2, [@devgroup={'devgroup\x00', 0x14, {{0x6, 0x80000001, 0x1, 0x200, 0xd2a2}}}], [], @common=@RATEEST={'RATEEST\x00', 0x18, {{'syz1\x00', 0x3, 0x9}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x1, [{0x5, 0x8, 0x5, 'vlan0\x00', 'sit0\x00', 'ip6erspan0\x00', 'yam0\x00', @broadcast, [0xff, 0x0, 0x0, 0x7f, 0x7f, 0xff], @dev={[], 0x1d}, [0xff, 0x65e6161c01967485, 0xff, 0x6357198e41bca779, 0xff], 0x9a, 0xc2, 0xea, [@m802_3={'802_3\x00', 0x8, {{0x7e, 0x8, 0x4, 0x1}}}], [@common=@STANDARD={'\x00', 0x4, {0xffffffffffffffff}}], @common=@STANDARD={'\x00', 0x4, {0xfffffffffffffffe}}}]}]}, 0x768) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x200) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440), 0x0) getegid() syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000700)=""/30, 0x1e}], 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) r6 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r6, 0x107, 0xf, &(0x7f00000003c0)="12cb96df", 0x4) bind(r6, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r6, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0x360, 0x0, 0x0, 0x0, 0x0, 0x8}, "bb11", [[], [], [], []]}, 0x422) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) [ 716.808764] binder: 31227:31233 got transaction with invalid data ptr [ 716.838794] binder: 31227:31233 transaction failed 29201/-14, size 72-0 line 3155 [ 716.865898] binder: BINDER_SET_CONTEXT_MGR already set [ 716.882876] binder: 31228:31232 ioctl 40046207 0 returned -16 07:59:26 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x25, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048"], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) memfd_create(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) [ 716.913512] binder: 31228:31232 ioctl 400454ce 0 returned -22 [ 716.926212] binder: undelivered TRANSACTION_ERROR: 29201 [ 716.981229] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 717.062189] binder: 31246:31249 got transaction with invalid data ptr [ 717.068887] binder: 31246:31249 transaction failed 29201/-14, size 72-0 line 3155 [ 717.093168] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) 07:59:27 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='veth0\x00', 0x800000000000, 0x200, 0x8000}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x105d) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x25, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048"], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) memfd_create(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) [ 717.187539] binder: 31228:31232 transaction failed 29201/-28, size 72-24 line 3137 [ 717.198591] binder: undelivered TRANSACTION_ERROR: 29201 [ 717.302737] binder: undelivered TRANSACTION_ERROR: 29201 [ 717.326939] binder: 31261:31262 got transaction with invalid data ptr [ 717.372596] binder: 31261:31262 transaction failed 29201/-14, size 72-0 line 3155 [ 717.465644] binder: undelivered TRANSACTION_ERROR: 29201 07:59:28 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6(0xa, 0x0, 0x40000000000000) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @loopback, 0x929}, 0x1c) write(r3, &(0x7f00000001c0), 0xffffffe0) read(r2, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x10) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r5, 0x200005) sendfile(r4, r5, 0x0, 0x8000ffffffff) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x0) pwritev(r6, &(0x7f0000000b80)=[{&(0x7f0000000300)="be30bc2039f50197fe7e0d77b4a922dc26ae50f85fb4608e99d93a33ef1ee6e105e4e3c2096c076b582c267063ef39d49b6f372665988d4c053455cbdef70b78d3b4650bee299bd667d003aebb4bfef48fb1c5cb9854d92a215949ab1efd5daea45c528c801d6a1c995667d9", 0x6c}, {&(0x7f00000004c0)="b286f333f492823d90a779436e4224f6f82c4f64a556fd9b6bba3cdcefd6380819b5dea7dfddfc103985501d2fe2159df33eec2e49ecf4e3d7df2dc36220ceb8d5a4d660e53a936267a374a4fbfc6c0098bf1f6de3436f20e0139f2673d5f0336180726242a9fd7d0da10dbf6ab7bff8dbc24322ac0232a90cfafa1d388d", 0x7e}, {&(0x7f0000000540)="dc71b7e0facab8cd9e59c20a3cc6a3e6e84530869c99189c1d815035dad2a97971b1020621262af55d45e5295725750f863249d070c7aefa9843df55c9b9c298e7990248ebc5dd506b25a25f54689d4f39db4acdb89b4ae75554cd5516", 0x5d}, {&(0x7f00000005c0)="5d27c1ab2eb2728a75b9b8d7d914e6f4b2814fcc1d9999a6277b7f60d90f0b5fcdfbca4319229224d4dce1283d47527fbeac276340bdf4e2066d7cc61fe3baf2aeac30e804090d55a31cd45b322f9db76f36410332b954d3270f730822ba8a27a993b61878b67fbf0b665132fc2ff18479343a1e2e9d52eabcf4bffc9eb8211be0082bb4588cc57ac9b64386999a46a5367f5eefe3b019e37b5d0037bc600506ea4a4c80f4b85d765a242f85da5064c5f118b86bfd0b1a5febe1a40c31b4f76b2db22a723ba41f6ab71095f4d5c032c7c74bf456caaddd649f9a6f0b1e8969acfdb157def0f3840a8bf1dd5d3922f73fd4b2ca", 0xf3}, {&(0x7f00000006c0)="b47f0dc671f51b7803180e6a986b07ae9de1e5d461440abf856b190c77ba0be31300244ff3ecc7f7fac7f9976511d589a105fe54a2f0c4c849e0fb3d33f1a8b2afde2a0831ac063553cb52721133516958ca4ad6712a816be2ae825f71fc8058e33777fc65807a308d4b5bcb88ce844f23706c7e764c649357efef778a842abeff75add390a4ff7ae17877ac29cda16c2efa63ff63012094b14e6b44ad81b2f4f87fb7a6", 0xa4}, {&(0x7f0000000780)="a1b3fc84de5f3cebf4ea9e33988ce34c595343f318933975d78f3da31d8750549326089b51fef3fe5f73bdd390dda178324cb78b9a966de15b853309de846ae50821b3392a8e9e5348ba7f725f0427ca16652cf0205d59119a007e04a82a6ad4807fd3b08c93c473ef7153d9cfd1adbcbe5eec5d3ef03504204aba6336093c16b338f71d1c1299e035d870460a784a113c0681f94367d5d884833948deaa6ba98761307afe851fb685031b03cc688615a3848da7", 0xb4}, {0x0}, {&(0x7f00000008c0)="d6a9310ceff4979ba4f450838045179f3dd6702c90514a2fb2938c7c5a9a4d2cbfb74feffaa7d54fe94d641d042cae58329819714f6d2b36dd7297c187d01d4f773da152126e105aa3342e05bb384670ec68f790d08e4e5d357edc0262b42a8c9e88b12bda238a02caf82bdefc497a00421172dd46be9a780ab61596d47be90432512158c95c8e0e2b263be38da1c636e244a7bcc36b0510e175c283fe18bc93f73f0847796c7e3683805c3747137c784c4dfe1682c1f307a8e41c9c378f271ed633bc6e2e0923f5a08edca318a550ee621eab6356569b0e", 0xd8}, {&(0x7f00000009c0)="efba9366e119b0348f24f30643f5c67175612d5ccbef6a446f34994ffe62be8f4c66a31199be4cae2f1694ad110ce9b8716d3901e3f2278df58e6623bfb828323692d40565390b5fcf6a56e31bdb1310680b761629a2acb3782b848298e141e1c2ea5bf6f0444b22ee121f5434ae6bb52635f693875f5794e14e6310e71dfcb42bd0b0c625013e0cd80edddfad3aa8d92490aa32f2c9db92b7569110640d7477c276091aab35bedee0b3237e425d051ad1e8750c67", 0xb5}, {&(0x7f0000000a80)="6c8cbc73ea800b99945fe7df4b5b323a11212e2ed83d1121613e0894f2b2436bd44afa852a7ad5caede83d62e959719fdb450a50a589ccc4ea5301a2ff24927fb1376099574c085f4eca0d46a0eec9e8f16e40a1dd2c1676608860fb84d8659d206e744f76361bb02b3005d419aec4bbd36b0385a1f802e32e5dd02da7e8f2b48df5997a88986ce5549e20c4c22d8fc319f766af8018dc5af71823ca452d4ab9057119f4ba9cd9eab99a17660bc03d50a7c8ae04c8af817eb83217ec483a73feb57b8e7aef82da2b6c7524f13a5daf40e1456c683c95752f4c4441ff3451381b7f", 0xe1}], 0xa, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494a}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fcntl$getflags(r7, 0xb) 07:59:28 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffd68, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048"], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) memfd_create(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) 07:59:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f00000000c0)='n\x9e\xc2ux/.bdevh\x01\xd9\"\x8f\xa9\x91\x95\x7f\b\x00\x00', 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000020000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ftruncate(r2, 0x4000007) sendfile(r0, r1, 0x0, 0x10010000000002) 07:59:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000300)='./file0/file0\x00', 0x20002, 0x80) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x40d00) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc554) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000340)={'HL\x00\x00\x00\x00\x00\x00\x00\x1a\x00'}, &(0x7f0000000440)=0x9b69ec99825a82e8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x1d9) pipe(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = open(&(0x7f0000000380)='./file0\x00', 0x141800, 0x21) read(r5, &(0x7f0000001b00)=""/250, 0x50c7e716) r8 = gettid() rt_tgsigqueueinfo(0x0, r8, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='attr/keycreate\x00') bind$unix(r6, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) getsockopt$inet_int(r6, 0x0, 0x0, 0x0, &(0x7f0000000480)) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0xffffffff}, 0x10) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000700)={0xf, 0x0, &(0x7f0000000680)}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x20) readv(0xffffffffffffffff, &(0x7f0000002340), 0x1fffffffffffff4f) readv(r9, &(0x7f0000000580), 0x3c1) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uhid\x00', 0x400000800, 0x0) write$UHID_CREATE(r10, &(0x7f0000000540)={0x0, 'syz0\x00', 'sy\x00\xef\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\xc9\'\xd0>\xff\xff\xff\xff\xff\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\xfe\xff\x00', &(0x7f00000001c0)=""/11, 0xb, 0x20000000000, 0x4, 0xfffffffffffffffd}, 0x11c) r11 = open(&(0x7f0000000040)='./file0\x00', 0x88000, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f00000000c0)={'team0\x00', 0x101}) readv(r11, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/119, 0xfffffffffffffcd0}, {&(0x7f0000000240)=""/102, 0x40}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/200, 0xffad}, {&(0x7f0000000940)=""/4096, 0x140e}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000001980)=""/30, 0x1e}, {&(0x7f00000019c0)=""/2, 0x2}], 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001cc0)=""/246, &(0x7f0000001a80)=0xf6) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 07:59:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x103}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(r0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000100), 0x95, 0x0, &(0x7f0000000200)="7c240924e66f27cd6ce6f45a480645675869ebf38a473bb1ca38889079379c593f13f8c5835310d233e5e3d073bbf7015a2b1b233db6021e10f10f4f53c3d45d4fed876617541cf219149119f92951dcc3bd933fe117c90b0eb69ca7f8842a370b98f04dabb70d3772eed05d28d694e62303d9a7d1d33df13113f640377ed1e1332be02b580f87b5152c06bd716e008e712d9eb937"}) preadv(0xffffffffffffffff, &(0x7f0000000700), 0x31f, 0x10400003) inotify_init1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x5, 0xfd1, 0x0, 0x7ff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000ae8b4aca00000000000000000000f6870b1c9c2ad153a665c600"/72], 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) munlockall() write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0), 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="1400402f0662a30d1b0b8cc0ad29b5"]}) ioctl(r3, 0x8, &(0x7f0000000380)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x202680, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000340)=@req3={0x400, 0x4, 0x7, 0x7, 0x200, 0x7, 0xfffffffe}, 0x1c) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r7 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="a6edd9b0f00b6966ab4511fcd599fe6d4ba0641ac81847c2488d69035a87e0e77d421759141ebcec3190c4f3d33852c6579be64d7567166e7816dc7f7e35c637d664752a6996bba2ed2ac6f05d", 0x4d, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000680)=""/82, 0x52) socket$packet(0x11, 0x3, 0x300) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_generic(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000160000082cbd700000000022b672f855"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) gettid() 07:59:28 executing program 3: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x30005, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffffffffffe, 0x2ffffffff}, 0x283) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0xffffffffffffff31) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x109) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000140)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="42000000000000000000000028749511e9a79d67"]}) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x2f) [ 718.806663] binder: 31270:31281 got transaction with invalid data ptr [ 718.820634] binder: 31270:31281 transaction failed 29201/-14, size 72-0 line 3155 [ 718.888615] binder: undelivered TRANSACTION_ERROR: 29201 [ 718.901436] binder: BINDER_SET_CONTEXT_MGR already set 07:59:28 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup3(r0, r3, 0x80000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x50) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x25, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163484000000000000000000000001b72490e68b03d7a6f18ca000000000080ff7f00eb56a9c30000000000000048"], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "c629ce09bdfa5a15", "798e0794b18bcf939d2836a790910027", "5de8d29f", "f0a477c6017e5401"}, 0x28) r11 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) memfd_create(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e22, 0x20, @local, 0x80000de5}, 0xffffffffffffffe5) r14 = dup2(r12, r12) setsockopt$inet6_icmp_ICMP_FILTER(r14, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r14, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r14, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r14, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) ioctl$PPPIOCSCOMPRESS(r14, 0x400c744d) bind(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r15, 0x0) ioprio_get$uid(0x0, r15) bind$packet(r11, 0x0, 0x97) connect(0xffffffffffffffff, 0x0, 0x0) [ 718.969340] binder: 31272:31287 ioctl 40046207 0 returned -16 [ 719.020710] binder: BINDER_SET_CONTEXT_MGR already set [ 719.076495] binder_alloc: binder_alloc_mmap_handler: 31300 20ff7000-20ffb000 already mapped failed -16 [ 719.088366] binder: 31300:31303 ioctl 40046207 0 returned -16 [ 719.171210] binder: BINDER_SET_CONTEXT_MGR already set [ 719.206585] binder: 31300:31303 ioctl 40046207 0 returned -16 [ 719.217471] binder: BINDER_SET_CONTEXT_MGR already set [ 719.223169] binder: 31300:31307 ioctl 40046207 0 returned -16 [ 719.262997] binder_alloc: binder_alloc_mmap_handler: 31300 20ffc000-21000000 already mapped failed -16 [ 719.304402] binder: BINDER_SET_CONTEXT_MGR already set [ 719.325371] binder: 31300:31303 ioctl 40046207 0 returned -16 [ 719.350481] binder: 31300:31307 got transaction with invalid offset (32497584236093232, min 48 max 72) or object. 07:59:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 719.390483] binder: 31300:31307 transaction failed 29201/-22, size 72-24 line 3199 [ 719.400220] binder: 31300:31303 got transaction with invalid offset (32497584236093232, min 48 max 72) or object. [ 719.446682] binder: BINDER_SET_CONTEXT_MGR already set [ 719.454204] binder: 31300:31310 ioctl 40046207 0 returned -16 [ 719.494184] binder: 31300:31307 got transaction with invalid offset (32497584236093232, min 48 max 72) or object. [ 719.494638] binder: 31300:31303 transaction failed 29201/-22, size 72-24 line 3199 [ 719.540611] binder: BINDER_SET_CONTEXT_MGR already set [ 719.546393] binder: 31300:31303 ioctl 40046207 0 returned -16 [ 719.586195] binder_alloc: 4655: binder_alloc_buf size 17541464 failed, no address space [ 719.627756] binder: BINDER_SET_CONTEXT_MGR already set [ 719.646829] binder: 31312:31313 ioctl 40046207 0 returned -16 [ 719.667003] binder_alloc: allocated: 5648 (num: 83 largest: 96), free: 10736 (num: 2 largest: 10640) [ 719.763832] binder: 31300:31307 transaction failed 29201/-22, size 72-24 line 3199 [ 719.772711] binder: 31300:31303 transaction failed 29201/-28, size 12822870-4718592 line 3137 [ 719.892272] binder: undelivered TRANSACTION_ERROR: 29201 [ 719.892985] binder: BINDER_SET_CONTEXT_MGR already set [ 719.892994] binder: 31300:31303 ioctl 40046207 0 returned -16 [ 719.893854] binder: BINDER_SET_CONTEXT_MGR already set [ 719.893860] binder: 31300:31310 ioctl 40046207 0 returned -16 [ 719.894242] binder_alloc: binder_alloc_mmap_handler: 31300 20ffc000-21000000 already mapped failed -16 [ 719.894313] binder: BINDER_SET_CONTEXT_MGR already set [ 719.894319] binder: 31300:31303 ioctl 40046207 0 returned -16 [ 719.894465] binder: BINDER_SET_CONTEXT_MGR already set [ 719.894477] binder: 31300:31303 ioctl 40046207 0 returned -16 [ 719.895206] binder: BINDER_SET_CONTEXT_MGR already set [ 719.895213] binder: 31300:31321 ioctl 40046207 0 returned -16 [ 719.895347] binder_alloc: 4655: binder_alloc_buf size -435715498645192512 failed, no address space [ 719.895354] binder_alloc: allocated: 5552 (num: 82 largest: 96), free: 10832 (num: 1 largest: 10832) 07:59:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) syslog(0x3, &(0x7f0000000200)=""/147, 0x1e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x2) read(r0, &(0x7f0000000580)=""/250, 0xfffffffffffffe33) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x22000, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/uhid\x00', 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00\xcd\x97\xd6\x89,\xd4H\x88\x15K`', 0x200002, 0x0) r4 = socket$inet6(0xa, 0x7, 0xfffffffffffffffe) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000100), 0xcb) fchdir(r3) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000500)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x103) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x500, 0x0) truncate(&(0x7f00000002c0)='./bus\x00', 0x4a00) socket(0x11, 0x3, 0x8) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0xfffffffffffffffe, 0x0) ioctl$TIOCLINUX4(r6, 0x541c, &(0x7f0000000200)) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e22, 0x8001, @initdev, 0x6}, {0xa, 0x4e23, 0x400000, @mcast2, 0x6}, 0xe8, [0x9, 0x0, 0x2, 0x4, 0x40, 0xffffffff, 0x9, 0x1f]}, 0x5c) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000140)=0x8) r8 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r9 = creat(&(0x7f0000000480)='./file0\x00', 0x0) write$P9_RREMOVE(r9, &(0x7f00000000c0), 0x3bb1) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000100)={0x0, r9}) [ 719.895395] binder: 31300:31310 transaction failed 29201/-28, size 72-24 line 3137 [ 719.895718] binder: BINDER_SET_CONTEXT_MGR already set [ 719.895724] binder: 31300:31307 ioctl 40046207 0 returned -16 07:59:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:30 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x25, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000012687b01bfebf070000080000000000000000000000041d9ce36"], 0x0, 0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) memfd_create(0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) [ 720.168796] audit: type=1400 audit(1575187170.045:105): avc: denied { associate } for pid=31335 comm="syz-executor.5" name="uhid" dev="devtmpfs" ino=4377 scontext=system_u:object_r:mount_tmp_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 720.250903] binder: 31343:31345 got transaction with invalid data ptr [ 720.279652] binder: 31343:31345 transaction failed 29201/-14, size 54-0 line 3155 07:59:30 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) read(r0, &(0x7f0000000140)=""/181, 0xb5) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40830, &(0x7f0000000500)={{'fd'}, 0x2c, {'roopmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@context={'context', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) [ 720.496127] binder: undelivered TRANSACTION_ERROR: 29201 [ 720.535881] binder: BINDER_SET_CONTEXT_MGR already set [ 720.557774] binder: 31340:31342 ioctl 40046207 0 returned -16 [ 720.558253] binder: undelivered TRANSACTION_ERROR: 29201 [ 720.558592] binder: undelivered TRANSACTION_ERROR: 29201 [ 720.558774] binder: undelivered TRANSACTION_ERROR: 29201 [ 720.558807] binder: undelivered TRANSACTION_ERROR: 29201 [ 720.596306] binder: BINDER_SET_CONTEXT_MGR already set 07:59:30 executing program 2: clone(0xc33dd2c56999f1b6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000580)=0x0) wait4(r0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)=""/81, 0x51) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00&\xe7\xbe\xaa\x0e\xe3\xd3#\xc4\x897\x14\x85<\xf70xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000014c0)="54287d05e8b8c78569d6f41f3a55b165958d7d80bfe620ba081ba0acc98158c9c9b330f3dba50223e1e6ca0c272884aca4a3ba422b2d81474341cd292ccff6e500166d64710cc2f34e4ba3372389d41474378fddc055fd8821ee8e7ac07b8b9993748cb35e6a1dc1b5dfb701bef0a4", 0x6f) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) truncate(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) creat(&(0x7f00000000c0)='./file0\x00', 0x68) unlinkat(r3, &(0x7f0000000140)='./bus\x00', 0x200) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x5676579821d58964) getsockopt$inet6_tcp_int(r5, 0x6, 0x1f, &(0x7f0000000340), &(0x7f0000000400)=0xfffffffffffffe93) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) r7 = open(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0xc0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) pread64(r7, &(0x7f00000004c0)=""/4096, 0xffffffd1, 0x49) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000000)={0x10000005, 0x3ff}) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) r8 = openat(r6, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x400202, 0xc) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f0000000280)={0x20000000000001, 0x0, 0x7}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/context\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r9 = getpgrp(r0) syz_open_procfs$namespace(r9, &(0x7f0000000080)='ns/net\x00') [ 720.612870] SELinux: duplicate or incompatible mount options [ 720.618973] binder: 31354:31355 ioctl 40046207 0 returned -16 07:59:30 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r1) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff]) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r2) 07:59:30 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x800, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000500)='securityfs\x00', 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) write$tun(r0, &(0x7f0000000380)={@val, @val={0x1, 0x80, 0x0, 0x80000001, 0x5, 0x100}, @ipx={0xffff, 0x5a, 0xfffffffffffffffe, 0x0, {@broadcast, @current, 0x1}, {@random, @broadcast}, "9c9cc68e755f44b8d130590901f30c70692d115660c39d041d3ac1b3b8f5e7635f49a29fe17791720f7f8bac09de54b750544e02ddd970d1fbb47688"}}, 0x68) io_setup(0xff, &(0x7f0000000340)) r2 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r2, 0x0, &(0x7f0000027000)={0x1}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000540)) write$binfmt_aout(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="68cda47ff0440d85fb9bdc8dfa84fe06602672146be2dff0d996c561170092bf6166c800e813"], 0x26) recvfrom$unix(r0, &(0x7f00000004c0)=""/62, 0x3e, 0x2020, 0x0, 0xffffffffffffff9b) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4a, &(0x7f0000000040), &(0x7f0000000400)=0x4) sendfile(r4, r4, &(0x7f0000000180), 0x8000) ioctl$BLKROGET(r3, 0x125e, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x0) 07:59:33 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x840200) fcntl$notify(r0, 0x402, 0x39136937920f8fac) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="9cad844b56f854b5fede348689ac19008cdeda0f7f6d65afbd28c5c836a7eb4e93ce5266ba", 0x25, 0xfffffffffffffffd) keyctl$update(0x2, r1, &(0x7f0000000540)="300c2af5", 0x4) keyctl$setperm(0x5, r1, 0x100020) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00') 07:59:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/4096) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) listxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)=""/91, 0x5b) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x8001, 0x0, 0x0) write$binfmt_misc(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f0000005f40)=[{{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/129, 0x81}, {0x0}, {&(0x7f0000000ac0)=""/244, 0xf4}], 0x5, &(0x7f0000001cc0)=""/244, 0xf4}}, {{&(0x7f0000001dc0)=@isdn, 0x80, 0x0}}, {{&(0x7f0000002140)=@nfc, 0x80, &(0x7f0000004440)=[{0x0}, {&(0x7f0000004200)=""/10, 0xa}, {&(0x7f0000004240)=""/34, 0x22}, {&(0x7f0000004280)=""/95, 0x5f}, {&(0x7f0000004300)=""/50, 0x32}, {&(0x7f0000004340)=""/234, 0xea}], 0x6}}, {{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f00000047c0)=""/253, 0xfd}, {&(0x7f00000048c0)=""/11, 0xb}, {&(0x7f0000004900)=""/161, 0xa1}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/134, 0x86}, {&(0x7f0000005a80)=""/99, 0x63}], 0x7, &(0x7f0000005b80)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005f00)=""/48, 0x30}}], 0x5, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000180)=0x0) r9 = syz_open_procfs(r8, &(0x7f00000013c0)='mountstats\x00') sendfile(r9, r9, &(0x7f00000000c0)=0x202, 0xdd) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000100)=0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 07:59:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000e7ed58061800000000000000307cf5cc5dca817d35240ad1b341b79c479cb4bc9feb5baf89a6acbc76e82212e12628fc0df3fa1521edfcdebe23c6890080eadb36ff33d6bf728c2fbf3867"]], 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000080)=0x5) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x00', 0x4106}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x80100, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) write(r5, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000001c0)={0x5}, 0x4) 07:59:33 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x9c}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmmsg(r1, &(0x7f000000ac80), 0x7c, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202042, 0x80) write$binfmt_aout(r2, &(0x7f0000000b40)=ANY=[@ANYBLOB="3e013f00d3000000e203000007000000ae01000070000000000000000000000044a3b5c064e4e5da83b9f43ec0bcb721fb41b39bdffb441c83a9ab20e25b9267e376915a54c9e2364ccaf39e8b301ede9ed521df6742cc74e340d05c52e25b64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b6a740500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe9b6f4c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f131c1880000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000004328370fb4cea355db00c8fd87ed668b5871db09eb08457b90f110c3551088e70f4d0f50e1601f25765999526ea2a5b173f8130ac42522e826d3d8e91cf0d662432c860c7e8f48"], 0x960) 07:59:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @timestamp], 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10000802}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x2d2, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, r1, 0x0, 0x1a6}]) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 07:59:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:33 executing program 1: socketpair$unix(0x1, 0x400000001, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\'c\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000018c0)={'vcan0\x00', 0x100}) rt_tgsigqueueinfo(r5, r6, 0x0, &(0x7f0000000340)={0x18, 0x1f, 0x4}) r7 = creat(&(0x7f0000000400)='./file0\x00', 0x80) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) unlink(&(0x7f00000002c0)='./bus\x00') write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fsync(r7) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r8, 0x1) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x19d}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001900)='/proc/self/attr/current\x00', 0x2, 0x0) ftruncate(r0, 0x40001) preadv(r4, &(0x7f0000001880), 0x2000000000000104, 0x5f) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0xfffffffffffffffe) socket$inet_tcp(0x2, 0x1, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$FUSE_INIT(r9, &(0x7f0000000000)={0x50}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x0) getsockopt$sock_int(r9, 0x1, 0x3, &(0x7f0000000000), &(0x7f0000000140)=0x4) [ 723.257362] binder: BINDER_SET_CONTEXT_MGR already set [ 723.265916] binder: 31393:31396 ioctl 40046207 0 returned -16 07:59:33 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = gettid() tkill(r1, 0x8) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=@hopopts={0x13, 0xd, [], [@jumbo={0xc2, 0x4, 0x40009}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x40}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra, @pad1, @calipso={0x7, 0x38, {0x3ff, 0xc, 0x7, 0x6, [0x1000, 0x7, 0x81, 0x800, 0x6, 0x5]}}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x1}]}, 0x78) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x3, 0x1d2) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x17) wait4(r5, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) [ 723.301024] binder: 31393:31396 ioctl 400454ce 0 returned -22 [ 723.316544] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 723.332831] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) 07:59:33 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x0, 0x31aa}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) syz_open_dev$loop(0x0, 0x0, 0x51d00) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0) ftruncate(r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001500)=[0x0]) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) dup2(r5, r0) sendfile(r3, r4, 0x0, 0x80000001) r6 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, 0x0) open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_vs_stats\x00') pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x11) bind$packet(r8, 0x0, 0x0) lseek(r7, 0x0, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @dev={[], 0x27}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) fcntl$setstatus(r8, 0x4, 0x6100) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_procfs(0x0, 0x0) [ 723.377740] binder: 31393:31396 transaction failed 29201/-28, size 72-24 line 3137 [ 723.406268] binder: undelivered TRANSACTION_ERROR: 29201 [ 723.643393] audit: type=1400 audit(1575187173.525:106): avc: denied { shutdown } for pid=31408 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 07:59:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x469, @empty, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="fa27344afe674e6b48f09fd59b31bec5e34ad1166deb5a850f8852f85b605d28861c6e18bad77a5f1c1471b8169099eb1959be7472070e7f86b607006adc9405cbc949f90ebbf3198c", 0x49}, {&(0x7f0000000100)="b284ecd635299ce2360ddf1f5c500227df9475e07351b757be93b88e", 0x1c}, {&(0x7f0000000140)="1c0dcc822b204cee7c87ca19cf8a6bcae7abb06f6ce6e18d3361e24b1b9bf029f5713420af4f22fb0447de3e4bac28d0f87b286897fb66cd11378109bc37", 0x3e}], 0x3, &(0x7f00000001c0)=[@flowinfo={{0x10, 0x29, 0xb, 0x6}}, @dstopts={{0x3c, 0x29, 0x37, {0x3b, 0x4, [], [@generic={0x9, 0x16, "5d6ce5bf0fa580be08f1abf8ad0babb6c1316839d509"}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xfff}}], 0x5c}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x1400, @loopback}, 0x1c, &(0x7f0000001840)=[{&(0x7f0000000280)="f7fb71ad8c363d27777ba96e403031838feb7cb00af62bc4b35d090d4a4fcea397d2b893ceab432f43dcfb929093397ea9d51f1bb04e423272a095852ae5842482caf1bad8dcf8685602b2c13128acb99ea02d1a925876a9a6942fe50998302808a0fb2df0218b1e80847476464fa5978d3dce348b8564a6a4e7cb922a878d3dce283750df87e8633a0620e61dd7c5c89544aa5d631d3eebc8c396c3357e1f00e39fc8cd08afdb407f5a4fb6f5e73ad3256313c5905174c6e3aa9e654a399a4688ce9bee8d1deba5fe92", 0xca}, {&(0x7f0000000380)="09abab414525edb70d8a7eb24758fe477f04f6a212fd5d46c335dcac5daef1c4f62b113b788a09a3d856c1adc3f7f35c15a2a31e8c351ac3f409a4b2e2b3cb5bb520bab70782851c791e158f5bd6453259f72278d952cf494e9db93d67469183695b1341d0f81432346764220866171f86ae988ec635568cf6da03a15b78c951a1c68e882c5c2351fa8fbab0d9a737798b04f6b4c6d57819f9a7e1f1973304813b56f50b5271119adc7c112e08", 0xad}, {&(0x7f0000000440)="9fadce1da9abe6ee62ffc3c3b95884a9ba21785727e7acc2e79567eaf112f050", 0x20}, {&(0x7f0000000480)="935e8ea36b1f1057782935b275b96bf5350c3baa03158ffa9dd05c7695895c1b47771b6b84230a03de4ee9bb7217bcc666d5bd18755736bb306a5d84bf5e78179222d3584e9959a51aa2704d6f7c9fb346c40e01a424018089d42ea76cec5ec30da1469b4025e113f8728f94bab379086d8f902574284bfdef0ca6246729fc67bdcd64ef6adc88c4954e63c8f02b0602cd2e9b84378224a68292d8715fc61239b49a6335a6cb18946053f0e45a0bd3b0d0fcd6ab906de11f03ab5883bb8a6cbd89f9d9e9598f22063559", 0xca}, {&(0x7f0000000580)="ab0f94e13176e06f44be5a3efaa57e534fdfedc7c4e53fbddd0bbfee2a9b67015a1d57a33dc45c3531947264593f83692ddfa44348e2c088bb50eb6a9db34418fcb40a6bc17920fce1c8b7eca70f3e4aa6e2739531392bcc8f330f7e1246a3c63b21e95915aca6f0", 0xfffffffffffffd1a}, {&(0x7f0000000600)="eaaae11342ff548aef9d259c9f5ebb71c251517a5b84260d5c3c7f37768c852168b066a5cb8f7c83520e9116b1806581dbd88a238fa7bf84272167d6edb4ecc4be97d8d9cd55f901d7087d1d425fce498f8b20532d13d43dade2ba1cfcf55a3b0bed4cab48f421a815cb8ce1486d5fd00431839c688bd74eb13ea3070dfd8dc55757474cf9fcaff13c05169a9f99119301b776b438dc4423c40c7ef66278a4b2610c9f7b405fcd876d3400c02e0c", 0xae}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="e09ffeeb86571357e3f58d28028d5ef032d7747a1785b2df2f3ee6902ece06e2a1aea5d7791d50baacfc0a13fa4e5989b6f3470c6641f4202abeefc24207eab2bcc349b03d7a0a612e8c55ec5dc82ca1f44f195acc2ad021a2a71c4f655ca091bee71de9f3ac62032028bb2661d5235e3ff5a2de6a1161a5cdc9a425d9fc23fe5d6c328330247c70a8bc2e5f605fedd802edc43a82cb2136d637efe3288e8617bdeaa9402b272c9623d02a8fd0", 0xad}, {&(0x7f0000001780)="aec2cb26471f61e6a9f1ab6ccc1836dee73583d5482b381182b054e646321f698576798ff86bba8074f86b65e28a9bd1300c1219d6f1edb9f3bb966c96997b56175d2c341c29dffb1dd1961557857450f78ecfe784057b1bad882fb5e8c0c6dc7075020537628bbd954e6bfe0bcd4aa333c023f271e18fc61fca8905d9abcb448a28ab87", 0x84}], 0x9, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x8c}}], 0x2, 0x1) [ 723.940461] binder: BINDER_SET_CONTEXT_MGR already set [ 723.952605] binder: 31425:31427 ioctl 40046207 0 returned -16 [ 723.982225] binder: 31425:31427 ioctl 400454ce 0 returned -22 [ 724.007855] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space 07:59:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000300), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfe) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000280)="64994f39083ef94158dc") r3 = dup2(r1, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x42, 0x4) r4 = accept4$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14, 0x80000) getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x8) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000400)='bri\b\x00ve_0\x00') setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) timerfd_settime(r3, 0x1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x4, 0x4) timerfd_gettime(r5, &(0x7f0000000040)) ftruncate(r5, 0x7e) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') setxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000380)='net/tcp6\x00', 0x9, 0x2) sendfile(r6, r6, &(0x7f0000000180)=0x74000000, 0x5) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000240)=0x0) waitid(0x0, r7, &(0x7f0000000580), 0x8, &(0x7f0000000500)) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0) [ 724.031190] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 724.050579] binder: 31425:31427 transaction failed 29201/-28, size 72-24 line 3137 07:59:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000009810100000d01000000000000000000000000000000000000000000008b15b25419b1f9e057198c1b94921e6eea5e6c012de335c6e3dc404862240695492d9f4d0b9ac90ca92d9f99d88e7bc70cdb7cb78d1a5cb5811ac651119650c94fc3251dbbffc093422c4d16797ee70ddd43798de1b9b36b15f6607d38576e39e6918b50828ad435381af64a6461e6a002d59ae8fcb882d0bae037a30a77394a6db4431a886088548395d0aa0007698953e41f7aff2a68df9581b509cef609b32fe878c1f352d739ef"], 0xc9) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r1, &(0x7f0000000540)={{0xcc, 0x9, 0x81, 0x1c4, 0x20e, 0x6d, 0x244, 0x7}, "6be8b1b69efac22161d897c0e62eb9eafa1c50e50499de1b64ffa208817c76484350aa29a8fad56fc109792d1608ddd9d48398736bb196ae8c8ad6d591263a092aa1f230666412c9d021125b1225ce27ef216ba4be3f8d5a3af6792f395aa6723cf45c518b132bba91f5abe915f3241c13071cf4fe6ed499f4af0a7e8a4b469243ce27149e79ad8da6107568bcbf1deb5016ecdbb278a8bbc1f632b33a8815c59f2cee5cb74fa815cec4fc70a8129bd1b401d74e83c5b4e91ad09102e3ac68d3b9557b59f164", [[], [], [], [], [], [], [], [], [], []]}, 0xae6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) shutdown(r0, 0x1) 07:59:34 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) read(r2, &(0x7f00000007c0)=""/218, 0x421ec77eb0065a3d) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000001c0)='./bus\x00', 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2, 0x80) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)=@generic={0x0, "ff80f096dc909d329774e6a8dade60ee2bdaabb4abb857eb5baec14815f0a69bd69feee1c43c775ac38e40b47b092d7cc165e503fe31d4a94a66d3c1b3b41af77425d24669a3ca462de284e1169bd5babd3312ebf023fe460ed630e38452416f2d51ff14660be2eed6bba6e5352188bd025b6f60cc8bc400a25a3350e207"}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f0000000080)="5c854701969bf896", 0x8}, {&(0x7f0000000400)="ff8d", 0x2}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10c}, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000300)=0x20000000) fcntl$setsig(r3, 0xa, 0x25) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0800000003019f00000000002000010000000000"], 0x14}}, 0x0) [ 724.302899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 07:59:34 executing program 1: syz_open_dev$loop(&(0x7f0000000480)='gtev/lo]r#\x00', 0x4041, 0x31d92a5c63f7335d) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0xd48f1f8357fa1f19) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x133) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') fgetxattr(r4, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x1f7) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') fgetxattr(r5, &(0x7f0000000100)=@known='security.selinux\x00', 0x0, 0x1f7) r6 = dup2(r5, r2) write$P9_RREADDIR(r1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x49) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000200), 0x0) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x6, 0x1, 0x2}, 0xa) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0)=0x5, 0x4) ioctl(r1, 0x4, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bind$inet6(r7, &(0x7f0000807fe4)={0xa, 0x4e26, 0x0, @rand_addr="d2641e680e3a9c5e0000000100"}, 0xfffffdbd) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r9, &(0x7f0000000100)=""/35, 0x23) getdents(r9, &(0x7f0000000000)=""/47, 0x2f) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)=0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}, 0x2000000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) r10 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r11, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3, 0xfffffffe}) recvfrom$inet6(r9, &(0x7f0000000700)=""/111, 0xfffffffffffffca0, 0x1, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x1b}, 0x3}, 0x1c) r12 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r12) r13 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r12) r14 = request_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='icmp\x00', r13) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000003c0)={'eql\x00', {0x2, 0x4e21, @multicast2}}) keyctl$invalidate(0x15, r14) sendto$inet(r0, 0x0, 0x198, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000280)="b5397c99066b47670a406d6362b7daa39ded4412aeac2d377a038a04fce75fa8278d5b655a23652c3f8bc159c8c8669e928174bc7a258261e1da4f513f24fa02023f29ccb7", 0xffffffffffffffa7, 0x40, 0x0, 0x2df) [ 724.343184] binder: undelivered TRANSACTION_ERROR: 29201 07:59:34 executing program 2: r0 = socket(0x40800000000010, 0x3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x60) write(r0, &(0x7f0000000000)="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", 0xfc) 07:59:34 executing program 1: r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) timer_create(0x3, &(0x7f0000000400)={0x0, 0x2000024}, &(0x7f0000000440)) r2 = memfd_create(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="a5105cdce749fa12aad3d7a2421731685a0838854db34bd74980bd73867edf326e0e9d00efd2b449307a45af6c0000ab0bd4c171f25c4defbded67154f1ecd821472b71e61d1038cad87c7a9fd237a0eefd1df992013953c9538da759a00000000000000"], 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() wait4(r5, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00') getdents64(r7, &(0x7f0000000040)=""/235, 0x128) getdents(r7, &(0x7f0000000ea9)=""/407, 0x197) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) getrlimit(0x9, &(0x7f00000000c0)) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000600)={{0x3, 0x0, @reserved="556ec4834d63bc9ded81fec67934e160cde4f008ed042c7750d39d16159ec9de"}}) fchdir(r6) creat(&(0x7f0000000480)='./file0\x00', 0x15a) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) unlinkat(r9, &(0x7f0000000240)='./file0\x00', 0x200) 07:59:35 executing program 0: pipe(0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800003, 0x11, r3, 0x24) r4 = socket(0xf, 0x800, 0x5) getsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 07:59:35 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r0, &(0x7f0000000440), 0x0, 0x7) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000840)='./file1\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x0, 0x7f, 0x7, 0x0, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r4 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r3) write$P9_RSTATu(r3, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(r6, r6) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) ioctl$int_in(r2, 0x0, &(0x7f00000001c0)) write$binfmt_script(r3, 0x0, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f0000000140)=[0x7, 0xfffffffc]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 07:59:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:35 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x5, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) r8 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0x200000000010, 0x2, 0x0) write(r9, &(0x7f0000000040)="2400000024007ffc00000100000000000000f6ff01000000000000000c00000000007162", 0x24) setsockopt$inet_tcp_int(r9, 0x6, 0x11, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffc00) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r5, r10, 0x0, 0x8000fffffffe) 07:59:35 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x4000e, 0x808, 0x5) r1 = socket$key(0xf, 0x3, 0x2) ioctl(0xffffffffffffffff, 0x8916, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$netlink(0x10, 0x3, 0x2) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x200000000}) pwrite64(r4, &(0x7f0000000000)='?', 0x1, 0x0) lseek(r4, 0x0, 0x3) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4}) pwrite64(r5, 0x0, 0x0, 0x40000) lseek(r5, 0x0, 0x3) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, 0x0, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = socket(0xa, 0x1, 0x0) r8 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r8, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) ioctl$sock_ifreq(r8, 0x89f2, &(0x7f0000000000)={'nr0\x00', @ifru_hwaddr=@remote}) mount$fuse(0x0, 0x0, &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r7, @ANYRESDEC, @ANYRESDEC=r3]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x2d) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="ce6f7f7c05905d7e51899b2b4729c8a0ec5ece2bc8c7325ad5125b4f711c9391065f6252a20a131e354f046fc28af2c0aae22e4c688f702f2762089de94535a8f1363ca17523a0f4e30afa6574fea911ee4d0a5a89c8668060e86ed2689f949d3f5bd6b3b58d1e13e8ad6a28c683a32c96dabced2e0435cedbc4e2b89447601e4568aae270d74fd490e5add0ab738ede861ff59419b0d8a024b891118607e8", 0x6d}, {&(0x7f00000003c0)="07526b405ad28c3b888395b74ecf6bde9ebbf7e9c83248f51600eed71666b67b9ee626b81a3f443cfd9f931d82f2aab66604eab4559fe6848e0a37cadb88eb8ee043d6a3772713682148bc338c92448c9856ba4a2248ed0ce51f92011012b9c24880ac3ea92dcdb51a52885325a8e2402f4fc3b4ef8876d56d98fc330b8b2f83930d2bc4a039816d2a96622ba8a294f5b98d494f6d01af2af8b670a9998789cf8fd424466716217b0c6ac5c0d0af30847304732010686f4cacaa898bb9aab81e6cea00", 0xc3}, {&(0x7f00000005c0)="7e122d30480b9263d778764ec5b5f6d8ae67e73e81698ff672712459ad081fda9682a30cd44078a491c3f55487fb30a8d339b073bab26b411ca7c5902ad49aa66adec9e64b2116162a6d3021fe8de7123214c53caf8e3886986ed91f2a29f6c56c9245d9e22b1d990216df8ef1b0e76c29a6f9713cdcbf7ecd6c74760ff27c8321a3bc5796afbea02765cf5f02be2d9778f0229425a8138d843bee7f2934e227b3a883c66297a29727c5ba0ddd0b4f129b9eee6c6d702b01", 0xb8}, {&(0x7f0000000180)="42331262a634222a415cde01475a16ebe848c3a41ee3d79776a232fb3e3079d7aa169c4a6b320a8a3dd6ce62cffed3230f00c96f94609e1eaf017994d09e62f20b77f3d3512ca609864a35b1324e82e0639932c6924a85729083eb", 0x5b}, {&(0x7f00000004c0)}, {&(0x7f0000000700)}], 0x6}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) r11 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r11, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) r12 = socket$inet6(0xa, 0x2, 0x400000000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @remote, 0x2}, 0x1c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r13 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r13, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) fcntl$dupfd(r0, 0x40f0d84bec729d0d, r13) r14 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r14, 0x4, 0x6100) r15 = open(&(0x7f0000000000)='./bus\x00', 0x10000, 0x0) r16 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r16, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) sendfile(r14, r16, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, r15, &(0x7f0000000040), 0x0) r17 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETS(r17, 0x5402, &(0x7f0000000140)={0x0, 0x10000, 0xfffdfff9, 0x7fff, 0x4, 0x80, 0x3ff, 0x1, 0x0, 0x0, 0x9, 0x7d}) sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0) r18 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r18, 0x4024700a, 0x0) r19 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r19, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627700000000010000000000000000000000000000002000000000000000000000000000852a6277000000aa0000000002000000000000000000002d076705ef54b7ea4eb213f8775ce7b29a1a5aaa55fa86b439b867526043bc48e481f59b819f02b70993cef763a33dd45a06012eb6cf163464c3d6eba068ad0745025aea91936b198a6bdff21e68219657efb250f858dc6846d621772fe33b44e50cfb8561229c49856c0f460c0594d88b2c04c3be257f41d8534d738c41f2ffd9b736c7b46c1dc07afdd5ec32db75f28e0beb682d79eb3b85e8c2daf356820e54fcd6b29d66554d0dc616c9"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) dup3(r1, r19, 0x0) syslog(0x3, 0x0, 0x0) r20 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r20, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00'}) [ 725.264006] binder: BINDER_SET_CONTEXT_MGR already set [ 725.280536] binder: 31469:31473 ioctl 40046207 0 returned -16 [ 725.304690] binder: 31469:31473 ioctl 400454ce 0 returned -22 [ 725.357056] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 725.431115] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 725.493707] binder: 31469:31473 transaction failed 29201/-28, size 72-24 line 3137 [ 725.548780] Dead loop on virtual device ip6tnl0, fix it urgently! 07:59:35 executing program 3: socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x0, 0x4bc7b0e2, 0x2}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r2, &(0x7f0000000080)=0x80, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xfffffffffffffff9) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r2, &(0x7f00000001c0)='./file1\x00', 0x180) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) getuid() lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)) socket(0x11, 0x800, 0x7) socket$inet6(0xa, 0x4, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xf9) r8 = creat(&(0x7f0000000100)='./file1\x00', 0x2) ftruncate(r8, 0x2081fc) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000200)={0x0, r9}) open(0x0, 0x141042, 0x0) [ 725.612641] binder: undelivered TRANSACTION_ERROR: 29201 07:59:35 executing program 0: write(0xffffffffffffffff, 0x0, 0xfeff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000004c0)) lstat(0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8000, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x11, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bcsf0\x00', 0x400}) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="3c000000000000000000000000000000000100000000000bc81cecaa8be3e064d8a181f5817900"/59]}) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="4d30a138183d7b6f0d178bb43a4365f8da1a9ba67908ed76f1406d477a56fbdc7f36d615ea2d6fd21deb712d14c9e2971e2d23471cefbf13b14cad937ddf10d01fdc6c82956a043bd9031a7cad4e4caa462f4708a41aa0118523046f21b95c362d65e3b2452e2c9fe3b6462ba03d0982"], 0x0, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x400, 0x0) sendfile(r1, r1, 0x0, 0x5) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 07:59:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$selinux_context(r1, 0x0, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r3, &(0x7f0000000200)={0x8be1}, 0x8) open$dir(&(0x7f0000000340)='./bus\x00', 0x10481, 0x100) write(0xffffffffffffffff, &(0x7f0000000400)="4160dc02a33d0c7f81fb01e5988bd8e15aba5d7fc9", 0xb) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x100) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000600)=0x400) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f00000001c0)) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x3, 0xc, 0x80, 0x7f, 0x2, 0x8, 0x7fffffff}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FICLONE(r4, 0x40049409, r3) fcntl$setstatus(r3, 0x4, 0x40400) socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(&(0x7f0000000380)='./bus\x00', 0x101000, 0x90) write$P9_RSTATu(r4, &(0x7f0000000500)=ANY=[], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_smack_transmute(r5, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000580)='TRUE', 0x4, 0x3) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000301ffff0000000000fdff0000000000"], 0x14}}, 0x0) 07:59:36 executing program 2: eventfd2(0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x10, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xffffffffffffff67) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3, 0x1100082) r2 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x2000005) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)={0x3, 'ip6tnl0\x00', {0xffff}, 0x40}) r4 = socket(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) sendmsg$key(r0, 0x0, 0x24000897) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000003c0)=0x83, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) ftruncate(0xffffffffffffffff, 0x2007fff) [ 726.175500] binder: BINDER_SET_CONTEXT_MGR already set [ 726.209943] binder: 31516:31517 ioctl 40046207 0 returned -16 07:59:36 executing program 2: prctl$PR_GET_SECCOMP(0x15) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000040)='./bus\x00', 0x40000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x8000ffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x1434946e053a74ce, &(0x7f0000000000)={@multicast1, @remote}, 0xc) close(0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) 07:59:37 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r0, &(0x7f00000059c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000005c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005c40)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000e380)={'bond0\x00'}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xbc488526a7a3d582) read(r1, &(0x7f0000000200)=""/242, 0xffffffffffffff1e) ioctl(0xffffffffffffffff, 0x100, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/31, 0xfffffffffffffe68) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$TCSETAF(r2, 0x5408, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000580)=0x54) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(r6, 0xffffffffffffffff, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r8, &(0x7f0000000280)={0x7}, 0xff7f) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') readlinkat(r9, &(0x7f0000000040)='./file0\x00', &(0x7f0000019280)=""/102390, 0x192d4) r10 = accept4$unix(r9, 0x0, &(0x7f0000000380), 0x80000) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f00000001c0)={0x0, r10, 0x400, 0x0, 0x0, 0x4}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4}}, &(0x7f00000003c0)=0xe8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x400402, 0x0) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000001580)={@mcast2, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [], 0x1b}, 0x2, 0x0, 0x0, 0x100, 0xbd3, 0x80c00109, r11}) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40047703, 0x100) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200000, 0x146) 07:59:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) r41 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000001c0)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffc62) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x550, 0x140, 0x140, 0x140, 0x46c, 0x46c, 0x46c, 0x4, &(0x7f0000000080), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, @mac=@dev={[], 0x19}, {[0xff, 0x0, 0x0, 0xff, 0x101]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x5040774838ede14f]}, 0x2, 0x2, 0x6, 0x9, 0xf55c, 0x0, 'veth1_to_hsr\x00', 'rose0\x00', {0x7f}, {}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="b40d68caed6b", @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, 0xf, 0xffffffff}}}, {{@arp={@remote, @remote, 0xffff00, 0xff, @mac=@dev={[], 0x1b}, {[0x0, 0xff, 0xff, 0x0, 0x7f, 0x7f]}, @empty, {[0x0, 0x934fdff96094bf4d, 0xff, 0x80, 0xff, 0xff]}, 0x2, 0x1, 0x2, 0x100, 0x3, 0x4, 'vxcan1\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x382f13a05eb654ae}, 0xf0, 0x114}, @unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:modules_object_t:s0\x00'}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x59c) fchmod(r1, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', 0x0, 0x0, 0x0) 07:59:37 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x21, &(0x7f0000000340)={0x0, 0x0, 0x10001}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x0) read(r2, &(0x7f0000000000)=""/128, 0x80) signalfd4(r2, &(0x7f0000a71ff8)={0x80064}, 0x8, 0x0) 07:59:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syzkaller0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='hsr0\x00', 0xffffffffffffffac) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000d40)=ANY=[@ANYBLOB="000126bd7000fcdbdf2509000000140003000800040002000000080007004e23000008000600ff07000014000300080001000000000008000500ac1414aa08000500020000000800050000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000140)={@remote}, &(0x7f0000000380)=0x14) getsockopt$inet_buf(r3, 0x0, 0x2e, 0x0, &(0x7f0000000300)) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000008c0)={'ip6gre0\x00'}) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="9f0827bd7000fcdbdf250b00000008000400000000000c000100080004004e22000008000600c604f3393000020014000100ac1414aa000000000000000000000000080005000101000008000e004e2300000800050000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x38ba6394d1b56b23}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) connect$inet(r0, &(0x7f0000000100)={0x2, 0x1, @rand_addr=0x5}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 07:59:37 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5500000018007f5300fe01b2a4a280930a04000000a84308910000003900080008000c00010000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000", 0x55}], 0x1}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1b6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x800) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000280)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r4}, 0x14) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x7) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') r5 = syz_open_pts(0xffffffffffffffff, 0x40102) ioctl$KDMKTONE(r5, 0x4b30, 0x7f) [ 727.543702] binder: BINDER_SET_CONTEXT_MGR already set [ 727.551617] binder: 31551:31552 ioctl 40046207 0 returned -16 [ 727.560329] binder: 31551:31552 ioctl 400454ce 0 returned -22 [ 727.569439] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 727.579722] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 727.590011] binder: 31551:31552 transaction failed 29201/-28, size 72-24 line 3137 [ 727.611427] binder: undelivered TRANSACTION_ERROR: 29201 [ 727.665395] IPv6: Can't replace route, no match found [ 727.698167] IPv6: Can't replace route, no match found 07:59:37 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='veth0\x00', 0x800000000000, 0x200, 0x8000}) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000100)) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="11634840000000000000cf47000000000300000000000080000000000000000000000048000000000000001800"/54, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) read(r5, &(0x7f0000000280)=""/176, 0xb0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_ivalue=0x7fff}) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000080)={'eql\x00', @ifru_ivalue=0x10e8}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$inet6_buf(r6, 0x29, 0x0, &(0x7f0000000040), 0x0) [ 727.770359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 07:59:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 728.108149] binder: BINDER_SET_CONTEXT_MGR already set [ 728.127475] binder: 31585:31587 ioctl 40046207 0 returned -16 07:59:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f00000001c0)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffc62) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x550, 0x140, 0x140, 0x140, 0x46c, 0x46c, 0x46c, 0x4, &(0x7f0000000080), {[{{@arp={@local, @multicast2, 0xffffff00, 0xffffff00, @mac=@dev={[], 0x19}, {[0xff, 0x0, 0x0, 0xff, 0x101]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0x5040774838ede14f]}, 0x2, 0x2, 0x6, 0x9, 0xf55c, 0x0, 'veth1_to_hsr\x00', 'rose0\x00', {0x7f}, {}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="b40d68caed6b", @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, 0xf, 0xffffffff}}}, {{@arp={@remote, @remote, 0xffff00, 0xff, @mac=@dev={[], 0x1b}, {[0x0, 0xff, 0xff, 0x0, 0x7f, 0x7f]}, @empty, {[0x0, 0x934fdff96094bf4d, 0xff, 0x80, 0xff, 0xff]}, 0x2, 0x1, 0x2, 0x100, 0x3, 0x4, 'vxcan1\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x382f13a05eb654ae}, 0xf0, 0x114}, @unspec=@AUDIT={0x24, 'AUDIT\x00'}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:modules_object_t:s0\x00'}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x59c) fchmod(r1, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000480)='system.posix_acl_access\x00t\xf2\x02\x03 \x10\xcai\xa7\x8e\tH1\xcf\xacJ\xa6\xa7$\x92\xa0\xfb\xe6\xeaHq\xa6b\xdf\x11\xd3\xe53:*\xef\x17\xc0@\xc5\xbc\x16\x151\x92?^\xc1\x1e\x89A\xf6\x04v\xdaE\xb1*4\x91F\xd1\xee\xe2\xbd\xd0\x9f\xf4C\x8dXi\x1d\xe5\xc8\x14\x95/\xb0a:A\a:.\b\x10\xa1\v\xf0~Q\x87?p\xe9\xf1\x06r\x84y\x86\x9f\x01V\x17@\x1b}f,\xaa\xde2L\xd1\xa8R\xec5\xa9\x9b\xd1\xbe;\xd2\xe0f\x95\x1aP\x98\x9b3\x0f\xc0\xfb\x0f \xb3=[\x11\xac\xaf)}|Xn\xd7\xcf\x82\x17\x02e\xe6\x9a\xff?\x19\xe4\xd5-+\x90~\x1e\x9a\xf8\xcd\x80\xde^Hz\xf6\x9ch\x87ya(y;$\r', 0x0, 0x0, 0x0) 07:59:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000380)='./file1/../file0\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f0000000300)='./file1/../file0\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) lseek(r5, 0x0, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/uhid\x00', 0x802, 0x0) sendfile(r5, r6, 0x0, 0xfffffffffffffff9) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r8 = eventfd2(0x6, 0x801) sendfile(r8, r7, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x32a5449}], 0x340, 0x2000107c) r9 = request_key(&(0x7f0000000580)='.request_key_auth\x00', &(0x7f0000000500)={'\xf1\xff\x00', 0x3}, &(0x7f0000000540)='/dev/uhid\x00', 0xfffffffffffffffc) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='nodev\x00', r9) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 728.422617] audit: type=1400 audit(1575187178.295:107): avc: denied { bind } for pid=31596 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 07:59:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 728.558523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 728.720828] binder: BINDER_SET_CONTEXT_MGR already set [ 728.770927] binder: 31609:31614 ioctl 40046207 0 returned -16 [ 728.808753] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space 07:59:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc020104}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x94, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd96b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4e, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x16}}]}]}, 0x94}}, 0x14000010) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) [ 728.862561] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 728.942816] binder: 31609:31614 transaction failed 29201/-28, size 72-24 line 3137 [ 729.033076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 729.086079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 729.131809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 729.151844] binder: undelivered TRANSACTION_ERROR: 29201 07:59:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f0000000400), r2, 0x0, 0x48, 0x4000000008) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)) r3 = creat(&(0x7f00000002c0)='./file1\x00', 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@random={'user.', '\x00'}, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000700)) fsync(r2) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000380)=0x1, 0x4) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) getpgid(0xffffffffffffffff) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000600)) lstat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000740)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000300)="9b7ff400a70739b591417605f52bb56a73e5ea3bc193b67c11ee1ea0958f12b67297291ccaaaea545d039bb04dce0521ad03bd5182c7714ec9e1b5f32c2ac47560a7ab9dd9ecf94ddca46930206e3060", 0x50) lstat(0x0, &(0x7f0000000640)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4000000000001b9, 0x0) socket(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[]}}, 0x0) 07:59:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "e460bdb3e6ceacfce550e086b3264d9ea64e0a35d0864a4082453d8db2a0264e", "1186e566754c8dc2c5966b7f3da77c2b6f524f83db80aa3bd921f77f2fd89d8e", "3c8dab5397395b82d3ebf0a4d126e266ee335a8d96c450ee5d0e9af091764744", "9ab4bf586b1f29463c6a251a62cc82f42e289be0cd5ce25a21428a44fb4312bf", "2f9086b4653d5a6bc0c735505e2c000093e2eb002447261e5aea6199b66a0ad9", "1e94f6aacdd64002907e1e4f"}}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) write(r3, &(0x7f00000001c0)="240000005a071f001007f4f9451504009e49e5a50a04f51108000402e103028800038005000000b0112e8a02e73a54f245164202a90fba4e3be72f8cd33acc517c1fb56ecca83ec110d187a2354345ff1cbd787562b417308aee6c72c1a0e249131ac25adc47c24ba9d5e7e67290f7213307e70469f138a22f73316bb986243a51d2c2adccced5e9aaa1b6c05b6bd10e1a0eac613219648e1e61504564afdd432b80377e000639cb65f53810f071c7bf7698", 0x39) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'ip_vti0\x00', {0x6}, 0x5c6}) 07:59:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x300000001}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000380)=""/171, 0x6}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0xb682dd1c1e32632d, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x18) 07:59:39 executing program 3: r0 = eventfd2(0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$getown(r0, 0x9) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00&y\xc9\xeb\x00\x00\x00\x00\x00 \x00\x00') readv(r2, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000580), 0x25b) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x10d, 0x0}}], 0x80000000000024d, 0x4000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0xa201, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x0) syncfs(0xffffffffffffffff) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x80000000021, 0x4) setsockopt$sock_int(r4, 0x1, 0x3f, &(0x7f0000000180)=0x7f, 0xfffffffffffffe7d) syz_open_dev$mice(&(0x7f0000001940)='/dev/input/mice\x00', 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/ev\x00\x86eychosd\x00', 0x200040, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x80005, 0x1800000000009) r8 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r8) r9 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5c, 0x105082) r10 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r10, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r11) write$binfmt_elf32(r3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0xf56) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000480)='./bus\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200e0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x1, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x4, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r8, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000006d00)=""/4096, 0x1000}, {0x0}], 0x3) read(r12, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r9, r10, 0x0, 0x180003) 07:59:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000440)='net/netfilter\x00') openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x84000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='./cgroup.cpu\x00', 0xfffffffffffffffd) keyctl$describe(0x6, r5, &(0x7f00000003c0)=""/76, 0x4c) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x208200) open(&(0x7f00000000c0)='./bus\x00', 0x200000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8000fffffffe) read(0xffffffffffffffff, 0x0, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RREMOVE(r7, 0x0, 0x0) syncfs(r3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 07:59:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() ioctl$TUNSETGROUP(r39, 0x400454ce, r40) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 729.512158] binder: BINDER_SET_CONTEXT_MGR already set [ 729.585825] binder: 31636:31639 ioctl 40046207 0 returned -16 07:59:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = getegid() r41 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r41, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r41, 0x400454ce, r40) r42 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r42) r43 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r44 = getegid() ioctl$TUNSETGROUP(r43, 0x400454ce, r44) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r45 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r40}, {0x8, 0x7, r42}, {0x8, 0x5, r44}, {0x8, 0x2, r45}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r46 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r46, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r47 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r47) r48 = getegid() r49 = getgid() r50 = creat(0x0, 0x0) ioctl$TCSETAW(r50, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r51 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r51, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r52 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r52) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) syz_open_dev$mice(0x0, 0x0, 0x0) r55 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r55, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r56 = getegid() ioctl$TUNSETGROUP(r55, 0x400454ce, r56) creat(0x0, 0x0) r57 = getegid() r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r59 = getgid() r60 = creat(0x0, 0x0) ioctl$TCSETAW(r60, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, 0x0) r62 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r63 = getegid() ioctl$TUNSETGROUP(r62, 0x400454ce, r63) r64 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r64, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r64, 0x400454ce, r63) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r65 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r65) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r57}, {0x8, 0x2}, {0x8, 0x3, r59}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r63}, {0x8, 0x2, r65}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r47}, {0x8, 0x2, r48}, {0x8, 0x3, r49}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r54}, {0x8, 0x2, r56}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r66 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r66, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r67 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r68, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r68, 0x400454ce, 0x0) r69 = getegid() r70 = getgid() r71 = creat(0x0, 0x0) ioctl$TCSETAW(r71, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) r73 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r75) r76 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r69}, {0x8, 0x3, r70}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r72}, {0x8, 0x7, r73}, {0x8, 0x5, r75}, {0x8, 0x2, r77}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r78 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r78, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r78, 0x40046207, 0x0) fcntl$getown(r78, 0x9) r79 = creat(0x0, 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = getegid() r83 = getgid() creat(0x0, 0x0) r84 = getegid() r85 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r85, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r86 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r88) r89 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r89, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r90 = getegid() ioctl$TUNSETGROUP(r89, 0x400454ce, r90) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r80}, {0x8, 0x2, r82}, {0x8, 0x3, r83}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r84}, {0x8, 0x7, r86}, {0x8, 0x5, r88}, {0x8, 0x2, r90}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r92 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r92, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r93 = getegid() r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r95 = creat(0x0, 0x0) ioctl$TCSETAW(r95, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r98) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r99, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r99, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r93}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r96}, {0x8, 0x7, r98}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r100, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r101, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r102 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r102, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r103 = getegid() r104 = getgid() r105 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r105) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r107 = getegid() ioctl$TUNSETGROUP(r106, 0x400454ce, r107) r108 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r108, 0x400454ce, r107) r109 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r109, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r110 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r103}, {0x8, 0x3, r104}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r105}, {0x8, 0x7}, {0x8, 0x5, r107}, {0x8, 0x2, r110}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r111 = gettid() ptrace$setopts(0x4206, r111, 0x0, 0x0) tkill(r111, 0x17) getpgid(r111) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r112 = getegid() setregid(0x0, r112) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r113 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r113, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) r1 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @dev}, 0xfffffc82) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc) writev(r3, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea110058f805000000", 0x29}], 0x1) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x8) open(0x0, 0x600882, 0xe) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fadvise64(r7, 0x80000000, 0x4, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000100)) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc) writev(r4, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea110058f805000000", 0x29}], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @loopback}, &(0x7f0000000340)=0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x1, 0x4) [ 730.292666] binder: BINDER_SET_CONTEXT_MGR already set [ 730.325551] binder: 31665:31666 ioctl 40046207 0 returned -16 07:59:40 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus\x00', 0x6) setns(r1, 0x8000000) fchdir(r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x2, 0x0, 0x0, 0x1d, 0x6, 0x64}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/exec\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000940)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000580)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[]) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000740)={&(0x7f0000000040), 0xc, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="64000000f501e2a7334f450b53a86b544fc9aa77dbab2c18af528bece978ebad1256ea000000808b76cc0aaf77a8e29f6bec87cad295bd816add1beb86d6deb4ad47016029d9f66890b28ede69f75d028fbfa39bc2dab32e517a54d7b426a20f8d5e8e1b104e270fffc1f92a51df347765d9f11f459409d0798520bf0949ba29b616c6db", @ANYRES16=r5, @ANYBLOB="10fd0cbd7000fcdbdf2515000000440009080800020000000000080001000065d900000008000200e55d0000080002009104000008000200a874190008000100f7ffffff080002009801040008000200040000000c00060008000100090000ffc2ac1490be9197db688dfbdc4ca526c241932f2c30fc10233b32ec2696651487e0045ef38571ca0ae3cdd41cfc3e69463f8d2d8d72a6ac53cc9e6f7c7669c858b10956f4feab4e7e38ef61b9b52367e62e93a24412d644a8a3e72095ad4bca66e7d52ae8252f7e65d7dc636ea3e62591d6cd2b7e76f6b2e883cb94b9d16526f4"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000894) sched_setparam(0x0, &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r6, &(0x7f00000a8000)=[{&(0x7f00000000c0)="580000001200192300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000300)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/checkreqprot\x00', 0x120001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@broadcast, @in=@multicast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0x130) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x20000, {0x7, 0x1f, 0xfffffffc, 0x220}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x5654807, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x5654807, 0x0) dup3(r8, r9, 0x100000) 07:59:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(r0) creat(0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x0) unshare(0x200) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') wait4(0x0, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r7) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f00000005c0)='trusted.overlay.opaque\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000600)="38617344ddf88ef2a971b1c46edd15c3b18211ed90a5ea7e4b8bcbfc564eb493e83d797d2ffd9623461875328e4b1c9cb516f352221a0363ba4afbdf796052cfed2697f0f708b5551cd5e2d0e064f33b49f4d9bb45687275640f9ccac4d44760c9de4640b9dca3b829ab6d74f48ddf0f0ac0773d8d41ab121e2260eba29d65b51641121b3a881ca47431e5e1953f119cbcad00"/157, 0xfffffffffffffed1, r8) request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='&\x00', r8) r9 = add_key$user(0x0, 0x0, 0x0, 0xe1834a367390b774, r8) keyctl$invalidate(0x15, r9) keyctl$assume_authority(0x10, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000380)) socket$inet6(0xa, 0x10000000001, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, &(0x7f00000014c0), &(0x7f0000001500)=0xc) setns(r6, 0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) pipe(0x0) getgid() [ 730.430866] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 730.479491] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 730.514149] binder_alloc: 14648: binder_alloc_buf, no vma [ 730.545824] binder: 31665:31666 transaction failed 29201/-28, size 72-24 line 3137 [ 730.560457] binder: 31669:31688 transaction failed 29189/-3, size 72-24 line 3137 [ 730.570470] binder: BINDER_SET_CONTEXT_MGR already set 07:59:40 executing program 0: getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) write$UHID_INPUT(r2, &(0x7f0000004240)={0x8, "a4695c532a8840cd6fab5414a4526f2c79702ae7d3c6501814b0f7c64161e134364c387ed362863f529d0903deef786d215310eaa4c13c41250db8794e3f0bf1be5e5d1aac357c8b6d3f43c2219de07cd2219aa3c3f251252b86ebd758fdaf0e156ad88b2e624d1e405363aebe4aa0f31ce7f0e51706273ea3b7c2cbd7d77d314a4adb25485c5e5bde9b998ae95c0581836fa841e241749ca8b55b9c4705c4a8714bd7165f7d0999adb658a9507fa64c7a41e58fc346dca457710f13e9699b0e175c7523b55aa74a54e6cccfb463a2d6a89451f85ebd962b042418e5cc266abd4f41bad18eb2639379b55aaf6e89d92d01bfd995274711f8e72094b45a4b79b0995e38b28f6633237f105a7ec050896f833de886c1d31e3c14f48ba185043d7f3ee7231fbfd2cbd31ef3454027c26940714dca40c74dda73812edb9d2adc7354ce2633aeeadbc6c14e169d994d7ac1b68043fc1b3727b2f96706da8c3f3b3771d5beba69188fca57852785f46cb373c19a3374d8c041f92ab3820d2a1eb525237cce0f7a99e0c66cf681e7ea950e062cfaf0e8d8d834da0443703ea2b63568d29cd2d7199b6ef6784e0dc8a8979841d4ddea77b998619e8eae45a9ea9bb1464ad2aa2df228e60a65b5e83ad369bc367b69a8207d8f0904b4c389c973ec705b73b666e2f298d10f57f098ed0af810231358dd151ea5bc03675bf1c9fe6ac570ad628152c8a2b8570d849c8a0460b617fabda499cd10aa0e366b8320e14b1bec56c6a96165d23b9806c0c4f86d2d4677a95a6c0e627aae99c235b06bf1432e7c81dd827e43fff9ecd24f7531ca4cfacf478f66ed764fcf53d773f4b9abe8185a661fdc9727a478f422a4bb1a7edeaf68b1e2ffa68e3068a7de077cedc7554de7a90dd2b2483a47814cc7bc85eb1a972246778db8b33bd522ec79aefa3529a000c58b570b940e55c0484386325f4097b13bf337759b0bec9321fe39e521a546a7563eb675a61ce680dee112f368343ca56332c28f44f95024ae1d77b411abe6ed80c645ce69daee65e2505d13b2d0f2f1dfe35ea7c5340c6eb70c4c34350fbcb9945e2ff4759baf55b01db49b1a7d1011eaee4811150e7f5caf7e93b0746efbc52f5733c74e27b8f4631d3852d544eef295eb18a2bf2369679c2bd9a9c5939803c6ea153d9c15dd4112789060da7b1d5b7e41b718a68a10f1d4f3e3298c16c5ab69a6c7187ddc82f2d3e8cd737afb7187dea3076359fac2b40917305d9f831b2ea698051f6560fc3cc6d24dbd148abe8e58f7d8127a9615ba027aa35aafc88debf06dab3ca38e01977102164747b0eb568009887342bbc14e274e1d12729b770887f9aea18d2ad6441849842d51d41907428ab28e36e815103360ef3c121d5a602231413d2825c0bc1a2f04614920b113e871ae1da79eb4f3a8528effc9e738c48eb2ba7843332b85bcc4d4f4cbce5090967fd6e88cd63a3d03f5c79f36ccc45be3941b3b39fb19e51298b8671930a5772ed878b057572b6db8ece6ac3f46a062a8fccd0a3b9133c0573419e3a2d5b7ab5ca40033e35918449d04428ecb9febcabeff937fba5ee21e75707de789432ec0680d3f952927ebb85e5609aebf96e8c84d88056d369493c875ce0f9e8ae5fac48912a7689914f9be71773d3f004306406cdb761c127382e70a77ac6da6aa98d57a575b218b72e2d90a66bcc130600b52765da0b017bab0e3f3e3689cf1220329ea86a03cd2f6d2b54c95364c839ebbc315153dfbc97d6961d7f0e6db56a93fa1d7afeaf479fe47ac35c92a398be921769f3f7c422cfd5ffc372f85ee3f619974b8c627568430c64d84f6aaf69a1276a7cf4cf57c057257181f15e82fd37271278da6235f34891fc702894cca12001e263d74a6e18a45bc0ebd1600987c3237804507a4923f4700ebcca3684ef35f8e4c0a8b9875cf92aec862519f5c0cdcb1d5b90710a88d39bb919c0820f25685085d179bd48ebce21c4ed697a9def3ad887eb4652ac5919ffb2ff34e78d53123e9c1ae9e50447d77560c3702d818ba1e9f848123f31ca6236457daeda138846b55017b426fd8fe0e65b5c1d8d936bda2e7e9f67ec0faaada6ebafb2440071f0c50aac2f0a5059dce32998799524bd6412c13bbee27b891de386bdc7b4a96a3e495300e82ec8d837b95b9af4b1171ea7640a27f27b3befeed4b864b5442f889b769206d6767b5815a74df960824fbcab31ab93281db2b651a838b790e52fb4c2ed29358cfe44c85f5453af706eb96ebc3140697eb914e803f3965614c15ca7fb5f6c632007fe7c56acdbdb0a197341d44f024cbe174244c0acfb1bd29f0d628d037956ad4434aa3a71ecd29556f3a23fbfc3735904c2ce5e84fd53bbc43e924940f307a81706556c45f53630c311aaae9ce4565aed2339d95bbf3107a90a3b8a6e95e8415a2ae7b8841dac758d52b7bb22cbe0ebad79900e9c7c40cca8799cca66b3571fbecf68e3ea2e3880bc2cbed1ad1dabd69593e1a968da410c5d8538fdc8199ee310a3a2b14c642e388e9f1413bb90f876aa478006554a01f6b0d41d2f5c8b7ff20d7cb79afd13f6ab3f1331a8de154a60da33aac5310c174cd54a79985772fce707da4a9ce7c5b7b60e9a9a58cd0aa4343c45d4acca17b04214076800d3ab346142ebe4bdf3c7094e73a552b1929af8c5a5603188cb751b35a98314694ecbf71c05e7997a322eec7a659c44899f7c53c8d3477d3c36f21577620813b41223aabdc72d772a2f60deb3b55bf1b5c1455371f14b0ad57af2cf6cc5b25793935d9d1fe24a2c54b5d1e45b0d69c7f697ba26595bd30e8361adee3e84b2bb08410435ae348947b1c389d5bb5a97b4654241f9b9bc07d968a6d963200e0f4eed7dc80780dadd6b570a2c5a6e9dd93712e6103bce24db15d906ba03085c06d5d963d3452f742a386661b1679f9a2cae3b9debf35c01a82a5e869cc63aabb113f6a37a3454b134108dfec975ac6192be9c699321ef5280e82e13a58d6c6f68d8d3abcde2d2fd047d8e08650c715932bedc0afbadbfad32dab976687c4d7dfc40d95399716f410d75e8d6b4e5ad85562e5604d1e414cecc3941b2e9cfd1aa2a6f31b2d509420dab96d19fe6627420c0c454f48b9263d2af216ab0858590005d57412234755b706da1a7a145fce8e007969695d00bb462270ac95fd1b483686ff6db7ffe576a8df61d80604443452236e27adbb46d4a70f2e7ccbf1735a9e9fce0f56859fa00c011742f5ded1a3631a8addbd1c412f4b404a6c7164b33f378c95395b8ce6185f90c93a9f6b33f905b03c2089554bef2991428d4d2b27e001926e714eef50ba21b7a9c048cbf2d72576a82b1145f40c9e8a2dd79684fd5c3319a8076b5f88632930542348241ee0c0b737c9474a4448d2a7d1ad2d81a5bcd4566520b678aedbb3c54cdc7dd6d03bb60af951eee9dfa5b92ebd2b6e4edf1cae7feee75c901b8fbef195921076aafce7c34732c3c67093587e25860e94028768b98c1980038fce54fb76d2531b9c3f945630ee9ec1afa2acba1e66d2ccc8b966c0470d5528cfc119c0ba14cf84c5c2a2fbcf99657c3c73ab20b32547275bba54d45eaf49e86622467e82d173d8dcaeaf5eba2a24abbdbeb5bcae6ff222d49eff8994c31297ee3f53ed0595ca90aa6315d30cffb5fdf27bd68f78ff547d4e1b443161c130cdb02f38bd0c5fc5eb86dc8a7cd9c3956d8aec7b9f4d342edffef3b819657f0891be01b974409e7a5b2ae63ac68bd7696e1b6ab1da8ee48ee955a3a12d14ce067c9c3c8b752e37c843fa9f5e9f3a1fff75ad6ff6366b34464a397bf6c74a6488912f2bb8fb379d1806a9a635d969b5818eaf11b7cd7377cc684d71f3745082efa2f49f64a057050c5f5c171b93a64dc93bdf89a181a70d38dae0731e5863c62735d7a4b28419abd22126a00fc9a5a75a74691caddc54d5426b81df6448efebc6b5105c4d648dcc23ae4f9ec7611aaef8030ea44d38952dd9cb32ddb484d3cd4e6b0174c58fd7288352f1639f78f2fd2113523462c4999a92e5d9e0ea1541c3ff9b749b5a37687f0499b1a13fb2590f7c76a1573f673ad8503845257c588c3049350e97ed93e24312ff82620d42f7229c4ac1094203e0b2022e9a6173d000e7644f867bfb7a142d4fc2e35a54de4e9e23516cc5cdce027b62ef24fc32cd10890e4f2fcf26a0f7b40039225ff19ff35ba97d9ecdb6e6d2cd211663dcc0dee1d41409f2d8410bf0bc9ceb490d292a3d97cc34ebc647354d8487b21c306e80b45dc57816924fee5e24e30915967e18a952b007da91d270af88fab23dd420fdb102387503280d436f644ced6868a2ab7ab2b1374969db72ea9c612636b858547a9bb187d2639fc30be948760bc634e572718efd0dad2fe4f6aaf44b0c5823e6854726f1d46bf41dd8691e58a77bdcb9afa63f3b0e1fbb0e5cafa7605406769d62a3f7e399e7d6c138adb02de7f4843783b0dc06f4c4539b02d565e79e81eba20609ba8a8914f74899ab42ac92b03580cfb5e457ca5d0b747a69ab9edd278cb59f7e6bd381a483d92dc866e9ccaf780b91a6f6993bab6f73d52593fe2cda79561ffbed677f5742f7844d284cfd9da34cb64b423073a4b3cff07fa6f18eea3a3ef843146870763c766d16c782517acfa89fb3d273e70dc8ba22a56f1d840c5dc87c31e4df33938c0a0dc78ea35872ae89b23290e786baf581ba3bcd995e5bddf22e6a54a6d6ae093278f6fbbd3e514cfea144d6901073e547d143c329ea2a1f97ab9aa766a2c0324890c8cb1aec1b21c88edfbb8f0d814848f31bd4a0370cc3cba4765c50975c8349da805df6fe1b67904b5aa70687e61f6bef1179e30a9b795704d11bdd7aba532bc48528574a3dfadd9f281c0cbfecd991e32c901b8d7cc57744ce5158f2259473f37e025c3f1ddae6c51cf50c2bc10bbdb17d01ac0f4807043cdadb0530283e52b6e82516603a1d7079bb45ae71c15b23a9877bc2ae706da4331b9ac9ab6e1ec8fd4041894ce2c989dc1c95802e3d443ff2cf05ec7e8348df32ae0202420dadbf6e23de917c76ab512426af82adea7a5fd72fdef2801851905ec73b83bfc8c6e63e572616a687851b8afa9e3f6c1ee357b6ffa917eeacd1005c67bced235f61436cb44dd9bf6842c8ea5ba281f77531e1d08a7a09ef0c19d2cac655bfb81ac4b7ad40083d09d9b83e7d56ada5b972cf6ee53ca693af576fe22cfde1796927aa2b54378884a93e80ecc992cf298ba99e4ad5b9d135af6e237f24c519f078b30ab1fa028438976935751d840a6078ad33f1229adf5663b5ba3c8abcff8ff30183446a62aae8a0937f8bb418e0d0c984c441271ccfc3984cdc23793346cfc36809f5ceec330e73e4f13d5a17726526b6e39931a8de1fb1d998680747f01724b117710759b9d29bf68fda8529473eaeb28182e502220a6bf5cdca4c118d2edaefe1ffac007bdb8f246407dba1f7ae277298b765e448b501e1c57e5f9e620fb6a894506d7e81fa92bd5571b32edaa3fbeb1a84e9dbd2d2e61d31bfface3ad615837f3fa95f2ed37c9e96cc045baedb79ad9c7ff37bd96798e6cce6a8d2fc8453c3a44865e1fae5e5fb551126038ef2ed4f6f7b6e186072aec9d62b8670f972eabdf12f13a1d3be51d037b25ee0552772c1fcfecccfa2bb445a34daeb79d4a1bcfbf70e718091dd72ca46069731c38775136d7256e445b58419ea845dd0f65a8a1daf88c750731a0092297c4c964005bc9cf9ec215f07c18a395b350cab70658bbb", 0xfffffffffffffdd1}, 0xfffffe48) sendfile(r0, r2, 0x0, 0x20020102000007) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x4000, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080001}, 0x4000800) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000004c0)="d3", 0x1}], 0x1) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000140)={0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_mr_vif\x00') madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06055c8, &(0x7f00000002c0)={0x1, 0x9, {0x52, 0x0, 0x0, {0x1, 0xfffb}, {0xf74a, 0x1000}, @rumble={0x9, 0x800}}, {0x51, 0x4720, 0x1ff, {0x1ff}, {0x1ff, 0x4}, @rumble}}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$int_in(r1, 0x5452, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) fremovexattr(r7, &(0x7f0000000180)=@random={'system.', 'net/ip_mr_vif\x00'}) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930000) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) [ 730.623527] binder: 31669:31692 ioctl 40046207 0 returned -16 07:59:40 executing program 5: r0 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) r4 = getuid() ioctl$TUNSETOWNER(r3, 0x400454cc, r4) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @mcast1, 0x7}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r6, 0x4, 0x8d264d94b88cc547) ftruncate(0xffffffffffffffff, 0x8008200) gettid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000380)=0x3) r8 = socket$inet6(0xa, 0x400000000001, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) set_robust_list(0x0, 0x0) setsockopt$inet6_opts(r10, 0x29, 0x3b, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x02\xdf\x01\x00', 0x40f}) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x40, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f00000004c0)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000400)={0xe7f3, {{0x2, 0x4e20, @multicast1}}}, 0x84) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x98, r11, 0x620, 0x70bd2d, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x40051) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) [ 730.713439] binder: undelivered TRANSACTION_ERROR: 29189 [ 730.716345] binder: BINDER_SET_CONTEXT_MGR already set [ 730.716354] binder: 31669:31684 ioctl 40046207 0 returned -16 [ 730.774897] audit: type=1400 audit(1575187180.655:108): avc: denied { getopt } for pid=31691 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 730.805601] binder: undelivered TRANSACTION_ERROR: 29201 07:59:40 executing program 1: symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') sendto(0xffffffffffffffff, &(0x7f0000000380)="81639f02d534c5c1c6ceaf3cb7f8bd62fb76f5607b62fe6c6692c689f45d764fa37c2e4e5efd94a9afc3eb81406f826585e5b667dbeba2eeb934d047c83812609085db5cda4c503c670aa6229c90e6b12eea5207688f3e16985f9bf8c59ded8010f33c5c128f7fb6eba4e89341af44fed305a0b3911d4824e03118823206f2bc93563f96f927472a455fbc3bcb39950f7d254c35bd51ea4eeff1a1bed07940e6198e645e185a7e5ea661eaf1c2159246df356280ca71766b47f12897abc27b45b8a37a5420bb26ea498b2a6b156b972a6e02c0559eff2968e2edcd4b418d6fae4c8520073d99479d9a692ac359e99406fe6bfcf511233534b465b87ccbab0fa856962d390ba61d191feb75534c6694febe939a723ed05e38b47cc99b19b97639e8a49f5744b12b94c13d3d7b34ca3d640ff6de859018a620a3100efedbcebc420ff8adeb4b74f0d2256a3d5ab813f51f492aa4507f064e63ba8d3b7e62676af76f40efd1eca98821537035976a199816a8c5133d9d6283b20523c3b174099854de2901f1c60631f06e90090abd1764b6de894cab7a1444befcf30e05658b5b8502beacfa4cee65833027b12999509873d85d53229209a4e288799b89425b07b7833ae367adb6ef4c9a6042c317a0c3234cf2580c9696c11b16fff59d51ffa658bd247fd143bca0bff7f5a340e26aa9395936d97d0bd84a946ca08ad8c6163a16cd70b9c5d7c716625f79da18247748e89550e30add75d63d88504c101e27b01191ded3b5bec960d1b70d122192b5e79656a0fc8902d0e4389dfd7a3a297481c91921bd8ee65f340cbd561c0a652769efd956c31d3db1a834fd9e0afd19dbb07682e92d798545c715316ac9f37620c9666d65a16a33eb16eeb419f929f4e0693c93d614713a310b3275f1a40421f76e1d399590dddd68f4eb253fd7d243d077f53bbae626f8ca50acc8a216aa964c3d897055c514898a05fde2cb2076c686d0a86715ba65b211c08f87700cdd388659dbbc23ed7485f5dad07db2e274ca095c57798b885233ddc1077bd23bc0d7e70f237e0a5a3c222d0a8fb099b374b92351c3c8bd95f1d88a37f0f656914ded585d1a4c30f084364e335e54871086dba0bc018c0fa504c5046020c9b2bc617bb5521e14513371b5e83142bf845953ae0164331b76a739224a6e7fa2c7c0d323bd7a80341517ceb11c93e97275d2e8b574d0c085078fcfc35bcbc82073f25664add96e0a1c5b6b4ae37d7c92fa05e2aded5ab20b0cbce51c5e7fd72cf2952ef431457832715ba48ae151ae4283f080d2de397e16e781dc51cd3b1956639990e538efc01fe00a652d472d0b39042179110043adca6026b2be11ac586d17628b905f9d796e7a5257c835c3c5b34b2281e6d1da3804be15b47bb7e6496087bd9f8c2fbf3be1c5370366779cbdfa89d7a04c336c11e22a04a62b88b03bb762c34cc551962a201be027fb7c6cbf6992e0d3a8f510e0542f989e3a269acdbf964b28279ec309f3e51b3c9b871f7620be500d61210e0f429323772e55a7293762c43cbe583bbe6af5f3b3126ddedb202c9f87ea5dd448f1eedaef95c87ff3624d8df75ffe5d651169116d449a9953196c83117e14bf6b4dddd21a35aab4348aa41c98989483b0520795bfb600971cd4a62cbfa375fb5e9aef004204beee0f045f8e55a83ccd13d4d905be8dfa0239b86061b36b95af71a94d5a8faaf45c5f7502f89799db67b0126bcb599dd40061726741566bfa9b304f82eb8d89d36739b6584f437855ee14cd949bf21d6fa20c893859006f0324fbf6c7ec30cdb623656010336eed8abddd67a73f8d3131859307d7d989d396f9fe3fdb819338bb0cf330766f195a02d0cd0442a31d9415f6187fa10b153283f63d957c374e1a5c8e9b485b7f27f470458d199dcf46a539e458c3ebd77e5f0f1b047cffe7cb3d495dd532b17a8de048782079e272113dc827d37b73d468971cffea74b66dd772a4bb6205d5ceffc7d032d3bd814f870266ed74b9e3f8ca9afdc79f26fa41b809258039e4947a4f7d1df62f74b2beb25f97a86084d74744ca78fd531a64a9c91958c323acabb7c5604504b98e05b8a4732871ee597be5a585f48d72bdcf51e7b81dab2c5307963588b173cda1ab27756edb82aabda6d82221b1d305fc4f71edc05889f86f22c83f395fc443dc002d1977fbc25c698189456f3037873d8d59fe9fde8af3aa69636ae9700f6778923349c8fc81bf3e52f856ea353bd48b19f61ed57b5f579f3d419744f1bfd703cc7f9ec6b61a882420fccb5b618227b71d43fbcf56749cba87379dcff6393c205d26e248aa09c76712852282f028cc501180ac38d896e669c69bfb075b26f3cf90f2085e911adb2055e32f21d6df7566e0f87ddcaa9025d77e1fb623d6bc31941aad5325e800a166841b64ad5166e71d4fa1547bde8b0aae12cfa74228de0ebd2bd1ed63b2abdc9030bc35da20b052976020ed4f285dfb9375137e3908a4df7a538e08e84f3a7fd380c739aa830f0dbda2ee2b345cea87094bfc805fefc4a8df010dfee8c3914259d0d533d5e8d16e903690d80ed35a375f61192320d6e14af309e7f7d2a03ffc5bebc0ce6484a15ee9641fbc1d303537178e9670abd94a0969260b148e7787e890f93db19a68edb59ff0fd4c54e91c7b99578ee956183eeacff7ab752c55e97b7494100b33c9f47918a1f05f9e549d393ed72be02452bd2c0ff32e15c22ff1168875dbce7ffe98bb6f07df0c65ec2d63369f7dd7a06663f91236279db6c1025410aefc7fc63fda38317ce6eb9d83bd3353e011fbac2572dfc98f60de1ca3b2067e837a66c4421253c42b0243921e15b1b25e2f84050cf46dd3e7e723543d9c16de8b40ae7b01a7cbd9bc0c972d69881f144dd04457a1b284c07c544dc3dcbd6e5f5190c7f95c43de0c88cb2757abe63eed10963679daa25f7449da04007fc2b4b344079e17ae499f1944f09f157ecd9304f1214980d752430a11d98d97a0dbf2deefb1b8227fde4658da14cb6c1870f60b583877105facc9b6cc0a7448174686fc229dfd1a8da07c7729f54b53b64894e5d7fefa7c42306d0b4bebb95c1f13dc8c362d16155f2748450512049022869053ca0c1fbf3fd59c88eea5a5c380755184336bd938238e1b165631f6f42b5dbddb484bcc76007cfa95585e2e95a74a2545d80293ecd5f2c2f04a3c98b7b2891ccc1a7f82c2ea36e2e3b73361d5adfa3506958e505ae5825b4ecc64c4cde5627395fe42648438333ce58710317f2e0aeea330b27d95bd88d0d361d0d02c4ee76b812ef9d3efd76a010ade752fda0288766eaa457057292c39c094372a2c5d7b552ac7c340a7bc8ec3f2a74cd9ee50fea013cb2bcccc8fe50fe5f83c0ee98127e53edb7010a8e728bd4865d9fc8ffe5ac9c7e18c0d5fe1cd3d0046a41848a34ea5e81646bdd4fbd794855e21c8eb92b3a47fa5a6637e1da11ad12a0708e992572b6b22a6d8ef6068916f5119a17b180a168a917ca787adf4748c853bfa8fdffb0ea9131cc1f2770d5d12c1cb5d4bdda6d152ec537f956b79949c85b7fd8332e188fc71b927e6a90201b61f60ffc7a8c91291a7e8ff805aa5a5e9c3c3994d021030d5846c2eb7bede9591756a1b85d03a7222927e08a35e7064b8cc72adb53d615dcfb52c5fa3089d525f3440ed73de5465effc95bd16012a2f2c0d22074eefb43ad59e2e4b7c4b970020a8b88c67c97459e16a753f414f87687ffe3e7a42776f12eee310826d7f14a68b3a46ffeba6f08636cfa26a6cebc63445138d30a7753d48d95d1805e701414186da4ba5980a5802eaefb45e6c1d9af0d876fe3646b825b895a0ee263bd060ab2babb79fa8c484361b1cdac858cda7c16c831d86baec0e166fc2088c063477aa4196f98411d565f8314610364f92f38586080c1e1494718ba950e6d0c1c6d884df873e141c970f6dbf2a87ce870ef14807c923f0214e391cdd9ec7a83e56f62e948e688719c2549563415da55145d9f5ebc36c5e47e28e15ba6e5ef4081f5806bc17fa0755ff63a736d249183496ca8d9d9ccdf8a0fdfa21806e7e57a84ce30ee65f6ef7b44825bacf63ee8831ffa7e5cc856c8571c93d095823cef977748b6def9030bea94c661343a061a540f64fe7075b0a724dd31271b530a29242d7edd013bb42673330ecabf21fce6f2f143b01d6be057803136082c9ad2f5b1afae18d98254fed8644583883c16dbbb620e046a468b9a120d0aac3118c2c82af808bef264580ac8514b5d6f7fbd0676ed37177f1e5af4227607a4d0e7704e532272679e3a7d0f8b1c838f1314fb465ed62e0a9afe79028a674c27a8f6503762ef09f6199216b9f082c65c3ad59454f5533cb83b3cf89f76614d0fda880034f1d5fa2ecb7b721b83cedb4e0020eedf35f81b4f48b74147e3a36886019eff92fc1379880acfd9b94a069108bc9686dffb14ef2cdd1aaf9bcfac579fb3f3c91a6461094395b37a1f156ab3c5f9cd62b7258e7d94439623de5fc0ba935c86fff05addd49af1b48487d50a239016d4aeeb8936d0619de35c29157e76ac249206a4abbc6145caa8e4a6d41776d41ec3eec70aba262618bd69f9164f657471c9343da3bcac76b80ea67a5481157e092b4f7996e75b5d103b3762722c25c8e341001b869b015f7523d8b474c7f62653cc3d57002cd18ffefe2de17b0d680ce922076ef354e0e0c54678639ed2baade966a2e5b44d6b10ce5b6a8258b1742d486b5e64b83cdde0c19ad549acdcc0c0244b9b753e211e429f4c4d5364cad795d31e8deaeb93806947cca88311549a3478aa0be813eb37f9f4ad0eebce3d985ed299010ac55a87c865c3a31127f4f5bdd3c9ce2e3eb20057ffcc895e8d4e4c1f6cefaca3492b1ed955b346992e55fb2df071188349b786ae64ce840e87b4bc3b970eca19605777bec794c2d77d97ca23a2538a99b4a63abe1e21614bc377f81c564bb3863e5360f52f1bc9548ddca099be77d3984d08bb2cec78b5cb5785a820c11354639705b46c88c461baa580f6e4fae027f30cca5b1ebb558b58e5bac022b126b1ff06ae35ab0243ecf655c090f048fffdc2c101694b2740e08a70a97eebc6ac3eddedcd0c5d85165632d3a40ee39d0571d551ff444cff2c9ef7bfb48191b79499ee97a098ac8d1c5bc87fe859eabade54ecb119ae1b67b0df32ea5d8c433ad8d17ed72de1418c1b56ff7e8499d32476fdf66df212c3056e5329826504d035d40ecff428e0cbc371e80d1d688c5c304bbee2ab546a6790970b2a4c96dc0cbcf0141496b34f817e4e77de1528bd68c21deeb53e5f7444d967209283d5277e176b7def0abde9c071883086a6873df1d9c902d904bbe7b49b42fa1915487ffd20be782e7611a3bcd171009ad57b15cf056ffeddaa7777424fe4fd77291c2d1b86f184d3bf7e1015c7900c5f606c9eeee6affdcca93cd45e687c4cf335bb4502b98d3d917f7d781159cdbb451b861788171615c5c5492a1c98cc88d86f097cf224ad20f860534ec970c7d103cfb5dad56de4fb9a1b7920879aaafdc6c5d7e5430cb23d5831a1fa7361d0246e1594fb65a9ddbe95cc324eaf9cf69dafa0f2b1e24e82ebb6334bd2d46deaa80ff64335291bc1593ce1026b701800c54cd7f50e6f6ace26aa762bcda224492a1c8ed6cb54b6c8d827ffdead343e8d3a461bad779001d328a41fc617da187c8848877982fb47e589aca10b15e99cfae6cdc4f296aad1866c4bf413954d67e1ec286f1066707e3931c1e5fcc0087", 0x1000, 0x8010, 0x0, 0x0) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) timerfd_create(0x9, 0x100800) 07:59:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r40, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r40, 0x400454ce, 0x0) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:41 executing program 1: getresuid(0x0, &(0x7f00000007c0), &(0x7f0000000800)) getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000a40)) set_tid_address(&(0x7f0000000080)) fstat(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) stat(0x0, &(0x7f0000000b40)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0xfffffffffffffffd, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}}, 0x0) setreuid(0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8800, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x5654807, 0x0) [ 731.250033] binder: BINDER_SET_CONTEXT_MGR already set [ 731.308648] binder: 31716:31721 ioctl 40046207 0 returned -16 07:59:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1f9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fchmod(0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) ftruncate(r4, 0x4) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfffffffffffffeea) r7 = open(&(0x7f0000000300)='./bus\x00', 0x1c3842, 0x9) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r9 = open(&(0x7f00000001c0)='./file0\x00', 0x20141042, 0x80) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ftruncate(r9, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8, 0x1, 0x0, 0x101}) 07:59:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r40, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r40, 0x400454ce, 0x0) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 731.878066] binder: BINDER_SET_CONTEXT_MGR already set [ 731.961033] binder: 31737:31742 ioctl 40046207 0 returned -16 07:59:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f00000005c0)=""/253, 0xfd) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000500)={0x18, 0x1, 0x0, {0x2}}, 0x14) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f00000004c0)) getsockopt$sock_buf(r4, 0x1, 0x3f, &(0x7f0000000380)=""/87, &(0x7f0000000300)=0x57) mkdirat(r3, &(0x7f00000001c0)='./file1\x00', 0x180) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb') r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4}) preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000540)=""/81, 0x32a5449}], 0x2000000000000210, 0x2000107c) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 07:59:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() r39 = creat(0x0, 0x0) ioctl$TCSETAW(r39, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r40 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r40, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r40, 0x400454ce, 0x0) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:42 executing program 3: ustat(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) readv(r4, &(0x7f00000000c0), 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x200, 0x6}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) ioctl$BLKALIGNOFF(r6, 0x127a, &(0x7f0000000140)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001500)={0x7, 'bond0\x00', {0xffff}, 0x7}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) r7 = dup(0xffffffffffffffff) write$FUSE_OPEN(r7, &(0x7f0000001440)={0x20}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') ioctl$sock_ifreq(0xffffffffffffffff, 0x8947, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f00000014c0)=ANY=[@ANYRES64, @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x40051) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='memory.current\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r9, 0x4b4e, 0x13) [ 732.610281] binder: BINDER_SET_CONTEXT_MGR already set [ 732.653318] binder: 31758:31761 ioctl 40046207 0 returned -16 [ 732.710405] binder: BINDER_SET_CONTEXT_MGR already set [ 732.745373] binder: 31762:31764 ioctl 40046207 0 returned -16 [ 733.320564] binder: BINDER_SET_CONTEXT_MGR already set [ 733.332911] binder: 31762:31764 ioctl 40046207 0 returned -16 07:59:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendto$inet(r0, 0x0, 0x0, 0x240007bd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 07:59:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() creat(0x0, 0x0) r39 = getegid() r40 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r40, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r40, 0x400454ce, r39) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r39}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:43 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2c) r1 = dup2(r0, r0) connect$inet6(r1, 0x0, 0x2e3c8b486f2ea281) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x9c87, 0x4}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000001400)=0x140000000, 0x4) getuid() ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r6 = eventfd(0x5) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000380)) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r4, &(0x7f00000001c0), 0xfffffef3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') pwritev(r6, &(0x7f0000001400), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x106) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002fffe16000000130000000000"], 0x10) dup2(r8, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYRES16], 0x1) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffef2) socketpair(0x4, 0x6, 0x3, &(0x7f00000001c0)) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, 0x0, 0x4008) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000001440)={@loopback, @local, @remote, 0xffffffffffffffff, 0x359f, 0xffffffff, 0x100, 0x3, 0x200000}) read(r3, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) write(r0, 0x0, 0x0) [ 733.534152] binder: BINDER_SET_CONTEXT_MGR already set 07:59:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x3) r1 = socket$inet6(0x10, 0x80002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') dup2(r2, r1) write$P9_RWALK(r1, 0x0, 0x576df542278d7801) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013000000100006000400020008000100000000004e447910"], 0x24}}, 0x0) 07:59:43 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000000), 0x1) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:59:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xff7ffffffffffffb) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x802fffffffb}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000380)=""/171, 0x6}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000005c0)={0xfffffffffffffe27}, 0x18) write$cgroup_int(r2, &(0x7f00000001c0)=0x8003, 0x2d3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="3000000017e3ea3e17000000da55ff000000000033d9fb39c6557c5042ac9586cc56edcff0061f0fc3f522facad4c98989654154292dcb0daa7f75fa169b0000945e5040e3fbf21deaa73e2fdfc6efb30be7f689feb7da38d4fe2f777caf12e63290b93dace4e7fcad5d9ece20215a8c74e74b69e473233dc3e67fe822b9f741ecfda5d0a9d53843c1df66abceb9820106fdd1a785571d0e2dbaa6e3c20959de0a55926a23b560ae21deb4d832d6d35b4e4fac8592cd4c902b8bf1af4dff61ca3a2b2aace2f075ce19970dd6806748de6448ca3e7ab2269691c0f88dc01504cc762b243f62ac0300000000000000f0a9dafee150f2f9fa6de5138e000041c09ef1bc3a39603c7e31e2a147cf22be1aea6b9f33fd71c6f8bb019bddd6a8cf588c32c4742d0108ec6dcb2432aff38ca1c8f205e2c543793c0409003c6bec3e57f0dfd29f00000000494fa3c12eec350bbce175c4ff47756e5cab023ca13e16848c6b20117ca5d905f2f5f0acb87ec0748bd3dd22cbc80b4eb71bf2ffd4cedbeea81aa5befbe87a4fe079a08e35cf3c8deb4222a436b1c68fa95763460988c53ded5a1a2384c44280ea878803052a9794fbbe375b40e7354f1d0c60a30b2d5fa531f535eb04a5a2d78dae49a11f6bcda61000fe6eff301a5df549214282c38fe9a6ace8c3f3a4704f0d22abbafb1a864c98ce4a7c5eb51b85f06c89c8000000000000000000000000000000000000001b005851a8c6a5f100c9a9d02518202231e6e63c4c3402bc79722c72c6cfd372ba6f88684079b07c2c4c65f9f9a4cb6b6684b921bae2275ca0e2ed2ec0791d930ccbff1e32bb4fc06da86202dd2446a2926986cf3e619fb481a56643064ad02acefe39b90d4944038af4c949db25207dadee52d57f87d19be33282c52046654a99922e39f5cf71b275668f1acfade0e3b5eaa2e2"], 0x1f1}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x4e23, 0x0, @dev, 0x3}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x9]}, 0xfffffffffffffe40) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000800)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x00', r5}) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) fchdir(0xffffffffffffffff) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x2000000000000000) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e) clone(0x4000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000004c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x20200, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x0, 0x0) r7 = memfd_create(&(0x7f0000000600)='\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000040)={0xa3}, 0x2e8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r7, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) [ 733.557812] binder: 31774:31777 ioctl 40046207 0 returned -16 [ 733.617312] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 733.669530] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 733.725483] binder: 31774:31777 transaction failed 29201/-28, size 72-24 line 3137 [ 733.790943] binder: undelivered TRANSACTION_ERROR: 29201 07:59:43 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) read(r0, &(0x7f00000001c0)=""/154, 0x9a) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000080)=""/250, &(0x7f0000000280)=0xfa) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x2000000229, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) splice(r2, 0x0, r1, 0x0, 0x3cceb668, 0x0) 07:59:43 executing program 3: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x0, 0x27, 0x104}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x7ff, 0x6, 0x4, 0x6, 0x1, 0x2, 0x81, 0x4, 0xff, 0x4}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000540)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x2, 0x608200, 0xfffd, 0x7}}, 0x50) syz_genetlink_get_family_id$ipvs(0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r11 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r12, 0x0) r13 = creat(0x0, 0x0) r14 = getegid() ioctl$TUNSETGROUP(r13, 0x400454ce, r14) r15 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r15, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r15, 0x400454ce, r14) r16 = getegid() r17 = getgid() r18 = creat(0x0, 0x0) ioctl$TCSETAW(r18, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r21) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r21) r22 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r23 = getegid() ioctl$TUNSETGROUP(r22, 0x400454ce, r23) r24 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r24, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r24, 0x400454ce, r23) r25 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r25, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r26 = getegid() ioctl$TUNSETGROUP(r25, 0x400454ce, r26) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r14}, {0x8, 0x2, r16}, {0x8, 0x3, r17}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r19}, {0x8, 0x7, r21}, {0x8, 0x5, r23}, {0x8, 0x2, r26}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r27 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r27, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r28 = openat$cgroup_subtree(r1, &(0x7f0000000400)='cgroup.subtree_control\x00', 0x2, 0x0) r29 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r29, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r29, 0x40046207, 0x0) r30 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r30, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r31, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r32 = dup2(r31, r31) setsockopt$inet6_icmp_ICMP_FILTER(r32, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r32, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r32, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r32, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) r33 = openat$cgroup_procs(r32, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r34 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r34, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r34, 0x40046207, 0x0) r35 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x800, 0x0) r36 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r36, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r37 = socket$key(0xf, 0x3, 0x2) r38 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040)='/dev/loop-control\x00', 0x800002, 0x0) r39 = openat$urandom(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/urandom\x00', 0x8000, 0x0) r40 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r40, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r40, 0x40046207, 0x0) r41 = openat$random(0xffffffffffffff9c, &(0x7f0000001800)='/dev/urandom\x00', 0x18081, 0x0) r42 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r42, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r43 = syz_open_procfs(0x0, &(0x7f0000001840)='net/stat\x00') r44 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r44, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r46 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r46, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r46, 0x40046207, 0x0) r47 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r47, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r47, 0x40046207, 0x0) r48 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r48, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r48, 0x40046207, 0x0) r49 = socket(0x10, 0x3, 0x0) write(r49, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r50 = accept4$packet(r49, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000018c0)=0x14, 0x0) r51 = gettid() ptrace$setopts(0x4206, r51, 0x0, 0x0) tkill(r51, 0x17) r52 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r53, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0, 0x0}, &(0x7f0000001940)=0xc) r55 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001980)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r56 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r56, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r56, 0x40046207, 0x0) r57 = inotify_init1(0x80800) r58 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r58, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r59 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/status\x00', 0x0, 0x0) r60 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r60, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r60, 0x40046207, 0x0) r61 = openat$zero(0xffffffffffffff9c, &(0x7f0000002540)='/dev/zero\x00', 0x980bd16be507aba9, 0x0) r62 = syz_open_dev$loop(&(0x7f0000002880)='/dev/loop#\x00', 0x0, 0x400000) r63 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r63, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r64 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r64, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r64, 0x40046207, 0x0) r65 = gettid() ptrace$setopts(0x4206, r65, 0x0, 0x0) tkill(r65, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r66, 0x0) lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002980)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000029c0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast1}}, &(0x7f0000002ac0)=0xe8) r70 = creat(0x0, 0x0) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r72, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r72, 0x400454ce, r71) r73 = getegid() r74 = getgid() r75 = creat(0x0, 0x0) ioctl$TCSETAW(r75, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) r77 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r77, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r77, 0x400454ce, r76) r78 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r78) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r78) r79 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r82, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r83 = getegid() ioctl$TUNSETGROUP(r82, 0x400454ce, r83) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r71}, {0x8, 0x2, r73}, {0x8, 0x3, r74}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r76}, {0x8, 0x7, r78}, {0x8, 0x5, r80}, {0x8, 0x2, r83}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r84 = gettid() ptrace$setopts(0x4206, r84, 0x0, 0x0) tkill(r84, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r85, 0x0) r86 = creat(0x0, 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) r88 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r88, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r88, 0x400454ce, r87) r89 = getegid() r90 = getgid() r91 = creat(0x0, 0x0) ioctl$TCSETAW(r91, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r92 = getegid() ioctl$TUNSETGROUP(r91, 0x400454ce, r92) r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r93, 0x400454ce, r92) r94 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r94) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r94) r95 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r99 = getegid() ioctl$TUNSETGROUP(r98, 0x400454ce, r99) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r87}, {0x8, 0x2, r89}, {0x8, 0x3, r90}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r92}, {0x8, 0x7, r94}, {0x8, 0x5, r96}, {0x8, 0x2, r99}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r100, 0x40046207, 0x0) r101 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000002b00)='/selinux/member\x00', 0x2, 0x0) r102 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r102, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r103 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r103, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r104 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r104, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r104, 0x40046207, 0x0) r105 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r105, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r105, 0x40046207, 0x0) r106 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r106, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r107 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003280)='/dev/rtc0\x00', 0x100, 0x0) r108 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r108, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r108, 0x40046207, 0x0) r109 = dup3(0xffffffffffffffff, r108, 0x40000) r110 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r110, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r111 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r111, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r112 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000032c0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f00000033c0)=0xe8) r114 = creat(0x0, 0x0) r115 = getegid() ioctl$TUNSETGROUP(r114, 0x400454ce, r115) r116 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r116, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r116, 0x400454ce, r115) r117 = getegid() r118 = getgid() r119 = creat(0x0, 0x0) ioctl$TCSETAW(r119, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r120 = getegid() ioctl$TUNSETGROUP(r119, 0x400454ce, r120) r121 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r121, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r121, 0x400454ce, r120) r122 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r122) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r122) r123 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r124 = getegid() ioctl$TUNSETGROUP(r123, 0x400454ce, r124) r125 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r125, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r125, 0x400454ce, r124) r126 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r126, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r127 = getegid() ioctl$TUNSETGROUP(r126, 0x400454ce, r127) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r115}, {0x8, 0x2, r117}, {0x8, 0x3, r118}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r120}, {0x8, 0x7, r122}, {0x8, 0x5, r124}, {0x8, 0x2, r127}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r128 = openat$tun(0xffffffffffffff9c, &(0x7f0000003400)='/dev/net/tun\x00', 0x20802, 0x0) r129 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000003440)='/selinux/context\x00', 0x2, 0x0) r130 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r130, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r131 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r131, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r131, 0x40046207, 0x0) r132 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r132, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r133 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000003540)='/proc/self/attr/current\x00', 0x2, 0x0) r134 = perf_event_open(&(0x7f00000035c0)={0xeba0d9c37a4840de, 0x70, 0x8, 0xcf, 0x5, 0x6, 0x0, 0x16, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x78, 0x4, @perf_bp={&(0x7f0000003580), 0x124df2b4dad92957}, 0x8, 0x9, 0x7a, 0x7, 0x3, 0x7ff, 0x48}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) r135 = socket(0x10, 0x3, 0x0) write(r135, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$sock_cred(r135, 0x1, 0x11, &(0x7f0000003640)={0x0}, &(0x7f0000003680)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000036c0)=0x0) stat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0}) r140 = creat(0x0, 0x0) r141 = getegid() ioctl$TUNSETGROUP(r140, 0x400454ce, r141) r142 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r142, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r142, 0x400454ce, r141) r143 = getegid() r144 = getgid() r145 = creat(0x0, 0x0) ioctl$TCSETAW(r145, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r146 = getegid() ioctl$TUNSETGROUP(r145, 0x400454ce, r146) r147 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r147, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r147, 0x400454ce, r146) r148 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r148) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r148) r149 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r150 = getegid() ioctl$TUNSETGROUP(r149, 0x400454ce, r150) r151 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r151, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r151, 0x400454ce, r150) r152 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r152, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r153 = getegid() ioctl$TUNSETGROUP(r152, 0x400454ce, r153) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r141}, {0x8, 0x2, r143}, {0x8, 0x3, r144}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r146}, {0x8, 0x7, r148}, {0x8, 0x5, r150}, {0x8, 0x2, r153}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r154 = gettid() ptrace$setopts(0x4206, r154, 0x0, 0x0) tkill(r154, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r155, 0x0) lstat(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000003a00)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="d4e42ee3b0977c1d52fb3b8e7d525d56414b987025263612e197ee5d7d466bec8380d553bf9f4e0a8169d1cb48d1305b898ccd99e62bdb219de57b4a4657d652be9b701056a9a2e0a77d317c3fea", 0x4e}, {&(0x7f0000000280)="9ecc47f81979e44d15a76c65f7aaa4b4e0f3595e27d505a452ef20a4e433c6c18b010bc7ff828f497c5a0d358ecc1c0ec3c9bd7011aa2f0c5c9b5edab46500067a0d53d1bf2406d56fecce32374b6535ca86497f70a19d2b86a8ef1d8d7907b1945775500c72d676338fb1af3695259a71b9841898d2995c44db0c399b3315a8cb4f65d477e0f9a82fe80349ea3b00cdcb522fa581d00f7dba28e427fbc50afd587f7be9b18e11932602b7b392db995f46c3cf96c6ffa71f1cf9e91c5546d6de5c7efb6fae027013afa558551c71f3d2beaaad1f3facf3066074706270f82a8adf963db9", 0xe4}, {&(0x7f0000000380)="4dcab8c47bf33fe3e98cf46885432d314bb8c38d192321a8e918e2fa9a83d82a97bfdd9446a8862f67e4a7663faed085046c580a6cc5a24d62ca41a890e8f68c0831d1cac3c477b533cb1a52a4abd26218ec62c82eeaf97b186bf1c35da6f867f75ffc069b0a1eb53d82b3431f0cb325a964a8966fe609a2341ab443e09c04aa", 0x80}], 0x3, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r4, r5]}}, @rights={{0x24, 0x1, 0x1, [r6, r7, r8, r9, r10, r11]}}, @cred={{0x18, 0x1, 0x2, {0x0, r12, r26}}}, @rights={{0x2c, 0x1, 0x1, [r2, r27, r28, r29, r30, r33, r1, r34]}}, @rights={{0x2c, 0x1, 0x1, [r1, r35, r2, r36, r0, r0, r0, r37]}}], 0xb0, 0x1}, {&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000680)="4a54398f4736b33e97edb8de42db99c2170ccdb53cb5522994d352f1c0ec3efc8583e339", 0x24}, {&(0x7f00000006c0)="f040cdd35d4c659b0a845d65536eeab425e3fbfde527c33d74f8beb206d9be29084b6303068b910b038206cf740770570934081577bafca0c30483545a5ac27b34963e8d30e0a24655b2e7db12de9a43bc2ca333fe8fd520e5d946f89c2a13775fabc05ce41d1014291b227ce473f0b759c34da937ea4766d810eacd37a0d07af0c2c17638c381694ef2730a272554f0f45b50871af13e1ec595cbce0e2b0fca1213cb682b5b278a40dba69f", 0xac}, {&(0x7f0000000780)="1b0f746151ef", 0x6}, {&(0x7f00000007c0)="375ba7a589", 0x5}, {&(0x7f0000000800)='z', 0x1}], 0x5, 0x0, 0x0, 0x40}, {&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000900)="c6429de70c1348e5f5cec8932d14c4ad210d14906c8aac8510076d8fa0e61d7da816da06d31fe1feb806194e04076c8c7acce663f827a7649a5b628ccc13ce3e5312ee7e9757e0d2caae3f1ec8148b5c07", 0x51}, {&(0x7f0000000980)="091e5c3b38964ad2ad2f947bc855d1de1c886f6c0e9d8973421e717c0022cc80f850101cdf715bb1ca465c0b7aba3d5e1a3eaa2af7671b6b722087896eb21c6fcbf4b72eee69b808a70deeb7698d1f239b92515a803553d2fe620c2e8d161cb7117339653120a32ddcae569ac38ba030a18601", 0x73}, {&(0x7f0000000a00)="eef6626e5161628c515a62afaf55f1be8169cd3f18a9e1bb9b61091d3c82d68713529cc94b5e77846f6274c4bb1e4dc29744e13065eb15b4f0e62fbf89649191966033944bc339e080cc47c314845659e208e0845964194a3a3069b6d14f07dc8222b71c1b2398e22d907bcb7d900490312347e3defa34ff6ce628f5309efd0ed6aed5cc7f7c8035481d2f91ea8dfd02d38a7302a3d293bb59df61c2fd9f16d15862de7be4d1311b7f66b16e7a2f584c9a0ef62557284bac130d4dcbad5c817a7be00e2f9acbf62fe0", 0xc9}, {&(0x7f0000000b00)="23d1ee35db142a2526614898bb68d2cefa43bffa6d3b0f", 0x17}, {&(0x7f0000000b40)="27c096542bb10a0c5720f8585652bc66f1084ab2f69fa41a0777765614b8c135350648ccd3d584902d77afc73c5a0b7c75d9ecfc1bbe93cc6606e89c8b49238c9a99145eafb35526c93c60243c6900eb2ef2753123ebfc7f9fb7108ab7eb588b3f06a94b36b6da7ba3b0572c2b02a276d204f39398b0ee70abe099beae7fe4e56b355aae91bba5ec090d13deca5ca63a27995d3622c9f878e99f1ff6b0c85edc27b6fa385c9a0c0dd51c55f5b09e1d46bf1e1c55317877e05cc695019e38b0c5e0a74bc66a0d480ea78361f848fcf98de70b215285926d3236729a9f1562b2d2f531100c35f53048b8e40647f3dd6eeedee5ad7778", 0xf5}, {&(0x7f0000000c40)="802d53a428b6812d7c900cc5872f0932d90acc1b6aa3f34a4bf99eb3dc9a1e18a9e0933b76c7cebc89bd89430206bb838b6329409c71c43cef7264620b7e007cf849e322e8c4e4792f9249b7f0d3ed82361e0f8fa979008d1ab9bcb0f1010ed55c1d0f5e8649988e014aaa86a55d502ea043e4ed380d861b16df364bd2380e324591a7b99b7d640403245f55424706e02f2d4966fec729c6a1079763ccce3e7c741d60afa715bb1ebe97fcd2fbdde7463a81e4002616b37391189c29f8e6ff9e9f6c7c8989fb6257273fea641845fccd393ece7685f79cc9101ad7b57c3c5d4fea2aa61915631f916f149c9c1e03", 0xee}], 0x6, &(0x7f0000000d80), 0x0, 0x40000}, {&(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e40)="5aef232702dc0962c7e7f053b7c6a7cc8815e8d6706d8884cf1f04326cab974f742465ca60502257ca776443ef8a61ceef19699ccbd60fb0633cfe06443870363cbb6bd093be7a2e4feeb1d45d0d470e252d12ebfa1c85eb16ac7ca45a1e062b6f284db10ee761fc0d65f6557665b043b08996", 0x73}, {&(0x7f0000000ec0)="25497758a61699f9a6fa43bb215fac0a2157c83caaf458e314a7fad9ddef207b14d6146ce617cad5b02254c35fb566471721f408b9d4419d19a801e91034c920bdf85d87fe4b0b9beb7fa1f2793b64d3dfd261a24ef799a88b2b72345c1ad3831407b6a8add2fd7df56add08ff6ac869702228665dfe097076bc9e472bcc4bbe66177b0d11e25e46aae0d0849ecc9a74d30d73684aac84427b31ba1a0d3f7c33", 0xa0}, {&(0x7f0000000f80)="24ad865456fe579169bc349cdb7ad09377a3652bb4a890dd5c2f861de6e38f8900e9ffe204ec14a1e54b7aa800cb40f81c20044d3816df241ba019470bf8641ccf1b", 0x42}], 0x3, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [r2, r38]}}], 0x14, 0x8000}, {&(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001140)="cd02bccf57356b6a36322e86c1b78821d3c0858d1641a7f921296b26a6114f01584b8bf5a6744eb1af6e7d1b65574825f75025c832c8e6b1360334baba6e7d0e26fdcae23944a9729ab8d1b086360bee04a633f5b13425ef2f7559bc7015ca1ae7e5d6f739fb451f307e0f96cd9537af9e9d84bdadb08531db5cdf289e469c4d5db68ff5e2855c5d53619c3bf5925ad2ac12d4c6350d3edd88e15af8a39579514d7c627cfcd94d9b21a18394e91817d7207ea2497e4118c8224c70cc233be907014c697fe265f849fc744764b2aa655f6d4fabb2e161ac70ce4742a2f5506ec04b", 0xe1}, {&(0x7f0000001240)="cc1f524cde25782e8b3a061baf212322f55815361edb85823c87414cf779fa3514f2bc1c9969d612f6a0b00a1dcb080108c86ca825a102c1443ce6d8108594e39b5d4fcd26331566422cfd66aed5f0e514ad9fbedafc208b03c753558aeea59c2ee30b963bcd50315be0b8f466cd1464dcdf3eec2ebc177ebaa88dd42baf9b8cd9c5dc1fc80c647a3784ebdf86cefca0ccea1e99e28f3475dde4b62cb75771c65ac759861aeb90a8485b3ef9d45b029a91ce04fe50cd9c000ed565bc75fa0a6d6fc038b112e5fb2d7bb89d2ff9fb4f60faf243", 0xd3}, {&(0x7f0000001340)="0b4cfd593a403e7d7cabb9f4fdb6104e18bb8a89526514122fc7c58c45c9cd9a", 0x20}, {&(0x7f0000001380)="86b8d9c7b8fb2ff55c92668bdb87bfd64ad1b1e4f9937729cb77e3b69a59150a060a999252874ed79de8f2924e62a2691f17cb4de078dd3a01065e02e4e37e13c2e0a9263ed056391ea790c3c6ba4acd3da003a72b8b0d695f278b70e451c7e78ebb1a57641fb0abd6a71579fce885758547680cd078368a5b630bd082ece03102c186f6239d6b9a474a741f5c42d93542ca6195b03cb1cd81bffd4934330a8c8786442a11c4a3141b9bcd085fab99cd250aae7ddd20a48e41798f894ea64b17c56964f79f3e3bdf3a419eb6217d23361ac46a62a8f0bba2", 0xd8}], 0x4, &(0x7f0000002580)=[@rights={{0x10, 0x1, 0x1, [r39]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r40, r41, r42, r2, r43, r44]}}, @rights={{0x34, 0x1, 0x1, [r45, r46, r2, r47, r2, 0xffffffffffffffff, r1, r48, r0, r50]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {r51, r52}}}, @cred={{0x18, 0x1, 0x2, {0x0, r53, r54}}}, @rights={{0x28, 0x1, 0x1, [r55, r56, r57, r58, r59, r60, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r61, 0xffffffffffffffff]}}], 0x110}, {&(0x7f00000026c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000002740)="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", 0xfc}], 0x1, &(0x7f0000002b40)=[@rights={{0x28, 0x1, 0x1, [r0, r62, 0xffffffffffffffff, r63, r64, 0xffffffffffffffff, r2]}}, @cred={{0x18, 0x1, 0x2, {r65, r66, r67}}}, @cred={{0x18, 0x1, 0x2, {r68, r69, r71}}}, @cred={{0x18, 0x1, 0x2, {r84, r85, r96}}}, @rights={{0x20, 0x1, 0x1, [r100, r101, r102, r0, r103]}}], 0x90, 0x4004040}, {&(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000002c80)="bbbb7b075da652fdf66819ca6c010712a34e29a2704921704ab76949eddbedefe12a92af25fe40ee1b4763e6200289e0676c8abd02ebe4978f241ea686e27d7f6048cc803f9dfd3cd869d2eeb529569b429ef8d521da5577d4e9bf8f45d791ff2209e53ab3933477552b3143885248afe4871d6fb39f8fa51cc736db90f0be22f9c7c7d9a9f2b7bf2690ec5817c0fd247e8e900ff750c90a206b3c8b4b", 0x9d}, {&(0x7f0000002d40)="008bbcec24f89f3f493fa4da25bceaff33343c9798d19c0d6fd7755fc81f999b68820707d54e2d91fdde6eb3941cff53102e68a4a58b8749dfbe091fc5b5e7c1c66a6c8a0e5999c07046153ad59d4da3303cbb15f2fa7d2f5a2eb57eb975701de93ebecaab7ed01bb82b134b0a7780b725d61def1d91ebde51650060a5dfa35d61b25951e9129cfe76769f599048b29c300fdc3715ae927693aeb177db5298b781e2b719dfb707ebf0fc81018a1df3a73ac68bf725af29f0ef78058a186d1979d49e64abf4dfbf08fdc41a1a4fc0", 0xce}, {&(0x7f0000002e40)="d154ba0241bbd19a08a65f1d433ea6881ed5259efc5d8650e916230e15893bf0803b895e733f0b9ce56a29e59e4314774bf98a6095c5145cb950d0e1e92474a385dd5be3a3c0202f972554a9bf252433d6e47a4340f6fedbea362f5bc917456cfba8e6bc1af9360ce5f6846a37f505e422a14e919e6cfd2a4d405df355872587fa646ae3d0fb280323d821e8896502dbae2201cb230882dc7444453adfad1764f9217573", 0xa4}, {&(0x7f0000002f00)="7e3c1ac98b04b3abd3458bf64e9f997bf5175818c46adf13150bd6c552eb2bcccf4196b79bf56e91045b1391351ac99724cc2a53126e30416031f717ee6d50122db89e35f0cbbaaf62b5cee89e78ad20590843728b1f7fbdc7fd40d4f4165009bf660e08f63cafed8d37807ab8422fd718feefc761a723a51213dcd8118293edab6f909c068c95e983bd007b275caf17756ed320523c3a86b370211a65b50c99fe1c4996a873e9477d89c090ee181b164b60dbaea6f16f09ab5045981ad2e513c512c6c71f19ec100d33d451d973da1fc6f83d0e44685b74947431999f5ba88c6966d98ce16d2388b144e7886283", 0xee}, {&(0x7f0000003000)="a8fefdded28999371745bad26831785951d40d64d37b159a6c00f6c4a0cea0cdecefafe68b57c4d93bea3182d6e87839fe361eceab2ca57e8296e41fecac9c13e47b6b54e8989ecebf70068cb34a24c5d94ae3c8838c197f1efca296be88093e4004a8ac7182df86", 0x68}, {&(0x7f0000003080)="7a8a56fe855969e8522f7de16f204f2ae79014c7805ec09f50a8d9e0fc696f96284ab9c385ca75cb19f95ea588c92cbb90186d83e92c711abafa33cfb00eb5262a504c9f907af9ec8d6cb50f24181b16fa24be0a5e18379856b3d68e18d243c2d2a9eab61ff1bff9f1e497f7288076e494785936fcdc35d4dca854dc9048bd32c4187f7605312223ac887dd2c08eff912e646f0546ba37ba7605e1c70e8e9fcb2c23a43fdd8dfca7bd04f6bd701c9288fac9660d6290802fd77c18e8104352bc11bdd6db85c3715ae7dc903ce67b8a7bcfefd412c67a5c2a7356d1b4a0e3ec7ab51a14afbfeb0663f5baeb73", 0xec}, {&(0x7f0000003180)="3c29953526990a1f84c3769af012a19470df39ad0746590a8fad601d55251276f38b13054c15dd722e53314292ec46e5a115135de30817155b94be3add3b10faa5b0f2e1dd8fb01d8839493bbfd67fe11b29e02a9b3c886262e575aa96857ff7539ed770a6a7d4ed840c0d2a7d0c65ed102c4a2e7d706d202dd506a163c6994dfb05018003b40eb821a0148aaa0b04598767276504a58c793c617292d79a91c4e48e7430f4e5d951755fe70f3143e2a964473afd6d218f50df2e5f4d5f51ce1e", 0xc0}], 0x7, &(0x7f0000003940)=[@rights={{0x34, 0x1, 0x1, [r104, r105, r106, r1, r2, r107, r109, r110, r111, r2]}}, @cred={{0x18, 0x1, 0x2, {r112, r113, r117}}}, @rights={{0x2c, 0x1, 0x1, [r128, r129, r130, r131, r0, r132, r133, r134]}}, @cred={{0x18, 0x1, 0x2, {r136, r137, r138}}}, @cred={{0x18, 0x1, 0x2, {0x0, r139, r143}}}, @cred={{0x18, 0x1, 0x2, {r154, r155, r156}}}], 0xc0, 0x4080}], 0x7, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x6) 07:59:43 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x121000, 0x0) write$P9_RFLUSH(r0, 0x0, 0xfffffd93) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000540)) pipe(0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0xee72) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000000)=0x105, 0x4) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}, 0x1}, 0x1c) setsockopt(r3, 0x0, 0x2, &(0x7f0000000180)="3c710002", 0xfffffe5a) listen(r3, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x10020000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="1eee5427c900d21a0eaa6db08bfb47e1c0ab1b83978da3b719387ce336b3a84a5aeeccc5971988a1b4c365574a8c4d6f9524d485d4c3cf473e4e64373c7ae4e71ce5a861db55b7ca2f", 0x140}, {&(0x7f00000003c0)="765ea68db9c51ec128fd75b452d3c4a87a123635d5f9e4ed0b8f45f908703d7f9ccc65cc065aca72ef1f563bcf6ded9e0179212a2a7ab3fbf57eae89d089da475a6eac86a15be1c1e8ebd7c2a94c370977d55e8dcae6d2129e44da7e85241f91f68c43c17ba826a3596a55062215a6bc75986213bac3c0dba728a2bc898b2c", 0x7f}, {&(0x7f0000000440)="8c899e3f89fb0f4b954f5207f12eb75873617b844a49403d8c99b18341e3acf94d322b1900c2eb8c161daa8d9be0aaa9844e7b09c6d366b4e550efc39c0cba7e08248b78cc627877be336b717cb6195ffa39bf9029c4be549c706d20dc53b7f2cccae55bc8", 0x65}, {&(0x7f00000001c0)="a6e5fa066b2bfc3b8d16186549eca5f6f5b6", 0x12}, {&(0x7f0000000580)="9839f9f357138fab77344e10275298607d2ff38af2f2b3bfc38c9363fa6d748ea6cfd6b2182304ba5e0b9e9b11f926a3f9cf5d3a0e2f0837eeb891b2bfc19fab4e3db5fac7906e80fdcc1f4cadc38997248b5ef8a14feb3606e16599c6157ecbbfdb12b8911090071877e9de6cadbe1aef02a901a9519677d3843d203fa9041210eb1a6c2b9d43290130d1566dca340ba2fb73351fffb2afb634a3", 0xfffffef6}], 0x2fb}, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000180)) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40047705, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x2, @dev, 0x2}, 0x1c) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 07:59:43 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='personality\x00') ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioprio_get$pid(0x3, 0x0) listen(r0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = creat(0x0, 0x20) fcntl$setstatus(r0, 0x4, 0x2000) write$selinux_context(0xffffffffffffffff, 0x0, 0xffffffffffffffbd) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0xfffffffffffffd92) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) mmap(&(0x7f00006f5000/0x3000)=nil, 0x3000, 0x7, 0x14bae5568ae6fe9c, r5, 0xe2a89000) write$P9_RLOCK(r4, &(0x7f0000000240)={0x8}, 0x8) r6 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) write$P9_RWRITE(r6, &(0x7f0000000380)={0xb, 0x77, 0x1, 0x1}, 0xb) r7 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) r8 = dup2(0xffffffffffffffff, r7) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in=@local}}, 0x0) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdb) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) recvfrom$inet6(r9, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x10000, &(0x7f0000001880)={0xa, 0x0, 0x1, @rand_addr="0000000000fc0316c2a289b6a9004000"}, 0xffffffffffffff3b) r10 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r10, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 07:59:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() creat(0x0, 0x0) r39 = getegid() r40 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r40, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r40, 0x400454ce, r39) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r39}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 734.225511] binder: BINDER_SET_CONTEXT_MGR already set [ 734.235339] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 734.256294] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.284523] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 734.295479] binder: BINDER_SET_CONTEXT_MGR already set [ 734.302829] binder: BINDER_SET_CONTEXT_MGR already set [ 734.308425] binder: 31806:31818 ioctl 40046207 0 returned -16 [ 734.323580] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 07:59:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xd, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'eql\x00'}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r3, &(0x7f0000000200)=""/236, 0xec) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) creat(&(0x7f00000003c0)='./file0\x00', 0x104) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x180) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8a, 0xc) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2b}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x0, 0x7f, 0x0, 0x0, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0xffff, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = dup(r5) write$FUSE_OPEN(r6, &(0x7f0000001440)={0x20}, 0x20) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000140)=""/41) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='memory.current\x00', 0x0, 0x0) [ 734.332462] binder: 31815:31817 ioctl 40046207 0 returned -16 [ 734.343377] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.372851] binder: 31815:31817 ioctl 400454ce 0 returned -22 07:59:44 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x10004) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) sendfile(r0, r0, 0x0, 0x18000) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) [ 734.389533] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 734.406123] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.429145] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.450794] binder: 31806:31818 transaction failed 29201/-28, size 72-24 line 3137 [ 734.464260] binder: BINDER_SET_CONTEXT_MGR already set [ 734.471172] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 734.484434] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 734.502634] binder: 31806:31823 ioctl 40046207 0 returned -16 [ 734.518222] binder: 31815:31817 transaction failed 29201/-28, size 72-24 line 3137 [ 734.527137] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.537577] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 07:59:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'bpq0\x00\x00\x00\x00\x00\x00\x06W\x00', 0x21}) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x152) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000300)="09f1b2775b77b777d128d0e70c4178f07cbbfedd98f5a04446e9ea744da21289cb0b7809f09a33297df312eee73dbf50e4d4934b0de0d1a4ea27d2bb21ac68483664bfdb00df906a35e99f716417290488cbe26db5c14afe6d16652f2d92d23cfcc57f008463619bf80e7a4b22d061a4e60a69f5b6cbce03e97481323da8596ecb8f6b52b59ea431006ac1a54956aee0427cc317a65006073bb339a429c449") read(r4, &(0x7f0000000200)=""/236, 0xffffffffffffff14) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/100) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) read(r6, &(0x7f0000000200)=""/236, 0xffffffffffffff14) tee(r4, r6, 0x7, 0xa) r7 = getpid() wait4(r7, 0x0, 0x80000000, 0x0) fcntl$setown(r6, 0x8, r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') vmsplice(0xffffffffffffffff, 0x0, 0x23e, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x8001}, 0x10) socket(0x1, 0x2, 0x0) r8 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000440)='/dev/keychord\x00', 0x480400, 0x0) getsockname$packet(r8, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)=r9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) r10 = socket(0x10, 0x2, 0x0) sendto(r10, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) [ 734.560802] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 734.572904] binder: 31806:31823 ioctl 400454ce 0 returned -22 [ 734.583945] binder: 31806:31823 ioctl 400454ce 0 returned -22 [ 734.605584] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 734.614358] binder: 31806:31818 transaction failed 29201/-28, size 72-24 line 3137 [ 734.624823] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.652082] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 734.673032] binder: BINDER_SET_CONTEXT_MGR already set [ 734.683265] binder: 31806:31818 ioctl 40046207 0 returned -16 [ 734.716347] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 734.725305] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.742616] binder: undelivered TRANSACTION_ERROR: 29201 [ 734.757307] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 734.809422] binder: 31806:31823 transaction failed 29201/-28, size 72-24 line 3137 [ 734.821166] binder: BINDER_SET_CONTEXT_MGR already set [ 734.829606] binder: 31806:31812 ioctl 40046207 0 returned -16 07:59:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() creat(0x0, 0x0) r39 = getegid() r40 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r40, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r40, 0x400454ce, r39) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r39}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 734.866638] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 734.914902] binder: BINDER_SET_CONTEXT_MGR already set [ 734.920722] binder: 31806:31818 ioctl 40046207 0 returned -16 [ 734.963360] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.024196] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.034702] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.055839] binder: BINDER_SET_CONTEXT_MGR already set [ 735.061566] binder: 31806:31827 ioctl 40046207 0 returned -16 [ 735.062206] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.062244] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.062252] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.062298] binder: 31806:31823 transaction failed 29201/-28, size 72-24 line 3137 [ 735.062536] binder: 31806:31818 transaction failed 29201/-28, size 72-24 line 3137 [ 735.114777] binder: BINDER_SET_CONTEXT_MGR already set [ 735.120122] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 735.162115] binder: BINDER_SET_CONTEXT_MGR already set [ 735.167450] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 735.172516] binder: BINDER_SET_CONTEXT_MGR already set [ 735.172525] binder: 31848:31852 ioctl 40046207 0 returned -16 [ 735.176426] binder: 31848:31852 ioctl 400454ce 0 returned -22 [ 735.189433] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.189441] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 735.189482] binder: 31848:31852 transaction failed 29201/-28, size 72-24 line 3137 07:59:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="39000000130009006900000000000000ab00804803000000c60001070000001419001300010000000100000045f26d8c1c0afc7193bf960000", 0x39}], 0x1) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f0000000600)=""/131, 0x83}], 0x8) [ 735.253333] binder: BINDER_SET_CONTEXT_MGR already set [ 735.258766] binder: 31806:31818 ioctl 40046207 0 returned -16 [ 735.283275] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.299318] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.332100] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.341611] binder: 31806:31818 transaction failed 29201/-28, size 72-24 line 3137 [ 735.350468] binder: BINDER_SET_CONTEXT_MGR already set [ 735.382166] binder: 31806:31823 ioctl 40046207 0 returned -16 [ 735.421596] binder: BINDER_SET_CONTEXT_MGR already set [ 735.427008] binder: 31806:31810 ioctl 40046207 0 returned -16 07:59:45 executing program 5: r0 = memfd_create(&(0x7f0000000100)='task\x00', 0x5aeddde4e2ccbd5a) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='task\x00') fchdir(r1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYRESDEC=r3], 0x80000001, 0x0, 0x0}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @local}, &(0x7f00000001c0)=0xc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r9 = dup2(r8, r8) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r9, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) ioctl$KDSKBLED(r9, 0x4b65, 0x800) write$binfmt_elf32(r7, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x0, 0x20, 0xf26, 0x3, 0x6, 0xfffff70f, 0x389, 0x38, 0x3be, 0x4, 0x3, 0x20, 0x2, 0x4, 0x6, 0x5}, [{0x1, 0xfff, 0x57b, 0x6, 0x9, 0xfb16, 0x7}, {0xb54eefa9626177b0, 0xffffffff, 0x5, 0xf40, 0x8000, 0x81, 0xffff8001, 0x3}], "bba3cd9aec8c3ad02480e6b9593d089c6b79f52b3e58af2feadd2f5eab806db580ace8d529347bdd48729b663a49a903a875dec83145ae83a6fb1a0f1cff4703b8f3df4da227086c358faf6f3cb6cb6231a53fcc917520ff59d3ae9de8a640a22dd11177c588bd16367872317977141b054caba40823ae6049ecc057459275aaf0f951d843111fa8c29d7c246bae80481c6fc21916e2cd1ea495c6225af577760857d8afc6d42c7056f8bbdd5f2a27e1aafbac2810f99e247e91775a52eb5dc0a26d65aff494c5c271997b71935592156fed8476ee3e27cf677f5fa3", [[], [], [], [], [], [], []]}, 0x854) [ 735.468712] binder: 31806:31812 ioctl 400454ce 0 returned -22 07:59:45 executing program 1: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1e4, 0x0) fchdir(r0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@mcast1, 0x13}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x1, 0x80000001, {0x56, 0x2, 0xfc04, {0x400, 0x2a}, {0x0, 0x5}, @const={0x3ff, {0x1000, 0x1f, 0x8001, 0x9bd0}}}, {0x53, 0x5a61, 0x6, {0xa22}, {0x0, 0x401}, @ramp={0xf34, 0x3, {0x80, 0x0, 0x4, 0x5}}}}) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x30) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0x0, 0x0, 0x70bd26, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x830}, 0x4040808) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xfffffffffffffc45, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r6, 0x104, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x0, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008100}, 0x10009) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0) io_getevents(0x0, 0x0, 0x1, &(0x7f0000000400)=[{}], &(0x7f00000004c0)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'ifb0\x02\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000280)=0x4000000000000000, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$int_in(r2, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 735.513139] binder: 31806:31810 ioctl 400454ce 0 returned -22 [ 735.537947] binder: 31806:31810 ioctl 400454ce 0 returned -22 [ 735.564923] binder: BINDER_SET_CONTEXT_MGR already set [ 735.586289] binder: 31806:31810 ioctl 400454ce 0 returned -22 [ 735.589085] binder: 31860:31862 ioctl 40046207 0 returned -16 [ 735.590938] binder_alloc: 14648: binder_alloc_buf, no vma [ 735.590980] binder: 31860:31862 transaction failed 29189/-3, size 72-24 line 3137 [ 735.592505] binder_alloc: 14648: binder_alloc_buf, no vma [ 735.592742] binder: 31860:31862 transaction failed 29189/-3, size 72-24 line 3137 [ 735.592759] binder: 31860:31862 ioctl c0306201 20000180 returned -14 [ 735.594105] binder_alloc: 14648: binder_alloc_buf, no vma [ 735.594144] binder: 31860:31862 transaction failed 29189/-3, size 72-24 line 3137 [ 735.632512] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.633907] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.635528] binder: BINDER_SET_CONTEXT_MGR already set [ 735.635535] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 735.636744] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.636750] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.636790] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.637161] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.637167] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.637222] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.638455] binder: BINDER_SET_CONTEXT_MGR already set [ 735.638806] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 735.639690] binder: BINDER_SET_CONTEXT_MGR already set [ 735.639696] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 735.640341] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.640348] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.640386] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.646577] binder: BINDER_SET_CONTEXT_MGR already set [ 735.646584] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 735.647915] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.647921] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.647961] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.649074] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.649080] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.649118] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.650482] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.651104] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.652512] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.656020] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.656027] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.656074] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.658133] binder: BINDER_SET_CONTEXT_MGR already set [ 735.658140] binder: 31806:31812 ioctl 40046207 0 returned -16 [ 735.659221] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 735.659228] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 735.659266] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 735.691761] binder: undelivered TRANSACTION_ERROR: 29189 [ 735.757541] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.758110] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.759002] binder: 31806:31812 ioctl 400454ce 0 returned -22 [ 735.863958] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.864218] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.864328] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.864581] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.865137] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.865386] binder: undelivered TRANSACTION_ERROR: 29201 [ 735.866301] binder: undelivered TRANSACTION_ERROR: 29201 07:59:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() r38 = getgid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r39 = getegid() r40 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r40, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r40, 0x400454ce, r39) r41 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r41) r42 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r43 = getegid() ioctl$TUNSETGROUP(r42, 0x400454ce, r43) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r44 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3, r38}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r39}, {0x8, 0x7, r41}, {0x8, 0x5, r43}, {0x8, 0x2, r44}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r46 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r46) r47 = getegid() r48 = getgid() r49 = creat(0x0, 0x0) ioctl$TCSETAW(r49, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r50 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r50, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r51 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r51) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) syz_open_dev$mice(0x0, 0x0, 0x0) r54 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r54, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r55 = getegid() ioctl$TUNSETGROUP(r54, 0x400454ce, r55) creat(0x0, 0x0) r56 = getegid() r57 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r57, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r58 = getgid() r59 = creat(0x0, 0x0) ioctl$TCSETAW(r59, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r60 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r60, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r60, 0x400454ce, 0x0) r61 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r62 = getegid() ioctl$TUNSETGROUP(r61, 0x400454ce, r62) r63 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r63, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r63, 0x400454ce, r62) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r64 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r64) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r56}, {0x8, 0x2}, {0x8, 0x3, r58}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r62}, {0x8, 0x2, r64}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r46}, {0x8, 0x2, r47}, {0x8, 0x3, r48}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r53}, {0x8, 0x2, r55}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r65 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r65, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r66 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r67, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r67, 0x400454ce, 0x0) r68 = getegid() r69 = getgid() r70 = creat(0x0, 0x0) ioctl$TCSETAW(r70, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r74) r75 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r68}, {0x8, 0x3, r69}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r71}, {0x8, 0x7, r72}, {0x8, 0x5, r74}, {0x8, 0x2, r76}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r77 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r77, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r77, 0x40046207, 0x0) fcntl$getown(r77, 0x9) r78 = creat(0x0, 0x0) r79 = getegid() ioctl$TUNSETGROUP(r78, 0x400454ce, r79) r80 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r80, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r80, 0x400454ce, r79) r81 = getegid() r82 = getgid() creat(0x0, 0x0) r83 = getegid() r84 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r84, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r85 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r87) r88 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r88, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r89 = getegid() ioctl$TUNSETGROUP(r88, 0x400454ce, r89) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r79}, {0x8, 0x2, r81}, {0x8, 0x3, r82}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r83}, {0x8, 0x7, r85}, {0x8, 0x5, r87}, {0x8, 0x2, r89}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r91 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r91, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r92 = getegid() r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r94 = creat(0x0, 0x0) ioctl$TCSETAW(r94, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r95 = getegid() ioctl$TUNSETGROUP(r94, 0x400454ce, r95) r96 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r96, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r96, 0x400454ce, r95) r97 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r97) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r98, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r92}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r95}, {0x8, 0x7, r97}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r99 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r99, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r100, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r101 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r101, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r102 = getegid() r103 = getgid() r104 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r104) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r105 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r106 = getegid() ioctl$TUNSETGROUP(r105, 0x400454ce, r106) r107 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r107, 0x400454ce, r106) r108 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r108, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r109 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r102}, {0x8, 0x3, r103}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r104}, {0x8, 0x7}, {0x8, 0x5, r106}, {0x8, 0x2, r109}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r110 = gettid() ptrace$setopts(0x4206, r110, 0x0, 0x0) tkill(r110, 0x17) getpgid(r110) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r111 = getegid() setregid(0x0, r111) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r112 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r112, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 736.041096] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.093589] binder: undelivered TRANSACTION_ERROR: 29189 [ 736.099121] binder: undelivered TRANSACTION_ERROR: 29189 [ 736.108618] binder: BINDER_SET_CONTEXT_MGR already set [ 736.114956] binder: 31860:31862 ioctl 40046207 0 returned -16 07:59:46 executing program 5: mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @multicast2}, 0x90, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='veth0\x00', 0x800000000000, 0x200, 0x8000}) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'nr0\x00'}) socketpair(0x0, 0x3, 0xed, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000300), 0xffffff7e) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000380)) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x0, 0x28eaf70b}}, 0x28) ioprio_set$uid(0x3, 0x0, 0x0) lstat(0x0, 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x208200) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$binfmt_elf64(r3, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write(r5, &(0x7f00000000c0)="b8b9e3904139d1111e7e2c8ef65602a21bd5ab61608692502a3185adb76748bdfe1ca78d6cbe3de251f17a9d69e2002f4df0574881c43aee76a1aa7352a27cdff6e11c7f53348dd5f50ae81786927874224eeead597a51f6cb", 0x59) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) [ 736.188187] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 736.197757] binder: BINDER_SET_CONTEXT_MGR already set [ 736.204919] binder: 31806:31827 ioctl 40046207 0 returned -16 [ 736.239117] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 736.255986] binder: 31806:31823 ioctl 400454ce 0 returned -22 [ 736.267953] binder: BINDER_SET_CONTEXT_MGR already set [ 736.273989] binder: BINDER_SET_CONTEXT_MGR already set [ 736.305454] binder: 31876:31878 ioctl 40046207 0 returned -16 [ 736.311588] binder: 31806:31880 ioctl 40046207 0 returned -16 [ 736.326184] binder: 31806:31812 transaction failed 29201/-28, size 72-24 line 3137 [ 736.352454] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 736.386316] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 736.441183] binder: 31876:31878 transaction failed 29201/-28, size 72-24 line 3137 [ 736.625239] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14657 sclass=netlink_xfrm_socket [ 736.693227] binder: undelivered TRANSACTION_ERROR: 29201 07:59:46 executing program 3: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x7, 0x0, 0x27, 0x104}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x7ff, 0x6, 0x4, 0x6, 0x1, 0x2, 0x81, 0x4, 0xff, 0x4}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000540)={0x50, 0x0, 0x3, {0x7, 0x1f, 0x2, 0x608200, 0xfffd, 0x7}}, 0x50) syz_genetlink_get_family_id$ipvs(0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r6 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r9 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r11 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r12, 0x0) r13 = creat(0x0, 0x0) r14 = getegid() ioctl$TUNSETGROUP(r13, 0x400454ce, r14) r15 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r15, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r15, 0x400454ce, r14) r16 = getegid() r17 = getgid() r18 = creat(0x0, 0x0) ioctl$TCSETAW(r18, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r21) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r21) r22 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r23 = getegid() ioctl$TUNSETGROUP(r22, 0x400454ce, r23) r24 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r24, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r24, 0x400454ce, r23) r25 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r25, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r26 = getegid() ioctl$TUNSETGROUP(r25, 0x400454ce, r26) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r14}, {0x8, 0x2, r16}, {0x8, 0x3, r17}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r19}, {0x8, 0x7, r21}, {0x8, 0x5, r23}, {0x8, 0x2, r26}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r27 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r27, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r28 = openat$cgroup_subtree(r1, &(0x7f0000000400)='cgroup.subtree_control\x00', 0x2, 0x0) r29 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r29, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r29, 0x40046207, 0x0) r30 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r30, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r31 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r31, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xde5}, 0x1c) r32 = dup2(r31, r31) setsockopt$inet6_icmp_ICMP_FILTER(r32, 0x1, 0x1, &(0x7f0000000080), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r32, 0x0, 0x43, &(0x7f0000000640)={'icmp6\x00'}, &(0x7f0000000680)=0x1e) ioctl$DMA_BUF_IOCTL_SYNC(r32, 0x40086200, &(0x7f00000000c0)=0x2) ioctl$KDSETKEYCODE(r32, 0x4b4d, &(0x7f0000000700)={0x0, 0x1}) r33 = openat$cgroup_procs(r32, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) r34 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r34, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r34, 0x40046207, 0x0) r35 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x800, 0x0) r36 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r36, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r37 = socket$key(0xf, 0x3, 0x2) r38 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040)='/dev/loop-control\x00', 0x800002, 0x0) r39 = openat$urandom(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/urandom\x00', 0x8000, 0x0) r40 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r40, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r40, 0x40046207, 0x0) r41 = openat$random(0xffffffffffffff9c, &(0x7f0000001800)='/dev/urandom\x00', 0x18081, 0x0) r42 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r42, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r43 = syz_open_procfs(0x0, &(0x7f0000001840)='net/stat\x00') r44 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r44, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r45 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r45, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r46 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r46, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r46, 0x40046207, 0x0) r47 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r47, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r47, 0x40046207, 0x0) r48 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r48, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r48, 0x40046207, 0x0) r49 = socket(0x10, 0x3, 0x0) write(r49, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r50 = accept4$packet(r49, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000018c0)=0x14, 0x0) r51 = gettid() ptrace$setopts(0x4206, r51, 0x0, 0x0) tkill(r51, 0x17) r52 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r53, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0, 0x0}, &(0x7f0000001940)=0xc) r55 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001980)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r56 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r56, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r56, 0x40046207, 0x0) r57 = inotify_init1(0x80800) r58 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r58, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r59 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000019c0)='/selinux/status\x00', 0x0, 0x0) r60 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r60, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r60, 0x40046207, 0x0) r61 = openat$zero(0xffffffffffffff9c, &(0x7f0000002540)='/dev/zero\x00', 0x980bd16be507aba9, 0x0) r62 = syz_open_dev$loop(&(0x7f0000002880)='/dev/loop#\x00', 0x0, 0x400000) r63 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r63, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r64 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r64, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r64, 0x40046207, 0x0) r65 = gettid() ptrace$setopts(0x4206, r65, 0x0, 0x0) tkill(r65, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r66, 0x0) lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002980)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000029c0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast1}}, &(0x7f0000002ac0)=0xe8) r70 = creat(0x0, 0x0) r71 = getegid() ioctl$TUNSETGROUP(r70, 0x400454ce, r71) r72 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r72, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r72, 0x400454ce, r71) r73 = getegid() r74 = getgid() r75 = creat(0x0, 0x0) ioctl$TCSETAW(r75, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r76 = getegid() ioctl$TUNSETGROUP(r75, 0x400454ce, r76) r77 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r77, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r77, 0x400454ce, r76) r78 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r78) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r78) r79 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r80 = getegid() ioctl$TUNSETGROUP(r79, 0x400454ce, r80) r81 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r81, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r81, 0x400454ce, r80) r82 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r82, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r83 = getegid() ioctl$TUNSETGROUP(r82, 0x400454ce, r83) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r71}, {0x8, 0x2, r73}, {0x8, 0x3, r74}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r76}, {0x8, 0x7, r78}, {0x8, 0x5, r80}, {0x8, 0x2, r83}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r84 = gettid() ptrace$setopts(0x4206, r84, 0x0, 0x0) tkill(r84, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r85, 0x0) r86 = creat(0x0, 0x0) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) r88 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r88, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r88, 0x400454ce, r87) r89 = getegid() r90 = getgid() r91 = creat(0x0, 0x0) ioctl$TCSETAW(r91, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r92 = getegid() ioctl$TUNSETGROUP(r91, 0x400454ce, r92) r93 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r93, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r93, 0x400454ce, r92) r94 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r94) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r94) r95 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r96 = getegid() ioctl$TUNSETGROUP(r95, 0x400454ce, r96) r97 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r97, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r97, 0x400454ce, r96) r98 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r98, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r99 = getegid() ioctl$TUNSETGROUP(r98, 0x400454ce, r99) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r87}, {0x8, 0x2, r89}, {0x8, 0x3, r90}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r92}, {0x8, 0x7, r94}, {0x8, 0x5, r96}, {0x8, 0x2, r99}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r100 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r100, 0x40046207, 0x0) r101 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000002b00)='/selinux/member\x00', 0x2, 0x0) r102 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r102, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r103 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r103, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r104 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r104, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r104, 0x40046207, 0x0) r105 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r105, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r105, 0x40046207, 0x0) r106 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r106, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r107 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003280)='/dev/rtc0\x00', 0x100, 0x0) r108 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r108, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r108, 0x40046207, 0x0) r109 = dup3(0xffffffffffffffff, r108, 0x40000) r110 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r110, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r111 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r111, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r112 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000032c0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@loopback}}, &(0x7f00000033c0)=0xe8) r114 = creat(0x0, 0x0) r115 = getegid() ioctl$TUNSETGROUP(r114, 0x400454ce, r115) r116 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r116, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r116, 0x400454ce, r115) r117 = getegid() r118 = getgid() r119 = creat(0x0, 0x0) ioctl$TCSETAW(r119, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r120 = getegid() ioctl$TUNSETGROUP(r119, 0x400454ce, r120) r121 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r121, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r121, 0x400454ce, r120) r122 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r122) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r122) r123 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r124 = getegid() ioctl$TUNSETGROUP(r123, 0x400454ce, r124) r125 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r125, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r125, 0x400454ce, r124) r126 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r126, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r127 = getegid() ioctl$TUNSETGROUP(r126, 0x400454ce, r127) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r115}, {0x8, 0x2, r117}, {0x8, 0x3, r118}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r120}, {0x8, 0x7, r122}, {0x8, 0x5, r124}, {0x8, 0x2, r127}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r128 = openat$tun(0xffffffffffffff9c, &(0x7f0000003400)='/dev/net/tun\x00', 0x20802, 0x0) r129 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000003440)='/selinux/context\x00', 0x2, 0x0) r130 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r130, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r131 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r131, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r131, 0x40046207, 0x0) r132 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r132, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r133 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000003540)='/proc/self/attr/current\x00', 0x2, 0x0) r134 = perf_event_open(&(0x7f00000035c0)={0xeba0d9c37a4840de, 0x70, 0x8, 0xcf, 0x5, 0x6, 0x0, 0x16, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x78, 0x4, @perf_bp={&(0x7f0000003580), 0x124df2b4dad92957}, 0x8, 0x9, 0x7a, 0x7, 0x3, 0x7ff, 0x48}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) r135 = socket(0x10, 0x3, 0x0) write(r135, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$sock_cred(r135, 0x1, 0x11, &(0x7f0000003640)={0x0}, &(0x7f0000003680)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000036c0)=0x0) stat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000037c0)='./file0\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0}) r140 = creat(0x0, 0x0) r141 = getegid() ioctl$TUNSETGROUP(r140, 0x400454ce, r141) r142 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r142, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r142, 0x400454ce, r141) r143 = getegid() r144 = getgid() r145 = creat(0x0, 0x0) ioctl$TCSETAW(r145, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r146 = getegid() ioctl$TUNSETGROUP(r145, 0x400454ce, r146) r147 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r147, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r147, 0x400454ce, r146) r148 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r148) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r148) r149 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r150 = getegid() ioctl$TUNSETGROUP(r149, 0x400454ce, r150) r151 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r151, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r151, 0x400454ce, r150) r152 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r152, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r153 = getegid() ioctl$TUNSETGROUP(r152, 0x400454ce, r153) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r141}, {0x8, 0x2, r143}, {0x8, 0x3, r144}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r146}, {0x8, 0x7, r148}, {0x8, 0x5, r150}, {0x8, 0x2, r153}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r154 = gettid() ptrace$setopts(0x4206, r154, 0x0, 0x0) tkill(r154, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r155, 0x0) lstat(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000003a00)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="d4e42ee3b0977c1d52fb3b8e7d525d56414b987025263612e197ee5d7d466bec8380d553bf9f4e0a8169d1cb48d1305b898ccd99e62bdb219de57b4a4657d652be9b701056a9a2e0a77d317c3fea", 0x4e}, {&(0x7f0000000280)="9ecc47f81979e44d15a76c65f7aaa4b4e0f3595e27d505a452ef20a4e433c6c18b010bc7ff828f497c5a0d358ecc1c0ec3c9bd7011aa2f0c5c9b5edab46500067a0d53d1bf2406d56fecce32374b6535ca86497f70a19d2b86a8ef1d8d7907b1945775500c72d676338fb1af3695259a71b9841898d2995c44db0c399b3315a8cb4f65d477e0f9a82fe80349ea3b00cdcb522fa581d00f7dba28e427fbc50afd587f7be9b18e11932602b7b392db995f46c3cf96c6ffa71f1cf9e91c5546d6de5c7efb6fae027013afa558551c71f3d2beaaad1f3facf3066074706270f82a8adf963db9", 0xe4}, {&(0x7f0000000380)="4dcab8c47bf33fe3e98cf46885432d314bb8c38d192321a8e918e2fa9a83d82a97bfdd9446a8862f67e4a7663faed085046c580a6cc5a24d62ca41a890e8f68c0831d1cac3c477b533cb1a52a4abd26218ec62c82eeaf97b186bf1c35da6f867f75ffc069b0a1eb53d82b3431f0cb325a964a8966fe609a2341ab443e09c04aa", 0x80}], 0x3, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r4, r5]}}, @rights={{0x24, 0x1, 0x1, [r6, r7, r8, r9, r10, r11]}}, @cred={{0x18, 0x1, 0x2, {0x0, r12, r26}}}, @rights={{0x2c, 0x1, 0x1, [r2, r27, r28, r29, r30, r33, r1, r34]}}, @rights={{0x2c, 0x1, 0x1, [r1, r35, r2, r36, r0, r0, r0, r37]}}], 0xb0, 0x1}, {&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000680)="4a54398f4736b33e97edb8de42db99c2170ccdb53cb5522994d352f1c0ec3efc8583e339", 0x24}, {&(0x7f00000006c0)="f040cdd35d4c659b0a845d65536eeab425e3fbfde527c33d74f8beb206d9be29084b6303068b910b038206cf740770570934081577bafca0c30483545a5ac27b34963e8d30e0a24655b2e7db12de9a43bc2ca333fe8fd520e5d946f89c2a13775fabc05ce41d1014291b227ce473f0b759c34da937ea4766d810eacd37a0d07af0c2c17638c381694ef2730a272554f0f45b50871af13e1ec595cbce0e2b0fca1213cb682b5b278a40dba69f", 0xac}, {&(0x7f0000000780)="1b0f746151ef", 0x6}, {&(0x7f00000007c0)="375ba7a589", 0x5}, {&(0x7f0000000800)='z', 0x1}], 0x5, 0x0, 0x0, 0x40}, {&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000900)="c6429de70c1348e5f5cec8932d14c4ad210d14906c8aac8510076d8fa0e61d7da816da06d31fe1feb806194e04076c8c7acce663f827a7649a5b628ccc13ce3e5312ee7e9757e0d2caae3f1ec8148b5c07", 0x51}, {&(0x7f0000000980)="091e5c3b38964ad2ad2f947bc855d1de1c886f6c0e9d8973421e717c0022cc80f850101cdf715bb1ca465c0b7aba3d5e1a3eaa2af7671b6b722087896eb21c6fcbf4b72eee69b808a70deeb7698d1f239b92515a803553d2fe620c2e8d161cb7117339653120a32ddcae569ac38ba030a18601", 0x73}, {&(0x7f0000000a00)="eef6626e5161628c515a62afaf55f1be8169cd3f18a9e1bb9b61091d3c82d68713529cc94b5e77846f6274c4bb1e4dc29744e13065eb15b4f0e62fbf89649191966033944bc339e080cc47c314845659e208e0845964194a3a3069b6d14f07dc8222b71c1b2398e22d907bcb7d900490312347e3defa34ff6ce628f5309efd0ed6aed5cc7f7c8035481d2f91ea8dfd02d38a7302a3d293bb59df61c2fd9f16d15862de7be4d1311b7f66b16e7a2f584c9a0ef62557284bac130d4dcbad5c817a7be00e2f9acbf62fe0", 0xc9}, {&(0x7f0000000b00)="23d1ee35db142a2526614898bb68d2cefa43bffa6d3b0f", 0x17}, {&(0x7f0000000b40)="27c096542bb10a0c5720f8585652bc66f1084ab2f69fa41a0777765614b8c135350648ccd3d584902d77afc73c5a0b7c75d9ecfc1bbe93cc6606e89c8b49238c9a99145eafb35526c93c60243c6900eb2ef2753123ebfc7f9fb7108ab7eb588b3f06a94b36b6da7ba3b0572c2b02a276d204f39398b0ee70abe099beae7fe4e56b355aae91bba5ec090d13deca5ca63a27995d3622c9f878e99f1ff6b0c85edc27b6fa385c9a0c0dd51c55f5b09e1d46bf1e1c55317877e05cc695019e38b0c5e0a74bc66a0d480ea78361f848fcf98de70b215285926d3236729a9f1562b2d2f531100c35f53048b8e40647f3dd6eeedee5ad7778", 0xf5}, {&(0x7f0000000c40)="802d53a428b6812d7c900cc5872f0932d90acc1b6aa3f34a4bf99eb3dc9a1e18a9e0933b76c7cebc89bd89430206bb838b6329409c71c43cef7264620b7e007cf849e322e8c4e4792f9249b7f0d3ed82361e0f8fa979008d1ab9bcb0f1010ed55c1d0f5e8649988e014aaa86a55d502ea043e4ed380d861b16df364bd2380e324591a7b99b7d640403245f55424706e02f2d4966fec729c6a1079763ccce3e7c741d60afa715bb1ebe97fcd2fbdde7463a81e4002616b37391189c29f8e6ff9e9f6c7c8989fb6257273fea641845fccd393ece7685f79cc9101ad7b57c3c5d4fea2aa61915631f916f149c9c1e03", 0xee}], 0x6, &(0x7f0000000d80), 0x0, 0x40000}, {&(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e40)="5aef232702dc0962c7e7f053b7c6a7cc8815e8d6706d8884cf1f04326cab974f742465ca60502257ca776443ef8a61ceef19699ccbd60fb0633cfe06443870363cbb6bd093be7a2e4feeb1d45d0d470e252d12ebfa1c85eb16ac7ca45a1e062b6f284db10ee761fc0d65f6557665b043b08996", 0x73}, {&(0x7f0000000ec0)="25497758a61699f9a6fa43bb215fac0a2157c83caaf458e314a7fad9ddef207b14d6146ce617cad5b02254c35fb566471721f408b9d4419d19a801e91034c920bdf85d87fe4b0b9beb7fa1f2793b64d3dfd261a24ef799a88b2b72345c1ad3831407b6a8add2fd7df56add08ff6ac869702228665dfe097076bc9e472bcc4bbe66177b0d11e25e46aae0d0849ecc9a74d30d73684aac84427b31ba1a0d3f7c33", 0xa0}, {&(0x7f0000000f80)="24ad865456fe579169bc349cdb7ad09377a3652bb4a890dd5c2f861de6e38f8900e9ffe204ec14a1e54b7aa800cb40f81c20044d3816df241ba019470bf8641ccf1b", 0x42}], 0x3, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [r2, r38]}}], 0x14, 0x8000}, {&(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001140)="cd02bccf57356b6a36322e86c1b78821d3c0858d1641a7f921296b26a6114f01584b8bf5a6744eb1af6e7d1b65574825f75025c832c8e6b1360334baba6e7d0e26fdcae23944a9729ab8d1b086360bee04a633f5b13425ef2f7559bc7015ca1ae7e5d6f739fb451f307e0f96cd9537af9e9d84bdadb08531db5cdf289e469c4d5db68ff5e2855c5d53619c3bf5925ad2ac12d4c6350d3edd88e15af8a39579514d7c627cfcd94d9b21a18394e91817d7207ea2497e4118c8224c70cc233be907014c697fe265f849fc744764b2aa655f6d4fabb2e161ac70ce4742a2f5506ec04b", 0xe1}, {&(0x7f0000001240)="cc1f524cde25782e8b3a061baf212322f55815361edb85823c87414cf779fa3514f2bc1c9969d612f6a0b00a1dcb080108c86ca825a102c1443ce6d8108594e39b5d4fcd26331566422cfd66aed5f0e514ad9fbedafc208b03c753558aeea59c2ee30b963bcd50315be0b8f466cd1464dcdf3eec2ebc177ebaa88dd42baf9b8cd9c5dc1fc80c647a3784ebdf86cefca0ccea1e99e28f3475dde4b62cb75771c65ac759861aeb90a8485b3ef9d45b029a91ce04fe50cd9c000ed565bc75fa0a6d6fc038b112e5fb2d7bb89d2ff9fb4f60faf243", 0xd3}, {&(0x7f0000001340)="0b4cfd593a403e7d7cabb9f4fdb6104e18bb8a89526514122fc7c58c45c9cd9a", 0x20}, {&(0x7f0000001380)="86b8d9c7b8fb2ff55c92668bdb87bfd64ad1b1e4f9937729cb77e3b69a59150a060a999252874ed79de8f2924e62a2691f17cb4de078dd3a01065e02e4e37e13c2e0a9263ed056391ea790c3c6ba4acd3da003a72b8b0d695f278b70e451c7e78ebb1a57641fb0abd6a71579fce885758547680cd078368a5b630bd082ece03102c186f6239d6b9a474a741f5c42d93542ca6195b03cb1cd81bffd4934330a8c8786442a11c4a3141b9bcd085fab99cd250aae7ddd20a48e41798f894ea64b17c56964f79f3e3bdf3a419eb6217d23361ac46a62a8f0bba2", 0xd8}], 0x4, &(0x7f0000002580)=[@rights={{0x10, 0x1, 0x1, [r39]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r40, r41, r42, r2, r43, r44]}}, @rights={{0x34, 0x1, 0x1, [r45, r46, r2, r47, r2, 0xffffffffffffffff, r1, r48, r0, r50]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {r51, r52}}}, @cred={{0x18, 0x1, 0x2, {0x0, r53, r54}}}, @rights={{0x28, 0x1, 0x1, [r55, r56, r57, r58, r59, r60, r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r61, 0xffffffffffffffff]}}], 0x110}, {&(0x7f00000026c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002840)=[{&(0x7f0000002740)="deb92546900000a907e6c19274e3ef4e501cf4186c7032d0af535be5ca4a479f3a815000cabf4ed51f996a9ae5fd2a8d9ff488be41d5bb401b010f743856fe4a83e1a9f6a16e2de7557a3335371ecec4ec5c2aca7aeb38b1fb543d4d98c728e35c17be9c6ca75995067594159e3cb027e7104be7b1ccaa355c00e2c645ee1c200f2b99a9f8f596d14b4cd676bb8475b8a22bdf9cb8e351cb6fdb46b72ecf19a0fc8d8c131e72eea47fc2d59ddc6a892b22a09e6cace69f4eab32e8c4a64608186d250dc811018e9940014c55148f178b9ad2800ad24064f33d01ebd79bb5e18d5b035c8c069a2bf1c3e47496593d54f06bafbba20cb7cd2636bc7332", 0xfc}], 0x1, &(0x7f0000002b40)=[@rights={{0x28, 0x1, 0x1, [r0, r62, 0xffffffffffffffff, r63, r64, 0xffffffffffffffff, r2]}}, @cred={{0x18, 0x1, 0x2, {r65, r66, r67}}}, @cred={{0x18, 0x1, 0x2, {r68, r69, r71}}}, @cred={{0x18, 0x1, 0x2, {r84, r85, r96}}}, @rights={{0x20, 0x1, 0x1, [r100, r101, r102, r0, r103]}}], 0x90, 0x4004040}, {&(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000002c80)="bbbb7b075da652fdf66819ca6c010712a34e29a2704921704ab76949eddbedefe12a92af25fe40ee1b4763e6200289e0676c8abd02ebe4978f241ea686e27d7f6048cc803f9dfd3cd869d2eeb529569b429ef8d521da5577d4e9bf8f45d791ff2209e53ab3933477552b3143885248afe4871d6fb39f8fa51cc736db90f0be22f9c7c7d9a9f2b7bf2690ec5817c0fd247e8e900ff750c90a206b3c8b4b", 0x9d}, {&(0x7f0000002d40)="008bbcec24f89f3f493fa4da25bceaff33343c9798d19c0d6fd7755fc81f999b68820707d54e2d91fdde6eb3941cff53102e68a4a58b8749dfbe091fc5b5e7c1c66a6c8a0e5999c07046153ad59d4da3303cbb15f2fa7d2f5a2eb57eb975701de93ebecaab7ed01bb82b134b0a7780b725d61def1d91ebde51650060a5dfa35d61b25951e9129cfe76769f599048b29c300fdc3715ae927693aeb177db5298b781e2b719dfb707ebf0fc81018a1df3a73ac68bf725af29f0ef78058a186d1979d49e64abf4dfbf08fdc41a1a4fc0", 0xce}, {&(0x7f0000002e40)="d154ba0241bbd19a08a65f1d433ea6881ed5259efc5d8650e916230e15893bf0803b895e733f0b9ce56a29e59e4314774bf98a6095c5145cb950d0e1e92474a385dd5be3a3c0202f972554a9bf252433d6e47a4340f6fedbea362f5bc917456cfba8e6bc1af9360ce5f6846a37f505e422a14e919e6cfd2a4d405df355872587fa646ae3d0fb280323d821e8896502dbae2201cb230882dc7444453adfad1764f9217573", 0xa4}, {&(0x7f0000002f00)="7e3c1ac98b04b3abd3458bf64e9f997bf5175818c46adf13150bd6c552eb2bcccf4196b79bf56e91045b1391351ac99724cc2a53126e30416031f717ee6d50122db89e35f0cbbaaf62b5cee89e78ad20590843728b1f7fbdc7fd40d4f4165009bf660e08f63cafed8d37807ab8422fd718feefc761a723a51213dcd8118293edab6f909c068c95e983bd007b275caf17756ed320523c3a86b370211a65b50c99fe1c4996a873e9477d89c090ee181b164b60dbaea6f16f09ab5045981ad2e513c512c6c71f19ec100d33d451d973da1fc6f83d0e44685b74947431999f5ba88c6966d98ce16d2388b144e7886283", 0xee}, {&(0x7f0000003000)="a8fefdded28999371745bad26831785951d40d64d37b159a6c00f6c4a0cea0cdecefafe68b57c4d93bea3182d6e87839fe361eceab2ca57e8296e41fecac9c13e47b6b54e8989ecebf70068cb34a24c5d94ae3c8838c197f1efca296be88093e4004a8ac7182df86", 0x68}, {&(0x7f0000003080)="7a8a56fe855969e8522f7de16f204f2ae79014c7805ec09f50a8d9e0fc696f96284ab9c385ca75cb19f95ea588c92cbb90186d83e92c711abafa33cfb00eb5262a504c9f907af9ec8d6cb50f24181b16fa24be0a5e18379856b3d68e18d243c2d2a9eab61ff1bff9f1e497f7288076e494785936fcdc35d4dca854dc9048bd32c4187f7605312223ac887dd2c08eff912e646f0546ba37ba7605e1c70e8e9fcb2c23a43fdd8dfca7bd04f6bd701c9288fac9660d6290802fd77c18e8104352bc11bdd6db85c3715ae7dc903ce67b8a7bcfefd412c67a5c2a7356d1b4a0e3ec7ab51a14afbfeb0663f5baeb73", 0xec}, {&(0x7f0000003180)="3c29953526990a1f84c3769af012a19470df39ad0746590a8fad601d55251276f38b13054c15dd722e53314292ec46e5a115135de30817155b94be3add3b10faa5b0f2e1dd8fb01d8839493bbfd67fe11b29e02a9b3c886262e575aa96857ff7539ed770a6a7d4ed840c0d2a7d0c65ed102c4a2e7d706d202dd506a163c6994dfb05018003b40eb821a0148aaa0b04598767276504a58c793c617292d79a91c4e48e7430f4e5d951755fe70f3143e2a964473afd6d218f50df2e5f4d5f51ce1e", 0xc0}], 0x7, &(0x7f0000003940)=[@rights={{0x34, 0x1, 0x1, [r104, r105, r106, r1, r2, r107, r109, r110, r111, r2]}}, @cred={{0x18, 0x1, 0x2, {r112, r113, r117}}}, @rights={{0x2c, 0x1, 0x1, [r128, r129, r130, r131, r0, r132, r133, r134]}}, @cred={{0x18, 0x1, 0x2, {r136, r137, r138}}}, @cred={{0x18, 0x1, 0x2, {0x0, r139, r143}}}, @cred={{0x18, 0x1, 0x2, {r154, r155, r156}}}], 0xc0, 0x4080}], 0x7, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x6) [ 736.885017] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.892587] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.900868] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.933365] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.944522] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.955537] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.971459] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.984537] binder: undelivered TRANSACTION_ERROR: 29201 [ 736.998914] binder: undelivered TRANSACTION_ERROR: 29201 [ 737.013676] binder: undelivered TRANSACTION_ERROR: 29201 07:59:46 executing program 2: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getrusage(0x98baa3b0d119d235, &(0x7f0000000600)) memfd_create(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000001c0)={'yam0\x00', {0x2, 0x4e23, @remote}}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000400)=""/215) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x80000) lseek(r4, 0x0, 0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)=ANY=[], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x6a) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x8) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x987ec1747d75b9f4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) vmsplice(r7, &(0x7f0000000000), 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000500)) fchdir(r6) creat(&(0x7f0000000100)='./file0\x00', 0x80) 07:59:46 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="e880f1268fc5c11d1acf113ed474de04084b9513ea89db07e38d82e2217ca83e38bdef2f83f82084c4fafe456671d3ad5d09b47196a645f0f5d7dd2c11", 0x3d}, {&(0x7f0000000080)="291e5375e9c8432dcd90b6c59b44e4f0929535a88c3b5654ce91460c2cda83371505a49020b759bf8b7a8fd0372c4745a64311095d108d68f285078a0e4fcd9667d8464ad3f0e68d36ec6748dc9c0fd05457842b5ad03b345c2a92659ca446186c980456ca28882772d907bf9c61940830f1834caf0cd0e5ef297301dcf9edddf4c786491768a254f699112d75411b72929d", 0x92}], 0x2, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x44040, 0xc0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) socket$inet_udplite(0x2, 0x2, 0x88) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x0) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000240)=""/190, &(0x7f0000000300)=0xbe) write$selinux_user(r3, &(0x7f0000000340)={'system_u:object_r:policy_config_t:s0', 0x20, 'unconfined_u\x00'}, 0x32) r5 = dup(r3) clock_gettime(0x0, &(0x7f0000002f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000380)=@tipc=@name, 0x80, &(0x7f0000001640)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/208, 0xd0}, {&(0x7f0000001500)=""/16, 0x10}, {&(0x7f0000001540)=""/182, 0xb6}, {&(0x7f0000001600)=""/63, 0x3f}], 0x5}, 0x6c0000}, {{&(0x7f0000001680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001700)=""/75, 0x4b}, {&(0x7f0000001780)=""/226, 0xe2}, {&(0x7f0000001880)=""/7, 0x7}, {&(0x7f00000018c0)=""/15, 0xf}, {&(0x7f0000001900)=""/42, 0x2a}, {&(0x7f0000001940)=""/203, 0xcb}, {&(0x7f0000001a40)=""/184, 0xb8}, {&(0x7f0000001b00)=""/235, 0xeb}], 0x8, &(0x7f0000001c40)=""/136, 0x88}}, {{&(0x7f0000001d00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/182, 0xb6}], 0x1, &(0x7f0000001e80)=""/4096, 0x1000}, 0x20}], 0x3, 0x40010002, &(0x7f0000002f40)={r6, r7+30000000}) connect$packet(r5, &(0x7f0000002f80)={0x11, 0x1, r8, 0x1, 0x1f, 0x6, @broadcast}, 0x14) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000002fc0)) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000003000)=""/15, 0xf) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket(0xa, 0x3, 0x3) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000003080)={0x1, &(0x7f0000003040)=[{0xd6c6, 0x6, 0x1f, 0xfffffbff}]}, 0x8) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000030c0)={0x401, {{0x2, 0x4e22, @empty}}, 0x1, 0x2, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @loopback}}]}, 0x18c) getsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000003280)=""/18, &(0x7f00000032c0)=0x12) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003340)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x28081200}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x34, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1e, 0x6, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20040050) setxattr$security_smack_transmute(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)='security.SMACK64TRANSMUTE\x00', &(0x7f00000034c0)='TRUE', 0x4, 0x1) r11 = dup2(r1, 0xffffffffffffffff) write$FUSE_NOTIFY_POLL(r11, &(0x7f0000003500)={0x18, 0x1, 0x0, {0x4}}, 0x18) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000003540)) ioctl$TCSETXF(r11, 0x5434, &(0x7f0000003640)={0x6, 0x3, [0x9, 0x101, 0x18, 0x6, 0x7f], 0x5}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000036c0)={0x5, &(0x7f0000003680)=[{0xb32b, 0xd8, 0x80, 0xeac}, {0xffff, 0x20, 0x6, 0x4}, {0xffff, 0xff, 0xf8, 0x8}, {0xbcf, 0x0, 0xe0, 0x2}, {0x1ff, 0x1, 0x4, 0x3}]}) r13 = syz_open_pts(0xffffffffffffffff, 0x40) splice(r12, &(0x7f0000003700)=0xfff, r13, &(0x7f0000003740)=0x800000000000000, 0x5, 0x19) 07:59:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) r37 = getegid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r38 = getegid() r39 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r39, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r39, 0x400454ce, r38) r40 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r42 = getegid() ioctl$TUNSETGROUP(r41, 0x400454ce, r42) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r43 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r38}, {0x8, 0x7, r40}, {0x8, 0x5, r42}, {0x8, 0x2, r43}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r44 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r44, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r45 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r45) r46 = getegid() r47 = getgid() r48 = creat(0x0, 0x0) ioctl$TCSETAW(r48, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r49 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r49, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r50 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r50) r51 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r52 = getegid() ioctl$TUNSETGROUP(r51, 0x400454ce, r52) syz_open_dev$mice(0x0, 0x0, 0x0) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r53, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) creat(0x0, 0x0) r55 = getegid() r56 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r56, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r57 = getgid() r58 = creat(0x0, 0x0) ioctl$TCSETAW(r58, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r59 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r59, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r59, 0x400454ce, 0x0) r60 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r61 = getegid() ioctl$TUNSETGROUP(r60, 0x400454ce, r61) r62 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r62, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r62, 0x400454ce, r61) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r63 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r55}, {0x8, 0x2}, {0x8, 0x3, r57}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r61}, {0x8, 0x2, r63}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r45}, {0x8, 0x2, r46}, {0x8, 0x3, r47}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r52}, {0x8, 0x2, r54}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r64 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r64, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r65 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r65, 0x400454ce, 0x0) r66 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r66, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = getegid() r68 = getgid() r69 = creat(0x0, 0x0) ioctl$TCSETAW(r69, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r70 = getegid() ioctl$TUNSETGROUP(r69, 0x400454ce, r70) r71 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r71) r72 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r73 = getegid() ioctl$TUNSETGROUP(r72, 0x400454ce, r73) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r67}, {0x8, 0x3, r68}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r70}, {0x8, 0x7, r71}, {0x8, 0x5, r73}, {0x8, 0x2, r75}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r76 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r76, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r76, 0x40046207, 0x0) fcntl$getown(r76, 0x9) r77 = creat(0x0, 0x0) r78 = getegid() ioctl$TUNSETGROUP(r77, 0x400454ce, r78) r79 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r79, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r79, 0x400454ce, r78) r80 = getegid() r81 = getgid() creat(0x0, 0x0) r82 = getegid() r83 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r83, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r84 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r84) r85 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r86 = getegid() ioctl$TUNSETGROUP(r85, 0x400454ce, r86) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r87, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r78}, {0x8, 0x2, r80}, {0x8, 0x3, r81}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r82}, {0x8, 0x7, r84}, {0x8, 0x5, r86}, {0x8, 0x2, r88}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r89 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r89, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r91 = getegid() r92 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r92, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r93 = creat(0x0, 0x0) ioctl$TCSETAW(r93, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r94 = getegid() ioctl$TUNSETGROUP(r93, 0x400454ce, r94) r95 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r95, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r95, 0x400454ce, r94) r96 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r97 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r97, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r97, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r91}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r94}, {0x8, 0x7, r96}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r98 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r98, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r99, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r100 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r100, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r101 = getegid() r102 = getgid() r103 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r103) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r104 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r105 = getegid() ioctl$TUNSETGROUP(r104, 0x400454ce, r105) r106 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r106, 0x400454ce, r105) r107 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r107, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r108 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r101}, {0x8, 0x3, r102}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r103}, {0x8, 0x7}, {0x8, 0x5, r105}, {0x8, 0x2, r108}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r109 = gettid() ptrace$setopts(0x4206, r109, 0x0, 0x0) tkill(r109, 0x17) getpgid(r109) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r110 = getegid() setregid(0x0, r110) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r111 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r111, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@rand_addr="09de87b835b602cafe810d101fb48d9f", 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000}) r5 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) fcntl$getflags(0xffffffffffffffff, 0x401) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0x0, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x0, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80}}}}) r6 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x4, &(0x7f0000000100)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) setxattr(&(0x7f0000000140)='./file1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974792e2f73656c696e75782f636f6e746578740072b5aa269a1c9cf27f56fb92c33fa766f94e0100000000000000b588bd32e87cb955d0767e8fcf37fc43f62ea93885e9d95af0ae0f0e14b7820fcca68396322f93160e821f9fc9c3"], &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x1f, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1) write$binfmt_script(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="2321202e2f66696c6531202e2f6367726f75703185b72d19af52b965742f74756e00202f73656c696e75782f636f6e7465787400202f70726f632f7468726561642d73656c662f617474722f63757272656e74000a1e8ec38316ccf5ff955251d3eb59cf53ecc234a9022b4427ab8fb09f168703659f67de74b1068eafd6a41f87d3efc15ed4bf73b1795eade13cd7b0c50dea996283cee3f5f423a8f1853eff62410200000000000000b84f5f5e1d1b9fbdeaa789d961f6186bda548a82f59c4989ddaab226b1866258aefeee0c34a31d1544c633384b1d68b9dbb9eb8adebcb017ebfed692b4383807602ecaf48da22f3fb5d3c0a5d812685d09d105e32e2d6eea761b7c9a134955ecfbac0c0f06034d7a5c9e0309a9f68488444cdc81b277839af8eb3926297d81c8b7f50600000000000000b87a60d48af339fd9e45d9486ff6eeddcb7453f0833244f2792f48053a476424faa34c0cf7e9491facc8dd24e1acf54b6ae6f1f83745e6d9e8c0617b596f3b0fe9756e2d152c1c2fd247f729a2a3060a79298acbd2adcec61e2602c22e20d24fc41dfb8781cb0969a56340c284d1989c39ce25fee66a99129316b231eb6d0105bbfffbd2235ce49fece58b1665deab20efc68f1752f57c5bed2cd66495a713ea7422ae9a9e36"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r6, 0x0) [ 737.177143] binder: BINDER_SET_CONTEXT_MGR already set [ 737.216865] binder: 31900:31903 ioctl 40046207 0 returned -16 [ 737.228710] binder: BINDER_SET_CONTEXT_MGR already set [ 737.260951] binder: 31900:31903 ioctl 400454ce 0 returned -22 [ 737.268451] binder: 31901:31915 ioctl 40046207 0 returned -16 07:59:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001108}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x108, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x776}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb689}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e7c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) dup2(r1, r2) [ 737.305161] binder: BINDER_SET_CONTEXT_MGR already set [ 737.312188] binder: 31895:31898 ioctl 40046207 0 returned -16 [ 737.326886] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 737.360910] binder: BINDER_SET_CONTEXT_MGR already set [ 737.384716] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 737.394618] binder: 31895:31898 ioctl 40046207 0 returned -16 [ 737.408176] binder: BINDER_SET_CONTEXT_MGR already set [ 737.419795] binder: 31895:31925 ioctl 40046207 0 returned -16 07:59:47 executing program 0: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x1100082) r3 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806) r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = gettid() r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x4a800) rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)=@ethtool_cmd={0x17}}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0}, &(0x7f0000001300)=0xc) r10 = socket$inet(0x10, 0x2, 0x0) sendmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007841dfffd946f610500020081001f00000904030800080016000400ff7e", 0x24}], 0x1}, 0x0) setxattr$system_posix_acl(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='system.posix_acl_default\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="0200000001000000000000000200ed91", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="02001799", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="10000000000000002000030000000000"], 0x54, 0x1) r11 = getegid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={r6, r9, r11}, 0xc) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000005) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) [ 737.450822] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 737.466514] binder: 31900:31903 transaction failed 29201/-28, size 72-24 line 3137 [ 737.505694] binder: BINDER_SET_CONTEXT_MGR already set [ 737.525636] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 737.534242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 737.549258] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 737.588313] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 737.599312] binder: 31895:31898 transaction failed 29201/-28, size 72-24 line 3137 [ 737.624930] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 737.641614] binder: BINDER_SET_CONTEXT_MGR already set [ 737.648553] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 737.686787] binder: 31895:31925 transaction failed 29201/-28, size 72-24 line 3137 [ 737.716588] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space 07:59:47 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090000800007a2e407ed4a3980580300000000000000a277001419000a001000000000680375000000003c00ef38bf461e59d7", 0x3b8}], 0x1) [ 737.733029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 737.743356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=264 sclass=netlink_route_socket [ 737.760705] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) 07:59:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r37 = getegid() r38 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r38, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r38, 0x400454ce, r37) r39 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r39) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r39) r40 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r41 = getegid() ioctl$TUNSETGROUP(r40, 0x400454ce, r41) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r42 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r37}, {0x8, 0x7, r39}, {0x8, 0x5, r41}, {0x8, 0x2, r42}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r43 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r43, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r44 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44) r45 = getegid() r46 = getgid() r47 = creat(0x0, 0x0) ioctl$TCSETAW(r47, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r48 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r48, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r49 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r49) r50 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r51 = getegid() ioctl$TUNSETGROUP(r50, 0x400454ce, r51) syz_open_dev$mice(0x0, 0x0, 0x0) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r52, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) creat(0x0, 0x0) r54 = getegid() r55 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r55, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r56 = getgid() r57 = creat(0x0, 0x0) ioctl$TCSETAW(r57, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r58, 0x400454ce, 0x0) r59 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r60 = getegid() ioctl$TUNSETGROUP(r59, 0x400454ce, r60) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, r60) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r62 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r62) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r54}, {0x8, 0x2}, {0x8, 0x3, r56}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r60}, {0x8, 0x2, r62}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r44}, {0x8, 0x2, r45}, {0x8, 0x3, r46}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r51}, {0x8, 0x2, r53}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r63 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r63, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r64 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r64, 0x400454ce, 0x0) r65 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r65, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r65, 0x400454ce, 0x0) r66 = getegid() r67 = getgid() r68 = creat(0x0, 0x0) ioctl$TCSETAW(r68, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r69 = getegid() ioctl$TUNSETGROUP(r68, 0x400454ce, r69) r70 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r70) r71 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r66}, {0x8, 0x3, r67}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r69}, {0x8, 0x7, r70}, {0x8, 0x5, r72}, {0x8, 0x2, r74}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r75 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r75, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r75, 0x40046207, 0x0) fcntl$getown(r75, 0x9) r76 = creat(0x0, 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) r78 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r78, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r78, 0x400454ce, r77) r79 = getegid() r80 = getgid() creat(0x0, 0x0) r81 = getegid() r82 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r82, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r83 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r83) r84 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r85 = getegid() ioctl$TUNSETGROUP(r84, 0x400454ce, r85) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r86, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r77}, {0x8, 0x2, r79}, {0x8, 0x3, r80}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r81}, {0x8, 0x7, r83}, {0x8, 0x5, r85}, {0x8, 0x2, r87}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r88 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r88, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r89 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r89, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r90 = getegid() r91 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r91, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r92 = creat(0x0, 0x0) ioctl$TCSETAW(r92, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r93 = getegid() ioctl$TUNSETGROUP(r92, 0x400454ce, r93) r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r94, 0x400454ce, r93) r95 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r95) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r95) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r96 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r96, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r96, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r90}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r93}, {0x8, 0x7, r95}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r97 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r97, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r98, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r99, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r100 = getegid() r101 = getgid() r102 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r102) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r103 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r104 = getegid() ioctl$TUNSETGROUP(r103, 0x400454ce, r104) r105 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r105, 0x400454ce, r104) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r106, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r107 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r100}, {0x8, 0x3, r101}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r102}, {0x8, 0x7}, {0x8, 0x5, r104}, {0x8, 0x2, r107}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r108 = gettid() ptrace$setopts(0x4206, r108, 0x0, 0x0) tkill(r108, 0x17) getpgid(r108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r109 = getegid() setregid(0x0, r109) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r110 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r110, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 737.810215] binder: BINDER_SET_CONTEXT_MGR already set [ 737.816544] binder: 31895:31898 ioctl 40046207 0 returned -16 [ 737.845596] binder: undelivered TRANSACTION_ERROR: 29201 07:59:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/4096) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xffdc) fgetxattr(r7, &(0x7f00000001c0)=@random={'btrfs.', '\x00'}, &(0x7f0000002140)=""/247, 0xf7) recvmmsg(r7, &(0x7f0000005f40)=[{{&(0x7f0000000140), 0x80, &(0x7f0000000600)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/99, 0x63}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000340)=""/104, 0x68}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000400)}, {&(0x7f0000000500)=""/126, 0x7e}], 0x9, &(0x7f0000000440)=""/34, 0x22}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/109, 0x6d}, {0x0}, {&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000a00)=""/170, 0xaa}, {&(0x7f0000000ac0)=""/244, 0xf4}, {&(0x7f0000000bc0)=""/37, 0x25}], 0x7, &(0x7f0000001cc0)=""/244, 0xf4}}, {{&(0x7f0000001dc0)=@isdn, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/10, 0xa}, {&(0x7f0000001e80)=""/178, 0xb2}, {&(0x7f0000001f40)=""/220, 0xdc}, {&(0x7f0000002040)=""/135, 0x87}], 0x4}}, {{0x0, 0x0, &(0x7f0000005b00)=[{0x0}, {&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f00000047c0)=""/253, 0xfd}, {&(0x7f00000048c0)=""/11, 0xb}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/134, 0x86}], 0x6, &(0x7f0000005b80)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005f00)=""/48, 0x30}}], 0x5, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000180)=0x0) r9 = syz_open_procfs(r8, 0x0) sendfile(0xffffffffffffffff, r9, &(0x7f00000000c0)=0x202, 0xdd) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000100)=0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) [ 737.875190] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 737.885970] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 07:59:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={{0x0, 0x0, @descriptor="8964789e1a62ca1a"}}) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x0, 0x7f, 0x7, 0x0, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x19d}, 0x18de8f92) getegid() syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r4) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x0, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) r5 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r7 = dup2(r6, r6) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/383], &(0x7f0000000040)=0xa3) ioctl$int_in(r3, 0x0, &(0x7f00000001c0)) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) [ 737.924616] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.000521] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.010577] binder: 31895:31925 transaction failed 29201/-28, size 72-24 line 3137 [ 738.035684] binder: BINDER_SET_CONTEXT_MGR already set [ 738.046183] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.064422] binder: BINDER_SET_CONTEXT_MGR already set [ 738.066154] binder: 31951:31953 ioctl 40046207 0 returned -16 [ 738.066933] binder: 31951:31953 ioctl 400454ce 0 returned -22 [ 738.072828] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.072836] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 738.072879] binder: 31951:31953 transaction failed 29201/-28, size 72-24 line 3137 [ 738.090844] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.090852] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.090900] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.090960] binder: 31895:31898 transaction failed 29201/-28, size 72-24 line 3137 [ 738.152830] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.170817] binder: 31895:31956 ioctl 40046207 0 returned -16 [ 738.362421] binder: BINDER_SET_CONTEXT_MGR already set [ 738.368796] binder: 31895:31896 ioctl 40046207 0 returned -16 [ 738.409581] binder: BINDER_SET_CONTEXT_MGR already set [ 738.415472] binder: 31895:31897 ioctl 40046207 0 returned -16 07:59:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r37 = getegid() r38 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r38, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r38, 0x400454ce, r37) r39 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r39) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r39) r40 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r41 = getegid() ioctl$TUNSETGROUP(r40, 0x400454ce, r41) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r42 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r37}, {0x8, 0x7, r39}, {0x8, 0x5, r41}, {0x8, 0x2, r42}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r43 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r43, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r44 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44) r45 = getegid() r46 = getgid() r47 = creat(0x0, 0x0) ioctl$TCSETAW(r47, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r48 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r48, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r49 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r49) r50 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r51 = getegid() ioctl$TUNSETGROUP(r50, 0x400454ce, r51) syz_open_dev$mice(0x0, 0x0, 0x0) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r52, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) creat(0x0, 0x0) r54 = getegid() r55 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r55, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r56 = getgid() r57 = creat(0x0, 0x0) ioctl$TCSETAW(r57, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r58, 0x400454ce, 0x0) r59 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r60 = getegid() ioctl$TUNSETGROUP(r59, 0x400454ce, r60) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, r60) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r62 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r62) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r54}, {0x8, 0x2}, {0x8, 0x3, r56}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r60}, {0x8, 0x2, r62}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r44}, {0x8, 0x2, r45}, {0x8, 0x3, r46}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r51}, {0x8, 0x2, r53}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r63 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r63, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r64 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r64, 0x400454ce, 0x0) r65 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r65, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r65, 0x400454ce, 0x0) r66 = getegid() r67 = getgid() r68 = creat(0x0, 0x0) ioctl$TCSETAW(r68, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r69 = getegid() ioctl$TUNSETGROUP(r68, 0x400454ce, r69) r70 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r70) r71 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r66}, {0x8, 0x3, r67}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r69}, {0x8, 0x7, r70}, {0x8, 0x5, r72}, {0x8, 0x2, r74}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r75 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r75, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r75, 0x40046207, 0x0) fcntl$getown(r75, 0x9) r76 = creat(0x0, 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) r78 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r78, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r78, 0x400454ce, r77) r79 = getegid() r80 = getgid() creat(0x0, 0x0) r81 = getegid() r82 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r82, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r83 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r83) r84 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r85 = getegid() ioctl$TUNSETGROUP(r84, 0x400454ce, r85) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r86, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r77}, {0x8, 0x2, r79}, {0x8, 0x3, r80}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r81}, {0x8, 0x7, r83}, {0x8, 0x5, r85}, {0x8, 0x2, r87}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r88 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r88, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r89 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r89, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r90 = getegid() r91 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r91, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r92 = creat(0x0, 0x0) ioctl$TCSETAW(r92, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r93 = getegid() ioctl$TUNSETGROUP(r92, 0x400454ce, r93) r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r94, 0x400454ce, r93) r95 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r95) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r95) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r96 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r96, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r96, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r90}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r93}, {0x8, 0x7, r95}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r97 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r97, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r98, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r99, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r100 = getegid() r101 = getgid() r102 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r102) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r103 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r104 = getegid() ioctl$TUNSETGROUP(r103, 0x400454ce, r104) r105 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r105, 0x400454ce, r104) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r106, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r107 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r100}, {0x8, 0x3, r101}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r102}, {0x8, 0x7}, {0x8, 0x5, r104}, {0x8, 0x2, r107}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r108 = gettid() ptrace$setopts(0x4206, r108, 0x0, 0x0) tkill(r108, 0x17) getpgid(r108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r109 = getegid() setregid(0x0, r109) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r110 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r110, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) [ 738.462906] binder: BINDER_SET_CONTEXT_MGR already set [ 738.529259] binder: 31895:31896 ioctl 40046207 0 returned -16 [ 738.529457] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.529466] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.529524] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.530939] binder: BINDER_SET_CONTEXT_MGR already set [ 738.530946] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 738.536596] binder: BINDER_SET_CONTEXT_MGR already set [ 738.536604] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 738.537689] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.538408] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.539323] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.545935] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.549236] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.550715] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.555396] binder: BINDER_SET_CONTEXT_MGR already set [ 738.555403] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 738.557132] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.557139] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.557200] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.558843] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.558850] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.558889] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.561870] binder: BINDER_SET_CONTEXT_MGR already set [ 738.561878] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 738.564201] binder: BINDER_SET_CONTEXT_MGR already set [ 738.564208] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 738.565323] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.565329] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.565370] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.574638] binder: BINDER_SET_CONTEXT_MGR already set [ 738.574647] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 738.575440] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.575447] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.575488] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.576914] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.576920] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.576959] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.587485] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.599940] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.603605] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.614149] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.614156] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.614198] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.621464] binder: BINDER_SET_CONTEXT_MGR already set [ 738.621473] binder: 31895:31897 ioctl 40046207 0 returned -16 [ 738.625065] binder_alloc: 21357: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.625072] binder_alloc: allocated: 5768 (num: 61 largest: 96), free: 10616 (num: 2 largest: 10544) [ 738.625114] binder: 31895:31897 transaction failed 29201/-28, size 72-24 line 3137 [ 738.641624] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.648771] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.650120] binder: 31895:31897 ioctl 400454ce 0 returned -22 [ 738.748924] binder: BINDER_SET_CONTEXT_MGR already set [ 738.748934] binder: 31971:31972 ioctl 40046207 0 returned -16 [ 738.752475] binder: 31971:31972 ioctl 400454ce 0 returned -22 [ 738.772859] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 738.772867] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 738.772908] binder: 31971:31972 transaction failed 29201/-28, size 72-24 line 3137 [ 738.944844] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.950364] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.956076] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.961732] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.967315] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.973177] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.978731] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.993504] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.000019] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.006855] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.012555] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.018127] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.023931] binder: undelivered TRANSACTION_ERROR: 29201 07:59:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000080)='em1\x00') r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8000, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@mcast2}, &(0x7f00000001c0)=0x14) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000340)=0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x2) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000780)={@multicast1, @empty, 0x0}, &(0x7f00000007c0)=0xc) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, @can={0x1d, r5}, @ethernet={0xbce12715e6332a}, @isdn={0x22, 0x7, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000800)='ip6tnl0\x00', 0x10001, 0x8, 0xca1}) r6 = dup3(0xffffffffffffffff, r2, 0x0) readahead(r6, 0x80, 0x1) pipe(&(0x7f00000008c0)) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/checkreqprot\x00', 0x10040, 0x0) ioctl$EVIOCSABS3F(r7, 0x401845ff, &(0x7f0000000940)={0x6, 0x6ce30c5f, 0x8001, 0x9, 0xff, 0x8}) r8 = creat(&(0x7f0000000980)='./file0\x00', 0x80) write$P9_RWALK(r8, &(0x7f00000009c0)={0x57, 0x6f, 0x2, {0x6, [{0x2, 0x2, 0x5}, {0xc, 0x1, 0x6}, {0x40, 0x2, 0x5}, {0x81, 0x1, 0x4}, {0xc11a65c9f9dca61e, 0x4, 0x2}, {0x89, 0x1}]}}, 0x57) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self\x00', 0x80000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r9, 0x40106614, &(0x7f0000000a80)) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000ac0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000b00)={0x7d26951ac0c283b3}) recvfrom$unix(r7, &(0x7f0000000b40)=""/149, 0x95, 0x2, &(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_elf32(r12, &(0x7f0000000cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x5, 0x7f, 0x3, 0x5, 0x2, 0x6, 0x80000001, 0x162, 0x38, 0x369, 0x8000, 0x8, 0x20, 0x1, 0x81, 0x7, 0x1f}, [{0x7, 0xdc2b, 0x135, 0x80000001, 0xdfb, 0x9, 0x4, 0x1}, {0x672beaeaae814195, 0x3f, 0x0, 0x8, 0x3, 0x1893, 0xdb85, 0x4}], "c099222f1ed9b2023be9db4ec0a32baa14e3a25097ed2cbfd893d8b00733d1b938d31a766024c47d0b56e2a0a24c", [[], []]}, 0x2a6) pipe2(&(0x7f0000000f80)={0xffffffffffffffff}, 0x6d2c1ce7f1c76ea4) recvfrom$inet6(r13, &(0x7f0000000fc0)=""/173, 0xad, 0x40, &(0x7f0000001080)={0xa, 0x4e21, 0xfffeffff, @rand_addr="bfc4f20d9e1dc65872adc7a83389e19c", 0x74}, 0x1c) [ 739.041404] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.066822] binder: undelivered TRANSACTION_ERROR: 29201 07:59:50 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000080)='#GPL\x00', 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:59:50 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev}}}, 0x104) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x100000000000002f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0xfffffffffffffe81) 07:59:50 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write(r1, &(0x7f00000001c0), 0xfffffffffffffe45) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x40000) r4 = creat(0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f0300000045000107000000141900040002000700efff01", 0x2b}], 0x1) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x800, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x1b4) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0021700b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391"], 0x6b}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r9, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00'}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594"], 0x69}}, 0x0) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b2102000000000000e747871a86cc8c8dda870000000002000100000000000000030080ffffff0500050000000000"], 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r13 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000340)={'team0\x00', r12}) socket$key(0xf, 0x3, 0x2) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r14, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000340)={'team0\x00'}) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, 0x0, 0x0) getsockname$packet(r15, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r16 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB]}}, 0x0) getsockname$packet(r16, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', r17}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getpeername$packet(r18, 0x0, &(0x7f0000000480)) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x4000000) r19 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r19, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) getsockopt$sock_buf(r19, 0x1, 0x1a, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$inet_mreqn(r19, 0x0, 0x20, &(0x7f0000000240)={@remote, @multicast1}, &(0x7f0000000280)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5001080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r6, 0x100, 0x0, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x810) read(0xffffffffffffffff, &(0x7f0000000200)=""/234, 0xea) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast2}, 0x0) r20 = socket(0x200000000000011, 0x0, 0x0) r21 = socket(0x11, 0x800000003, 0x0) bind(r21, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r21, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r20, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r23, &(0x7f00000001c0), 0xfffffef3) getpeername(r23, &(0x7f0000000300)=@hci, &(0x7f0000000380)=0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x540}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="00022abd7000ffdbdf250000000008000100", @ANYBLOB="8800020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b757000000000", @ANYRES32=r22, @ANYRES32], 0x5}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) pselect6(0x40, &(0x7f00000000c0)={0x10}, 0x0, &(0x7f0000000100)={0x1fe}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) r24 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r24, &(0x7f0000000040)={'unconfined_u:system_r:insmod_t:s0-s0:c0.c10-%', 0x20, 'user_u\x00'}, 0x35) fchdir(r24) read(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:59:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r36, 0x400454ce, r35) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r37 = getegid() r38 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r38, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r38, 0x400454ce, r37) r39 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r39) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r39) r40 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r41 = getegid() ioctl$TUNSETGROUP(r40, 0x400454ce, r41) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r42 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r37}, {0x8, 0x7, r39}, {0x8, 0x5, r41}, {0x8, 0x2, r42}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r43 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r43, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r44 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r44) r45 = getegid() r46 = getgid() r47 = creat(0x0, 0x0) ioctl$TCSETAW(r47, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r48 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r48, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r49 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r49) r50 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r51 = getegid() ioctl$TUNSETGROUP(r50, 0x400454ce, r51) syz_open_dev$mice(0x0, 0x0, 0x0) r52 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r52, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r53 = getegid() ioctl$TUNSETGROUP(r52, 0x400454ce, r53) creat(0x0, 0x0) r54 = getegid() r55 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r55, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r56 = getgid() r57 = creat(0x0, 0x0) ioctl$TCSETAW(r57, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r58 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r58, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r58, 0x400454ce, 0x0) r59 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r60 = getegid() ioctl$TUNSETGROUP(r59, 0x400454ce, r60) r61 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r61, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r61, 0x400454ce, r60) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r62 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r62) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r54}, {0x8, 0x2}, {0x8, 0x3, r56}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r60}, {0x8, 0x2, r62}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r44}, {0x8, 0x2, r45}, {0x8, 0x3, r46}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r51}, {0x8, 0x2, r53}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r63 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r63, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r64 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r64, 0x400454ce, 0x0) r65 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r65, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r65, 0x400454ce, 0x0) r66 = getegid() r67 = getgid() r68 = creat(0x0, 0x0) ioctl$TCSETAW(r68, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r69 = getegid() ioctl$TUNSETGROUP(r68, 0x400454ce, r69) r70 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r70) r71 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r72 = getegid() ioctl$TUNSETGROUP(r71, 0x400454ce, r72) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r72) r73 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r74 = getegid() ioctl$TUNSETGROUP(r73, 0x400454ce, r74) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r66}, {0x8, 0x3, r67}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r69}, {0x8, 0x7, r70}, {0x8, 0x5, r72}, {0x8, 0x2, r74}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r75 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r75, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r75, 0x40046207, 0x0) fcntl$getown(r75, 0x9) r76 = creat(0x0, 0x0) r77 = getegid() ioctl$TUNSETGROUP(r76, 0x400454ce, r77) r78 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r78, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r78, 0x400454ce, r77) r79 = getegid() r80 = getgid() creat(0x0, 0x0) r81 = getegid() r82 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r82, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r83 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r83) r84 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r85 = getegid() ioctl$TUNSETGROUP(r84, 0x400454ce, r85) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r85) r86 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r86, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r87 = getegid() ioctl$TUNSETGROUP(r86, 0x400454ce, r87) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r77}, {0x8, 0x2, r79}, {0x8, 0x3, r80}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r81}, {0x8, 0x7, r83}, {0x8, 0x5, r85}, {0x8, 0x2, r87}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r88 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r88, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r89 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r89, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r90 = getegid() r91 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r91, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r92 = creat(0x0, 0x0) ioctl$TCSETAW(r92, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r93 = getegid() ioctl$TUNSETGROUP(r92, 0x400454ce, r93) r94 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r94, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r94, 0x400454ce, r93) r95 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r95) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r95) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r96 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r96, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r96, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r90}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r93}, {0x8, 0x7, r95}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r97 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r97, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r98, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r99 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r99, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r100 = getegid() r101 = getgid() r102 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r102) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r103 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r104 = getegid() ioctl$TUNSETGROUP(r103, 0x400454ce, r104) r105 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r105, 0x400454ce, r104) r106 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r106, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r107 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r100}, {0x8, 0x3, r101}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r102}, {0x8, 0x7}, {0x8, 0x5, r104}, {0x8, 0x2, r107}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r108 = gettid() ptrace$setopts(0x4206, r108, 0x0, 0x0) tkill(r108, 0x17) getpgid(r108) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r109 = getegid() setregid(0x0, r109) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r110 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r110, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') pwrite64(r1, &(0x7f0000001600)="762b92c6a4db516c3805ef0532f0f89a420ece681a67f1a0aa39275bf4f124b35d430a55e859fd876da3efcf2448c54875c2d58f0773f8fb332d68b2de1893532fc95f791f7926a068f696d88a5e3049f9080f61ee3214d9a4f09447267719610d52fa7f4c3895e59238372b1037bdf45df43f0d8bd693dd1e510c2acd60e4e2c568049d67463142754b8c36c916966dbd48f3d5be0141375038070b2430c99c4ceaae2fe34e0c1195ce7b69af36f002d0b3b1dfa6df00f26a1d7235c749cb55c2651257cede280c09170df2623e56dae6ab54fd9cead8", 0xd7, 0x200) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x0, 0x7f, 0x9, 0x400, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x200}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000001480)) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000001440)={0x20}, 0x20) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000140)=""/41) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$tipc2(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8942, &(0x7f0000000040)={'ip_vti0\x00', @ifru_mtu}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f00000014c0)=ANY=[@ANYRES64, @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x40051) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='hugetlb.2Ms\x02u\x05age_in_bytes\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13) 07:59:50 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file1/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10a800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x7c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68b}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4be34287873f3290}, 0x2000) 07:59:50 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000) memfd_create(&(0x7f0000000540)='\x00', 0x17) r0 = inotify_init() inotify_rm_watch(r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000300)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) fsetxattr$security_selinux(r0, &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:semanage_read_lock_t:s0\x00', 0x2a, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x40) fallocate(r2, 0x0, 0x0, 0x2000002) read$eventfd(r1, &(0x7f00000003c0), 0xffffffffffffff34) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = dup(r4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000240)={0x10, 0x9, {0x30b11264c05e151a, 0x1, 0x3f, {0x5, 0x8}, {0xff, 0x7}, @cond=[{0x4, 0xfff}, {0x1, 0x0, 0x5, 0x5, 0xfff, 0x81}]}, {0x0, 0x0, 0x0, {0x5, 0x8}, {0xff00}, @period={0x59, 0x101, 0xfe06, 0x400, 0x3, {0x4, 0xfd, 0x2, 0x7}, 0x1, &(0x7f0000000100)=[0x9]}}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = open(&(0x7f0000000440)='./bus\x00', 0x100, 0x0) ftruncate(r3, 0x800fe) sendfile(r5, r6, 0x0, 0x8000fffffffe) [ 740.866842] binder: BINDER_SET_CONTEXT_MGR already set [ 740.898455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 740.903361] binder: 31984:31986 ioctl 40046207 0 returned -16 [ 740.904291] binder: 31984:31986 ioctl 400454ce 0 returned -22 [ 740.915895] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 740.915902] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 740.915944] binder: 31984:31986 transaction failed 29201/-28, size 72-24 line 3137 07:59:50 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="24000000180007041dfffd947e610500020f03001f0000050400080008000f000200ff7e", 0x24}], 0x1}, 0x0) [ 740.957928] binder: undelivered TRANSACTION_ERROR: 29201 07:59:50 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2b, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2={0xff, 0x3}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @remote, @mcast1}}}}}}}, 0x0) 07:59:50 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00\x04\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x25, {0x0, @sctp_ip4_spec={@dev, @loopback}, @sctp_ip4_spec={@dev, @multicast1}}}}) 07:59:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:59:51 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="24000000180007041dfffd947e610500020f03001f0000050400080008000f000200ff7e", 0x24}], 0x1}, 0x0) 07:59:51 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x20004}}, 0x1c) sendmmsg(r0, &(0x7f000000a440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 07:59:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x1, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 07:59:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r37 = getegid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r38 = getegid() r39 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r39, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r39, 0x400454ce, r38) r40 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r42 = getegid() ioctl$TUNSETGROUP(r41, 0x400454ce, r42) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r43 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r38}, {0x8, 0x7, r40}, {0x8, 0x5, r42}, {0x8, 0x2, r43}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r44 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r44, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r45 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r45) r46 = getegid() r47 = getgid() r48 = creat(0x0, 0x0) ioctl$TCSETAW(r48, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r49 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r49, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r50 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r50) r51 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r52 = getegid() ioctl$TUNSETGROUP(r51, 0x400454ce, r52) syz_open_dev$mice(0x0, 0x0, 0x0) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r53, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) creat(0x0, 0x0) r55 = getegid() r56 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r56, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r57 = getgid() r58 = creat(0x0, 0x0) ioctl$TCSETAW(r58, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r59 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r59, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r59, 0x400454ce, 0x0) r60 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r61 = getegid() ioctl$TUNSETGROUP(r60, 0x400454ce, r61) r62 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r62, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r62, 0x400454ce, r61) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r63 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r55}, {0x8, 0x2}, {0x8, 0x3, r57}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r61}, {0x8, 0x2, r63}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r45}, {0x8, 0x2, r46}, {0x8, 0x3, r47}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r52}, {0x8, 0x2, r54}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r64 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r64, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r65 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r65, 0x400454ce, 0x0) r66 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r66, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = getegid() r68 = getgid() r69 = creat(0x0, 0x0) ioctl$TCSETAW(r69, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r70 = getegid() ioctl$TUNSETGROUP(r69, 0x400454ce, r70) r71 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r71) r72 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r73 = getegid() ioctl$TUNSETGROUP(r72, 0x400454ce, r73) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r67}, {0x8, 0x3, r68}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r70}, {0x8, 0x7, r71}, {0x8, 0x5, r73}, {0x8, 0x2, r75}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r76 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r76, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r76, 0x40046207, 0x0) fcntl$getown(r76, 0x9) r77 = creat(0x0, 0x0) r78 = getegid() ioctl$TUNSETGROUP(r77, 0x400454ce, r78) r79 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r79, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r79, 0x400454ce, r78) r80 = getegid() r81 = getgid() creat(0x0, 0x0) r82 = getegid() r83 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r83, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r84 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r84) r85 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r86 = getegid() ioctl$TUNSETGROUP(r85, 0x400454ce, r86) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r87, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r78}, {0x8, 0x2, r80}, {0x8, 0x3, r81}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r82}, {0x8, 0x7, r84}, {0x8, 0x5, r86}, {0x8, 0x2, r88}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r89 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r89, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r91 = getegid() r92 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r92, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r93 = creat(0x0, 0x0) ioctl$TCSETAW(r93, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r94 = getegid() ioctl$TUNSETGROUP(r93, 0x400454ce, r94) r95 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r95, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r95, 0x400454ce, r94) r96 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r97 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r97, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r97, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r91}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r94}, {0x8, 0x7, r96}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r98 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r98, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r99, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r100 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r100, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r101 = getegid() r102 = getgid() r103 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r103) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r104 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r105 = getegid() ioctl$TUNSETGROUP(r104, 0x400454ce, r105) r106 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r106, 0x400454ce, r105) r107 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r107, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r108 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r101}, {0x8, 0x3, r102}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r103}, {0x8, 0x7}, {0x8, 0x5, r105}, {0x8, 0x2, r108}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r109 = gettid() ptrace$setopts(0x4206, r109, 0x0, 0x0) tkill(r109, 0x17) getpgid(r109) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r110 = getegid() setregid(0x0, r110) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r111 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r111, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:51 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00\x04\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x5, {0x0, @sctp_ip4_spec={@dev, @loopback}, @sctp_ip4_spec={@dev, @multicast1}}}}) 07:59:51 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x30800}]) 07:59:51 executing program 1: socket(0x2, 0x4003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet(0x2, 0x3, 0x0) r1 = socket(0x2, 0xc003, 0x0) connect$unix(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10) r2 = socket$inet6(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x200000033, 0x0, 0x170) getsockopt(r2, 0x29, 0x23, 0x0, 0x0) setsockopt(r2, 0x5, 0x8000, &(0x7f00000000c0)="06e4168d97bf3d8a09c50290589eac8054d090d033a411a283b34c274800d06cdf736e49d73e1deaeb68cf10ef7dbf7ce3cac2fb6d35d9c4f19fe321266a1904f99e614467c42ad051b2077c1f5dc1efd48cf77875b7c0a76d5fafdc0090e466d2450660920e78bf98d19a9388b308fea4d055303308b6ce6e3b7fa0a94ae088e8f438e83ad8a9cd56abfcae385527f8923f608ed58fa43253da0b217eb3b8099aab9cf9e3798f5a8d4efddd1e84", 0xae) dup2(r1, r0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r3 = dup(r0) sendto$inet6(r3, &(0x7f0000000040), 0xfcec, 0x0, 0x0, 0x0) 07:59:51 executing program 0: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4005eed) fallocate(r0, 0x20, 0x0, 0x100008000) 07:59:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='///../\x11\x99\xaaS\xf0\xbb\\\xf7\xb6L\xb73ke\x02d\xb1\xf1G\xddC\x9d\x1b\xce\xff;\aZ\'E\xf5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x17\x87\x19<\xf2\xbf\xe8\xbcQ\xb4&@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb21j\xef1Lf\x93\xdat=\xf8\x16\x19\xf1\xc36o2R\xee\a\x8c<8\xf2\xb0\xadD\x95\xdb\xcf\x89\xe4\x10\x86(v\x13\xb6#\xb4M\x12\x8e\xb9\xed\xcc\xc4\xcf\xb5\xcdA<\xba?\x85m\xf7\xd9\'\x00'/152, 0x2761, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 07:59:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00\x04\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x45, {0x0, @sctp_ip4_spec={@dev, @loopback}, @sctp_ip4_spec={@dev, @multicast1}}}}) 07:59:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0x3d00}]) [ 742.129117] binder: BINDER_SET_CONTEXT_MGR already set 07:59:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x102006, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00D\x00\xec\xff\x03E') dup2(r1, r0) 07:59:52 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000940)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 07:59:52 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x1a7) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x2, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}, 0x11c) [ 742.175291] binder: 32043:32049 ioctl 40046207 0 returned -16 07:59:52 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfffffffffffffe2d) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0) [ 742.321174] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.347759] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.389033] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.407164] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.417157] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.426028] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.432825] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.439592] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.450362] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.457172] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.464220] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 742.479825] hid-generic 0000:0000:0000.0024: hidraw7: HID v0.00 Device [syz1] on syz1 [ 742.507752] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.531713] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.538446] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.545848] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 07:59:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = creat(0x0, 0x0) r4 = getegid() ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r5, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r5, 0x400454ce, r4) r6 = getegid() r7 = getgid() r8 = creat(0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r9 = getegid() ioctl$TUNSETGROUP(r8, 0x400454ce, r9) r10 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r10, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r10, 0x400454ce, r9) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) r12 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r13 = getegid() ioctl$TUNSETGROUP(r12, 0x400454ce, r13) r14 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r14, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r14, 0x400454ce, r13) r15 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r15, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r16 = getegid() ioctl$TUNSETGROUP(r15, 0x400454ce, r16) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r4}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r9}, {0x8, 0x7, r11}, {0x8, 0x5, r13}, {0x8, 0x2, r16}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r17, 0x0) r18 = creat(0x0, 0x0) r19 = getegid() ioctl$TUNSETGROUP(r18, 0x400454ce, r19) r20 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r20, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r20, 0x400454ce, r19) r21 = getegid() r22 = getgid() r23 = creat(0x0, 0x0) ioctl$TCSETAW(r23, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r24 = getegid() ioctl$TUNSETGROUP(r23, 0x400454ce, r24) r25 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r25, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r25, 0x400454ce, r24) r26 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r26) r27 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r28 = getegid() ioctl$TUNSETGROUP(r27, 0x400454ce, r28) r29 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r29, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r29, 0x400454ce, r28) r30 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r30, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r31 = getegid() ioctl$TUNSETGROUP(r30, 0x400454ce, r31) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r19}, {0x8, 0x2, r21}, {0x8, 0x3, r22}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r24}, {0x8, 0x7, r26}, {0x8, 0x5, r28}, {0x8, 0x2, r31}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r32 = gettid() ptrace$setopts(0x4206, r32, 0x0, 0x0) tkill(r32, 0x17) r33 = socket(0x10, 0x3, 0x0) write(r33, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(r33, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001540)=0x40b) r34 = creat(0x0, 0x0) r35 = getegid() ioctl$TUNSETGROUP(r34, 0x400454ce, r35) r36 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r36, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r37 = getegid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r38 = getegid() r39 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r39, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r39, 0x400454ce, r38) r40 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r40) r41 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r42 = getegid() ioctl$TUNSETGROUP(r41, 0x400454ce, r42) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r43 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r35}, {0x8, 0x2, r37}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r38}, {0x8, 0x7, r40}, {0x8, 0x5, r42}, {0x8, 0x2, r43}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) getuid() r44 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r44, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)) creat(0x0, 0x0) r45 = getegid() connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r45) r46 = getegid() r47 = getgid() r48 = creat(0x0, 0x0) ioctl$TCSETAW(r48, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r49 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r49, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r50 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r50) r51 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r52 = getegid() ioctl$TUNSETGROUP(r51, 0x400454ce, r52) syz_open_dev$mice(0x0, 0x0, 0x0) r53 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r53, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r54 = getegid() ioctl$TUNSETGROUP(r53, 0x400454ce, r54) creat(0x0, 0x0) r55 = getegid() r56 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r56, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r57 = getgid() r58 = creat(0x0, 0x0) ioctl$TCSETAW(r58, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r59 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r59, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r59, 0x400454ce, 0x0) r60 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r61 = getegid() ioctl$TUNSETGROUP(r60, 0x400454ce, r61) r62 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r62, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r62, 0x400454ce, r61) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r63 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r63) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r55}, {0x8, 0x2}, {0x8, 0x3, r57}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r61}, {0x8, 0x2, r63}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r45}, {0x8, 0x2, r46}, {0x8, 0x3, r47}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {}, {0x8, 0x7}, {0x8, 0x5, r52}, {0x8, 0x2, r54}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r64 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r64, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) r65 = creat(0x0, 0x0) ioctl$TUNSETGROUP(r65, 0x400454ce, 0x0) r66 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r66, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r66, 0x400454ce, 0x0) r67 = getegid() r68 = getgid() r69 = creat(0x0, 0x0) ioctl$TCSETAW(r69, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r70 = getegid() ioctl$TUNSETGROUP(r69, 0x400454ce, r70) r71 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r71) r72 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r73 = getegid() ioctl$TUNSETGROUP(r72, 0x400454ce, r73) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r73) r74 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r75 = getegid() ioctl$TUNSETGROUP(r74, 0x400454ce, r75) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r67}, {0x8, 0x3, r68}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r70}, {0x8, 0x7, r71}, {0x8, 0x5, r73}, {0x8, 0x2, r75}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) r76 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r76, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r76, 0x40046207, 0x0) fcntl$getown(r76, 0x9) r77 = creat(0x0, 0x0) r78 = getegid() ioctl$TUNSETGROUP(r77, 0x400454ce, r78) r79 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r79, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r79, 0x400454ce, r78) r80 = getegid() r81 = getgid() creat(0x0, 0x0) r82 = getegid() r83 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r83, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r84 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r84) r85 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r86 = getegid() ioctl$TUNSETGROUP(r85, 0x400454ce, r86) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r86) r87 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r87, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r88 = getegid() ioctl$TUNSETGROUP(r87, 0x400454ce, r88) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r78}, {0x8, 0x2, r80}, {0x8, 0x3, r81}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r82}, {0x8, 0x7, r84}, {0x8, 0x5, r86}, {0x8, 0x2, r88}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/zero\x00', 0xb14202, 0x0) r89 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r89, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x101000) r90 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r90, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r91 = getegid() r92 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r92, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r93 = creat(0x0, 0x0) ioctl$TCSETAW(r93, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x0, 0xc0000000000000, 0x7fff00000000, 0x3}) r94 = getegid() ioctl$TUNSETGROUP(r93, 0x400454ce, r94) r95 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r95, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(r95, 0x400454ce, r94) r96 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r96) creat(&(0x7f0000000880)='./file1\x00', 0x0) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r97 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r97, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$TUNSETGROUP(r97, 0x400454ce, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4, r91}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r94}, {0x8, 0x7, r96}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r98 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r98, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r99, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r100 = syz_open_dev$mice(0x0, 0x0, 0x0) connect(r100, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) r101 = getegid() r102 = getgid() r103 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r103) connect(0xffffffffffffffff, &(0x7f00000003c0)=@generic={0x2, "8e536d457b1a055a2295232a7feb6f5e93ed1968a01707ff553a9e780ae0e381ac21072e4ba3ed03398772cb3b1757692fd2dc5474004e2d9df50a6ece8b0bf166ddba0b52faf361f9b7bc5b7c6e3156f0cbd0756b28661f41098e05ca4b5de0605c6b534f428cfe2c86ba4b62f0bbf2efcb5a1ff0b9bb04daf223e726fa"}, 0x80) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r104 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r105 = getegid() ioctl$TUNSETGROUP(r104, 0x400454ce, r105) r106 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r106, 0x400454ce, r105) r107 = creat(&(0x7f0000000880)='./file1\x00', 0x0) ioctl$TCSETAW(r107, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) r108 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [], {0x4, 0x7}, [{0x8, 0x4}, {0x8, 0x2, r101}, {0x8, 0x3, r102}, {0x8, 0x4}, {0x8, 0x0, 0xee00}, {0x8, 0x0, r103}, {0x8, 0x7}, {0x8, 0x5, r105}, {0x8, 0x2, r108}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x3) r109 = gettid() ptrace$setopts(0x4206, r109, 0x0, 0x0) tkill(r109, 0x17) getpgid(r109) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003a80)) fstat(0xffffffffffffffff, &(0x7f0000000480)) getgroups(0x1, &(0x7f0000003b00)=[0x0]) socket$netlink(0x10, 0x3, 0x6) r110 = getegid() setregid(0x0, r110) socket(0x10, 0x3, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r111 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r111, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000080000000000000000000000000000048000000000000001800000000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB="852a62770000000001000000000000000000000000000000852a62730000000000002000000000000000000000000000852a6277000000000000000002"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000180000000000000030"]], 0x0, 0x0, 0x0}) 07:59:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x4, 0x0, @u32}]}]}, 0x24}, 0x1, 0xf0ffff}, 0x0) 07:59:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 07:59:52 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00\x04\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0xb, {0x0, @sctp_ip4_spec={@dev, @loopback}, @sctp_ip4_spec={@dev, @multicast1}}}}) 07:59:52 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) lstat(0x0, 0x0) [ 742.552786] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.559473] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.566953] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.589947] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 07:59:52 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa77ba05434ae286dd606c48a300142c00fe80000000000000000000ffffffffbb00000000000000000000000000000000000000004be15b36b892e2e7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="583415593d40dcad58d6dad42cc1173958f79499a413adc89005fdd6ac46003f0358e3e4034660d8ca8e4f9b65d9b09ce47093a8a167a7c38c843bc9183a719fae6686c7426db983b7a89c75b36463d3f1ad44687742"], 0x0) 07:59:52 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x362, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r1 = socket(0x8, 0x5, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000000)) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) syz_genetlink_get_family_id$ipvs(0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) [ 742.614553] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 07:59:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001000090468fe07002b00000001000a0014000000450001070300001404001800120013000e04000020000300"/57, 0x39}], 0x1) 07:59:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto(r3, &(0x7f0000000280), 0x0, 0x8d6a01ff1ea1f415, &(0x7f0000000180)=@isdn={0x22, 0x0, 0x1}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="7aedb39ddc3a526856a7f39cf53f73"], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000), 0x4) [ 742.666515] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.697360] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 742.742367] binder: BINDER_SET_CONTEXT_MGR already set 07:59:52 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00\x04\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x19, {0x0, @sctp_ip4_spec={@dev, @loopback}, @sctp_ip4_spec={@dev, @multicast1}}}}) [ 742.783529] hid-generic 0000:0000:0000.0025: hidraw7: HID v0.00 Device [syz1] on syz1 [ 742.789764] binder: 32109:32112 ioctl 40046207 0 returned -16 [ 742.816211] binder: 32109:32112 ioctl 400454ce 0 returned -22 [ 742.838024] binder_alloc: 3037: binder_alloc_buf size -435715498645192512 failed, no address space [ 742.852879] kasan: CONFIG_KASAN_INLINE enabled [ 742.857562] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 742.909021] Modules linked in: [ 742.912364] CPU: 0 PID: 32123 Comm: syz-executor.3 Not tainted 4.4.174+ #17 [ 742.919460] task: ffff88018dc14740 task.stack: ffff8801894b0000 [ 742.925670] RIP: 0010:[] [] netlink_unicast+0x1cb/0x700 [ 742.934409] RSP: 0018:ffff8801894b7648 EFLAGS: 00010216 [ 742.939861] RAX: dffffc0000000048 RBX: 0000000000000000 RCX: ffffc9000136a000 [ 742.947140] RDX: 0000000000000828 RSI: ffffffff822eee24 RDI: ffff8801d8953718 [ 742.954540] RBP: ffff8801894b7700 R08: 1ffff1003a5c8e82 R09: ffffed003a5c8e8a [ 742.961808] R10: ffffed003a5c8e89 R11: ffff8801d2e4744c R12: dffffc0000000000 [ 742.969424] R13: dffffc0000000000 R14: ffff8801d8953640 R15: 0000000000000efd [ 742.976702] FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000f55dfb40 [ 742.984947] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 742.990828] CR2: 00007f0ce1037df8 CR3: 0000000176d6a000 CR4: 00000000001606b0 [ 742.998099] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 743.005362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 743.012622] Stack: [ 743.014763] ffff8801d2e474c0 0000000000000030 0000000000000240 1ffff10031296ecf [ 743.022926] dffffc0000000006 dffffc0000000048 0000000041b58ab3 ffffffff82c9f14a [ 743.031085] ffffffff822eec60 ffff8801894b76b8 0000000000000000 ffff8801d2e47400 [ 743.039182] Call Trace: [ 743.041774] [] ? netlink_sendskb+0x60/0x60 [ 743.047657] [] netlink_ack+0x236/0x4c0 [ 743.053200] [] nfnetlink_rcv+0xbdd/0x12b0 [ 743.058998] [] netlink_unicast+0x4d7/0x700 [ 743.064875] [] ? netlink_sendskb+0x60/0x60 [ 743.070752] [] netlink_sendmsg+0x6b6/0xc80 [ 743.076631] [] ? nlmsg_notify+0x170/0x170 [ 743.082542] [] ? selinux_socket_sendmsg+0x3f/0x50 [ 743.089032] [] ? security_socket_sendmsg+0x8f/0xc0 [ 743.095606] [] ? nlmsg_notify+0x170/0x170 07:59:52 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) utime(&(0x7f00000002c0)='./file0\x00', 0x0) 07:59:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff}) [ 743.101421] [] sock_sendmsg+0xbe/0x110 [ 743.106964] [] sock_write_iter+0x235/0x3d0 [ 743.112874] [] ? sock_sendmsg+0x110/0x110 [ 743.118890] [] ? selinux_kernel_act_as+0x210/0x210 [ 743.125671] [] ? compat_rw_copy_check_uvector+0x267/0x370 [ 743.132879] [] do_iter_readv_writev+0x141/0x1e0 [ 743.139210] [] ? sock_sendmsg+0x110/0x110 [ 743.145016] [] ? vfs_iter_read+0x280/0x280 [ 743.150924] [] ? rw_verify_area+0x103/0x2f0 [ 743.157063] [] ? sock_sendmsg+0x110/0x110 [ 743.162869] [] compat_do_readv_writev+0x389/0x6e0 [ 743.169378] [] ? vfs_writev+0xb0/0xb0 [ 743.172215] binder_alloc: allocated: 768 (num: 8 largest: 96), free: 15616 (num: 1 largest: 15616) [ 743.183926] [] ? check_preemption_disabled+0x3c/0x200 [ 743.188278] binder: 32109:32112 transaction failed 29201/-28, size 72-24 line 3137 [ 743.198469] [] ? __fget+0x13b/0x370 [ 743.203930] [] ? __fget+0x162/0x370 [ 743.209195] [] ? __fget+0x47/0x370 [ 743.214368] [] compat_writev+0xe1/0x150 [ 743.219978] [] compat_SyS_writev+0xdb/0x1c0 [ 743.226119] [] ? compat_SyS_preadv+0x50/0x50 [ 743.232166] [] ? do_fast_syscall_32+0xd6/0xa90 [ 743.238383] [] ? compat_SyS_preadv+0x50/0x50 [ 743.244688] [] do_fast_syscall_32+0x32d/0xa90 [ 743.250911] [] sysenter_flags_fixed+0xd/0x1a [ 743.257495] Code: ec a7 01 ff 48 8d 55 98 48 89 d9 4c 89 f6 4c 89 e7 e8 fa f6 ff ff 83 f8 01 0f 85 e6 03 00 00 e8 cc a7 01 ff 48 8b 85 70 ff ff ff <0f> b6 00 84 c0 74 08 3c 03 0f 8e 16 04 00 00 48 8b 85 68 ff ff [ 743.284939] RIP [] netlink_unicast+0x1cb/0x700 [ 743.291493] RSP [ 743.307094] ---[ end trace 04f27d88e70b4a7d ]--- [ 743.312366] Kernel panic - not syncing: Fatal exception [ 743.319014] Kernel Offset: disabled [ 743.322732] Rebooting in 86400 seconds..