6201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40482, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40100, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) dup2(r0, r1) 07:11:30 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000380)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0)="5d71f27e79ae18a9307d3ad987bde5f943e8ad91f720cfe21e05ed8b721e0ef4c45a65b156b13090e4e14239017021314f912f2b3015486cda955f5a3122ea923ca8d9a814a3a856c40199034a818c08e0ffabccebf4833b5d8ef14652d5036a99b4739144a86ad9dd49d944855696e16418860989b336e75e7ec57cfe4c1d4133138141764b0803495363c723da79eb5589650b51a885db7b430abbadafb126e512e742e2a64e610b96995b2cc2baa14ef6f7be6e0c227a41eced186639c0f680a42f5dbd22b788e7069f27d5327bb16079780164da", 0xd6) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r2}], {0x4, 0x7}, [{0x8, 0x2}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x4, r3}, {0x8, 0x0, r3}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="000029bd7000fd"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x10) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) sendfile(r1, r0, &(0x7f0000000000)=0x30, 0x5) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) 07:11:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x48f, @ipv4={[], [], @broadcast}, 0x334d}, 0xfffffe1d) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c00)={0x0, @loopback}, &(0x7f0000000c40)=0x7) recvfrom(r0, &(0x7f0000000b00)=""/235, 0xeb, 0x2001, &(0x7f0000000c80)=@hci={0x1f, r2, 0x3}, 0x80) inotify_init() r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x40000, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000006c0)={0x31, 0x0, 0x8, 0xc, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(r3, 0x0, &(0x7f0000000440), 0x80000) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000900)=""/212) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000d00)=""/4096) sendfile(r3, r3, &(0x7f0000000480), 0xa198) clock_settime(0x5, &(0x7f0000000380)={0x0, 0x989680}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xc4111, 0xffffffffffffffff, 0x0) getpeername$inet(r3, &(0x7f0000000a00)={0x2, 0x0, @rand_addr}, &(0x7f0000000a40)=0x10) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000001d40)={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x9}, {0xa, 0x4e20, 0x3, @remote, 0xffffffff}, 0x1, [0x1, 0x9, 0x5, 0x2, 0x81, 0x401, 0xfffffffffffff055, 0x4]}, 0x5c) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{}, {0x0, 0xfff}]}, 0x14, 0x1) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/102, 0x66, 0x2002, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000004c0)={0x6, 0x8, 0x11, 0x11, 0x1, 0x0, 0x2, 0x8b}) add_key(&(0x7f0000000500)='.dead\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000800)="1669c1a7f82bb56570d0bbba3e315db0234aadfda136e1af51e8a644ebca8d3a0fa275bdd8981af8eaac62a73740de11b45af295956401a66ededf0441e4b1d0fff1813766b26f1ac83f063f6a2b934c0e5f3193895608f5016ae5db671a8b2689", 0x61, 0xfffffffffffffffb) readlinkat(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000700)=""/235, 0xeb) keyctl$read(0xb, 0x0, &(0x7f00000005c0)=""/227, 0x62) syz_emit_ethernet(0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60093a0600083a00fe8000000000000000000000000000bbff020000000000000000000000000001000000000008907873b182ab293d81a08c668f14d4c42fffc1a5d374f3c61827f267c26443ce6dba0de222908cc4c919f0d5e2fec7cec71ce7d897a3194b9c453256284255d70af56cdacc9359105ba0f2a5ec6a51c67f376136d1eeb4b1f9f75c83a7b03b2da7a5c487fba713ce817d2b8c8f4f8aff3f8226999aa24a8d711fca91c6c19ef96c6a4ca29af371bbd33fd9b6de1b7bf668e58a4cee75247ffecf7659c65edeca933c12751636ca78702ea2275ea4b83eb3d5bff913a4ab8c441c6eedf040c2d037eacf401ab9e397cf731506df4ea85d6e60774cd41c41481845285602e42420ebd5bf206e2475ebd2c6"], &(0x7f0000000100)) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000580)) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="580000000125bd7000fbdbdf2500fa080044000100400000000000080001006e6174002c000200280001000000000000000000000000000000000000000000ac1414aaac1414bb000000000100001d040006000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) 07:11:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x40482, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40100, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) dup2(r0, r1) 07:11:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) fchmod(r0, 0xffffffffffffffff) mount(&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000a40)='./file0/file1\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000b40)='trusted.overlay.redirect\x00') sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000280)='\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8) fadvise64(r2, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000580)=0x7, 0xff90) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000880)={0x800, 0x401, 0xd2f, 0xf95, 0x9, 0x58a}) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, 0x0) r6 = getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000400)=0x0) get_robust_list(r6, &(0x7f00000004c0)=&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)}}, &(0x7f0000000500)=0x18) sendmsg$netlink(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x1}], 0x1, &(0x7f0000000a80)=[@rights={0x28, 0x1, 0x1, [r2, r2, r2, r1, r3, r1]}, @cred={0x20, 0x1, 0x2, r7, r4, r5}, @rights={0x18, 0x1, 0x1, [r3]}, @rights={0x28, 0x1, 0x1, [r1, r3, r0, r0, r3]}], 0x88, 0x20000010}, 0x10) accept(0xffffffffffffff9c, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80) ioctl$RTC_AIE_OFF(r2, 0x7002) fsetxattr$security_selinux(r2, &(0x7f00000007c0)='security.selinux\x00', &(0x7f0000000800)='system_u:object_r:sound_device_t:s0\x00', 0x24, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x200300, 0x4) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00') ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/179) [ 135.199861] binder: 4838:4845 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 135.220510] binder: 4838:4845 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 135.250566] input: syz1 as /devices/virtual/input/input4 [ 135.258648] EXT4-fs warning (device sda1): ext4_group_add:1608: No reserved GDT blocks, can't resize 07:11:30 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000002c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x200000000004e21, @local}, 0x10) ioctl$KDDELIO(r0, 0x4b35, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r0, &(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x8, 0xa8, 0x1, 0x0, 0x9, 0x8, 0x1, 0x1, 0x2, 0xff, 0x8, 0x5, 0x7, 0x6, 0xfa7c, 0xffffffffffff0001, 0x8, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x62, 0x80000001, 0x0, 0x2, 0x1, 0x1, 0xd3c2, 0xffff, 0x10001, 0xc9ba, 0x5, 0x8, 0x7fffffff, 0x3, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x40}, 0xb000, 0x6, 0xa6e, 0x1, 0x1, 0x8, 0x3}, r5, 0x8, r3, 0xa) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x8ae}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x10241, 0x0) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f00000004c0)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000025c0)="d5", 0x1}], 0x1, 0x0) [ 135.299838] input: syz1 as /devices/virtual/input/input5 [ 135.309155] audit: type=1400 audit(1542870690.725:22): avc: denied { relabelto } for pid=4849 comm="syz-executor5" name="file0" dev="sda1" ino=16579 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=dir permissive=1 [ 135.321218] EXT4-fs warning (device sda1): ext4_group_add:1608: No reserved GDT blocks, can't resize 07:11:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000380)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0)="5d71f27e79ae18a9307d3ad987bde5f943e8ad91f720cfe21e05ed8b721e0ef4c45a65b156b13090e4e14239017021314f912f2b3015486cda955f5a3122ea923ca8d9a814a3a856c40199034a818c08e0ffabccebf4833b5d8ef14652d5036a99b4739144a86ad9dd49d944855696e16418860989b336e75e7ec57cfe4c1d4133138141764b0803495363c723da79eb5589650b51a885db7b430abbadafb126e512e742e2a64e610b96995b2cc2baa14ef6f7be6e0c227a41eced186639c0f680a42f5dbd22b788e7069f27d5327bb16079780164da", 0xd6) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r2}], {0x4, 0x7}, [{0x8, 0x2}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x4, r3}, {0x8, 0x0, r3}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="000029bd7000fd"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x10) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) sendfile(r1, r0, &(0x7f0000000000)=0x30, 0x5) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) 07:11:31 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000002c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x200000000004e21, @local}, 0x10) ioctl$KDDELIO(r0, 0x4b35, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r0, &(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x8, 0xa8, 0x1, 0x0, 0x9, 0x8, 0x1, 0x1, 0x2, 0xff, 0x8, 0x5, 0x7, 0x6, 0xfa7c, 0xffffffffffff0001, 0x8, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x62, 0x80000001, 0x0, 0x2, 0x1, 0x1, 0xd3c2, 0xffff, 0x10001, 0xc9ba, 0x5, 0x8, 0x7fffffff, 0x3, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x40}, 0xb000, 0x6, 0xa6e, 0x1, 0x1, 0x8, 0x3}, r5, 0x8, r3, 0xa) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x8ae}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x10241, 0x0) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f00000004c0)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000025c0)="d5", 0x1}], 0x1, 0x0) 07:11:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x48f, @ipv4={[], [], @broadcast}, 0x334d}, 0xfffffe1d) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c00)={0x0, @loopback}, &(0x7f0000000c40)=0x7) recvfrom(r0, &(0x7f0000000b00)=""/235, 0xeb, 0x2001, &(0x7f0000000c80)=@hci={0x1f, r2, 0x3}, 0x80) inotify_init() r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x40000, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000006c0)={0x31, 0x0, 0x8, 0xc, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(r3, 0x0, &(0x7f0000000440), 0x80000) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000900)=""/212) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000d00)=""/4096) sendfile(r3, r3, &(0x7f0000000480), 0xa198) clock_settime(0x5, &(0x7f0000000380)={0x0, 0x989680}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xc4111, 0xffffffffffffffff, 0x0) getpeername$inet(r3, &(0x7f0000000a00)={0x2, 0x0, @rand_addr}, &(0x7f0000000a40)=0x10) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000001d40)={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x9}, {0xa, 0x4e20, 0x3, @remote, 0xffffffff}, 0x1, [0x1, 0x9, 0x5, 0x2, 0x81, 0x401, 0xfffffffffffff055, 0x4]}, 0x5c) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{}, {0x0, 0xfff}]}, 0x14, 0x1) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/102, 0x66, 0x2002, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000004c0)={0x6, 0x8, 0x11, 0x11, 0x1, 0x0, 0x2, 0x8b}) add_key(&(0x7f0000000500)='.dead\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000800)="1669c1a7f82bb56570d0bbba3e315db0234aadfda136e1af51e8a644ebca8d3a0fa275bdd8981af8eaac62a73740de11b45af295956401a66ededf0441e4b1d0fff1813766b26f1ac83f063f6a2b934c0e5f3193895608f5016ae5db671a8b2689", 0x61, 0xfffffffffffffffb) readlinkat(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000700)=""/235, 0xeb) keyctl$read(0xb, 0x0, &(0x7f00000005c0)=""/227, 0x62) syz_emit_ethernet(0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000580)) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="580000000125bd7000fbdbdf2500fa080044000100400000000000080001006e6174002c000200280001000000000000000000000000000000000000000000ac1414aaac1414bb000000000100001d040006000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) 07:11:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 135.707629] binder: BINDER_SET_CONTEXT_MGR already set [ 135.727059] binder: 4879:4882 ioctl 40046207 0 returned -16 [ 135.763271] binder: 4879:4882 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 135.770120] input: syz1 as /devices/virtual/input/input6 [ 135.809204] binder: 4879:4888 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:31 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000002c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x200000000004e21, @local}, 0x10) ioctl$KDDELIO(r0, 0x4b35, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r0, &(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x8, 0xa8, 0x1, 0x0, 0x9, 0x8, 0x1, 0x1, 0x2, 0xff, 0x8, 0x5, 0x7, 0x6, 0xfa7c, 0xffffffffffff0001, 0x8, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x62, 0x80000001, 0x0, 0x2, 0x1, 0x1, 0xd3c2, 0xffff, 0x10001, 0xc9ba, 0x5, 0x8, 0x7fffffff, 0x3, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x40}, 0xb000, 0x6, 0xa6e, 0x1, 0x1, 0x8, 0x3}, r5, 0x8, r3, 0xa) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0x8ae}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x10241, 0x0) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f00000004c0)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000025c0)="d5", 0x1}], 0x1, 0x0) 07:11:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000380)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0)="5d71f27e79ae18a9307d3ad987bde5f943e8ad91f720cfe21e05ed8b721e0ef4c45a65b156b13090e4e14239017021314f912f2b3015486cda955f5a3122ea923ca8d9a814a3a856c40199034a818c08e0ffabccebf4833b5d8ef14652d5036a99b4739144a86ad9dd49d944855696e16418860989b336e75e7ec57cfe4c1d4133138141764b0803495363c723da79eb5589650b51a885db7b430abbadafb126e512e742e2a64e610b96995b2cc2baa14ef6f7be6e0c227a41eced186639c0f680a42f5dbd22b788e7069f27d5327bb16079780164da", 0xd6) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r2}], {0x4, 0x7}, [{0x8, 0x2}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x4, r3}, {0x8, 0x0, r3}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="000029bd7000fd"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x10) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) sendfile(r1, r0, &(0x7f0000000000)=0x30, 0x5) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) 07:11:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000340)={'syz1\x00'}, 0x45c) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000380)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0)="5d71f27e79ae18a9307d3ad987bde5f943e8ad91f720cfe21e05ed8b721e0ef4c45a65b156b13090e4e14239017021314f912f2b3015486cda955f5a3122ea923ca8d9a814a3a856c40199034a818c08e0ffabccebf4833b5d8ef14652d5036a99b4739144a86ad9dd49d944855696e16418860989b336e75e7ec57cfe4c1d4133138141764b0803495363c723da79eb5589650b51a885db7b430abbadafb126e512e742e2a64e610b96995b2cc2baa14ef6f7be6e0c227a41eced186639c0f680a42f5dbd22b788e7069f27d5327bb16079780164da", 0xd6) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [{0x2, 0x2, r2}], {0x4, 0x7}, [{0x8, 0x2}, {0x8, 0x0, r3}, {0x8, 0x2, r3}, {0x8, 0x4, r3}, {0x8, 0x0, r3}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000900)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="000029bd7000fd"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x10) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) sendfile(r1, r0, &(0x7f0000000000)=0x30, 0x5) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 135.977714] binder: 4894:4901 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:11:31 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x0}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'wlan1nodev-:'}, {}, {}, {0x20, 'eth1-'}, {0x20, "5e7d6e6f6465766e6f646576766d6e6574312f2ff0"}, {0x20, '-'}, {0x20, 'cpuset('}, {0x20, 'self+system'}, {0x20, '{'}, {0x20, 'wlan0trusted'}], 0xa, "9f292e1beb93a64805c41ae2e0504f7d5b6f6acff4a6fef593ab202df99289b366b634c7498b18d03b84392b8f333444c7a1e58b8c1f27d006bcaadff1adf4657eb756da1d2c09f90ab56c4e932e38bca124"}, 0xad) socket$unix(0x1, 0x1, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) [ 136.035272] input: syz1 as /devices/virtual/input/input7 [ 136.048854] binder: 4894:4908 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 136.068584] binder: 4894:4908 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:31 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x191000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/74, 0x4a}], 0x1, &(0x7f0000000400)=""/184, 0xb8, 0x1}, 0x6}, {{&(0x7f00000004c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000540)=""/128, 0x80}, {&(0x7f00000005c0)=""/125, 0x7d}], 0x3, &(0x7f0000000680)=""/182, 0xb6, 0x8}}, {{&(0x7f0000000740)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/212, 0xd4}], 0x2, &(0x7f0000001940)=""/77, 0x4d, 0x523}, 0x2}, {{&(0x7f00000019c0)=@ethernet, 0x80, &(0x7f0000001c80)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/229, 0xe5}, {&(0x7f0000001b40)=""/68, 0x44}, {&(0x7f0000001bc0)=""/66, 0x42}, {&(0x7f0000001c40)=""/39, 0x27}], 0x6, &(0x7f0000001d00)=""/206, 0xce, 0x3}, 0x9}], 0x4, 0x0, &(0x7f0000001f00)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002000)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002040)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000002140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002180)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000002280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004340)={0x0, @rand_addr, @multicast2}, &(0x7f0000004380)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f00000043c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004400)=0x14, 0xf46e69691751b3c7) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004440)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004540)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000004580)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f00000045c0)=0x14) getpeername$packet(r0, &(0x7f0000004600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004640)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004680)={{{@in6=@remote, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000004780)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000047c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f00000048c0)=0xe8) getpeername(r0, &(0x7f0000004900)=@hci={0x1f, 0x0}, &(0x7f0000004980)=0x80) accept4$packet(0xffffffffffffffff, &(0x7f00000049c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004a00)=0x14, 0x800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004b80)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000004bc0)={@empty, @broadcast, 0x0}, &(0x7f0000004c00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004c40)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000004d40)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004e40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004e80)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000004f80)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000005840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000005800)={&(0x7f0000004fc0)={0x824, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xf8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xcee}}}]}}, {{0x8, 0x1, r9}, {0x140, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xc4fc}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x1e4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r16}, {0x1e4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x124, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x824}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 136.122550] input: syz1 as /devices/virtual/input/input8 07:11:31 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400000000006008, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000180)="30b919ee78b88f2bb30bb1dac46712a12117f193b5223e85ea5a2fdd22c57ee9105a85927bfdde5b0db54344f49714a72643ec39895d23cd83970c1d4087215b598c57efcfd77974706f10d8a20f1a2147423ce85e2c111a1a56b548fec59f3df5815d948be1a9106a25191f2232417f5526d1d0cba266af799dc57e497cd720120049d97ecfc3d498f7166825e6a57f62df39194c04fe3073c836c4c29fb34d292eed6da65fe93f84d8edfc11b16af016f73083019a58c858572e23a4a10c36074fd028442086e17693d87ccd94310385b982e2", 0xd4, 0x0, &(0x7f0000000280)=@sco={0x1f, {0x80000000, 0x400, 0x8, 0x8, 0x6, 0x100000001}}, 0x80) setxattr$security_evm(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)='security.evm\x00', &(0x7f0000001c80)=@v1={0x2, "b8b0811b072db853438016f6950370dc"}, 0x11, 0x3dcff1bb176db513) write$binfmt_elf64(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x251) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xb, 0x1, {0x56, 0xa171, 0x9, {0x9}, {0x800}, @const={0x9, {0x80000001, 0x0, 0x9, 0x4}}}, {0x56, 0x6, 0x7, {0x8000, 0xfffffffffffffff8}, {0x2702, 0x5}, @ramp={0x2, 0x2, {0x0, 0x8, 0x3, 0x7}}}}) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000001d00)={0x6, &(0x7f0000001cc0)=[{0x2, 0x6eff7f57, 0x27c, 0x10001}, {0x101, 0x100, 0x800}, {0x0, 0x3ff, 0x1f, 0x81}, {0x7, 0x7fff, 0x9, 0x7ff}, {0x0, 0x87bd, 0xffffffffffff8000, 0x7}, {0x3, 0x2, 0xab1d, 0x7}]}) ioctl$int_out(r1, 0x5462, &(0x7f0000000380)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001bc0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000340)={0x3, 0x10000, 0x5}) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)) 07:11:31 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc4ce) unlink(&(0x7f0000000080)='./file0\x00') stat(0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x5, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x4, 0x1be, 0x40, 0x133, 0x7, 0x1, 0x38, 0x1, 0x7fff, 0x1}, [{0x6474e555, 0x804a, 0x8, 0x7fffffff, 0xffffffffffff8001, 0x1000, 0x0, 0x8}, {0x70000000, 0x5, 0x5, 0x1071, 0x80000001, 0x6, 0x7, 0x1}], "8d2ca3e49adf36ed934de2631ff5a595ba33e045634331558040b8cb4cce3a1b7d9b9c1b914cc1b03797a1f3ea296aa57d20f19110bdc3b737575ac2e967098f6d87fe0b03", [[], [], [], [], [], [], [], [], [], []]}, 0xaf5) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000000c0)) 07:11:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x48f, @ipv4={[], [], @broadcast}, 0x334d}, 0xfffffe1d) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c00)={0x0, @loopback}, &(0x7f0000000c40)=0x7) recvfrom(r0, &(0x7f0000000b00)=""/235, 0xeb, 0x2001, &(0x7f0000000c80)=@hci={0x1f, r2, 0x3}, 0x80) inotify_init() r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x40000, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000006c0)={0x31, 0x0, 0x8, 0xc, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(r3, 0x0, &(0x7f0000000440), 0x80000) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000900)=""/212) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000d00)=""/4096) sendfile(r3, r3, &(0x7f0000000480), 0xa198) clock_settime(0x5, &(0x7f0000000380)={0x0, 0x989680}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xc4111, 0xffffffffffffffff, 0x0) getpeername$inet(r3, &(0x7f0000000a00)={0x2, 0x0, @rand_addr}, &(0x7f0000000a40)=0x10) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000001d40)={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x9}, {0xa, 0x4e20, 0x3, @remote, 0xffffffff}, 0x1, [0x1, 0x9, 0x5, 0x2, 0x81, 0x401, 0xfffffffffffff055, 0x4]}, 0x5c) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{}, {0x0, 0xfff}]}, 0x14, 0x1) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/102, 0x66, 0x2002, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000004c0)={0x6, 0x8, 0x11, 0x11, 0x1, 0x0, 0x2, 0x8b}) add_key(&(0x7f0000000500)='.dead\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000800)="1669c1a7f82bb56570d0bbba3e315db0234aadfda136e1af51e8a644ebca8d3a0fa275bdd8981af8eaac62a73740de11b45af295956401a66ededf0441e4b1d0fff1813766b26f1ac83f063f6a2b934c0e5f3193895608f5016ae5db671a8b2689", 0x61, 0xfffffffffffffffb) readlinkat(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000700)=""/235, 0xeb) keyctl$read(0xb, 0x0, &(0x7f00000005c0)=""/227, 0x62) syz_emit_ethernet(0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f0000000580)) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="580000000125bd7000fbdbdf2500fa080044000100400000000000080001006e6174002c000200280001000000000000000000000000000000000000000000ac1414aaac1414bb000000000100001d040006000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) 07:11:31 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 136.530839] binder: 4946:4947 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 136.605024] binder: 4946:4950 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 136.627417] binder: 4946:4950 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:32 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 136.957641] binder: 4964:4966 Acquire 1 refcount change on invalid ref 0 ret -22 [ 136.975946] binder: 4964:4966 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:11:32 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 137.068999] binder: 4964:4978 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 137.094061] binder: 4964:4978 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:32 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4c2100, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000040), r1, 0x0, 0x800000b, 0x0) 07:11:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f00000011c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001640), 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0xfffffffffffffe2f) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = memfd_create(&(0x7f0000000a80)='\x00', 0x4) accept4$inet6(r1, &(0x7f0000000b80)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000dc0)=0x1c, 0x80800) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)={{0x0, 0x2710}, {0x0, 0x2710}}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000540), 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0xd374}, 0x28, 0x1) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000980)='gretap0\x00', 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x40) syz_mount_image$ext4(&(0x7f0000000040)="0000000080", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x100020, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks'}}]}) ioctl$int_in(r1, 0x5452, &(0x7f0000000680)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000f80)={{{@in=@local, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000b00)=0xe8) stat(0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000480)='./file0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000640)='./file0\x00', 0xff, 0x1, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="d41efa57120dae63b6922178bb679f198a02b7b10ec5aa721817c9eee16d99c67c46f23685a83a2549a91014b929e3aef0b1adbbc256d0f97af51ee582768bd12e3e33e498f1cf68d0e7666a3e876f0058767542e46707231854eccc737f87c8e2b4c9e4967f4e31d6fead1ef9cd9e6a53426835d66b7389330a86c5d768f44db0b0", 0x82}], 0x10000a4, 0x0) shutdown(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="6f5f88762f6e62943000"], &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysv\x00', 0xc020, &(0x7f0000000440)='%!.-\x00') inotify_init1(0x80800) 07:11:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 137.275328] audit: type=1400 audit(1542870692.695:23): avc: denied { prog_load } for pid=4990 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 137.360098] binder: 4993:4994 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:11:32 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)="ff05648c565c36d7dc0d69e2cb5a84", 0xf, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid\x00') ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x200000000000014f, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000d467920100000000000061100a000000000095000000ffffffff"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfb, &(0x7f00000000c0)=""/251}, 0x48) getpid() [ 137.463171] binder: 4993:5000 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 137.482895] binder: 4993:5000 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:32 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:32 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @local}, &(0x7f0000000040)=0xc) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/rtc0\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x2d466107, 0xa, 0x11, 0x4, "600ddd1876024d7db7568d3a91715b431b45144c0546acf6326beca43a659cfd4f5479a63723881b5b4b4b8921753ca4bea39922c970a6e633c9758f7044d1cd", "5eddfb8f61f7205908ac601ef52e8fb1e88ec5b27a1e59c3534debdb7cdf183b", [0x70, 0x9]}) bind(r0, &(0x7f0000000300)=@ll={0x11, 0x5, r2, 0x1, 0x4, 0x6, @random="a8197332b995"}, 0x80) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@remote, 0x0, 0x40, 0x4e22, 0x7fffffff, 0x2, 0x0, 0x80, 0x7f, r2, r3}, {0x0, 0x400000, 0xffffffffffffffe1, 0x0, 0x2, 0x99, 0x2}, {0xfffffffffffffffc, 0x0, 0x20, 0x1}, 0xfffffffffffffa42, 0x6e6bb5}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x0, @in=@rand_addr, 0x3500}}, 0xe8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = dup2(0xffffffffffffffff, r1) llistxattr(&(0x7f00000004c0)='\x00', &(0x7f0000000500)=""/43, 0x2b) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000380)=0xf6d) sendmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="2b907684ac67a96d635992cebbe7bc93d37e7bec6c32d7fa2e84052ce674a8b1564546b3912fb092165cab6187aee1acf346bf13124b8857fa2f01d0160870c990ec98837f502890d9dc13775baf8ad60fc68327b5a010ddf4f37177d1cf21ffbe09af0c8e04d162499b2da9233353eb2b9f062cdcb21e7f0ff9cfc0d1bd7e1f0c5645994fe5394980e7bc7defce7a5ac7b287f7196229d0aa1b339c77b51310c1cb433822527b5f69bce684ffce13b9257a8ac30c04d3d6a0133e18f850481355", 0xc1}, {&(0x7f0000000680)="9fc8349f0fb447b5134f3766e79d4a0ca72d5ef0e2ef6cfe1dce95fb7057d828e7d8d3f73657d28156a885a710db7f46e56f90fd373c8c835d05ccca96c5391580fd27b56166e4a4ec6fbe64a5fbffc970cdc1c74f853757fbb0790934245f1bd1732b938fadef0cac18d2cb844ad71eaa4933d611b53714432b68568a79d658c878821a52314a5b211a37f6d0", 0x8d}, {&(0x7f0000000740)="2e7554450bf6ff228affdcf41c2115aecf7c364bb55f356d4ae9a40e46d22bfa9d480f163346ac17d177627fae40c2d4c7e667df3872dc19e6e85cb312395592d7f480c65bf30ed19e8515c5468e70e5eadef2f3a6c8f3274c4fd9ab49e65dc6048790d69dfa16dfa863c02b65cd873ad0903df8a88c5153e7760e4467c1c77093565b8ecfb6c7d507386714264614087d132c7597762d22092b67d9f91f959962878939fa4c72bfad2e8f7e3f06825be40f34e861a66e0322ee3ec7f9de", 0xbe}], 0x3, &(0x7f0000000800)=[{0xd8, 0x0, 0x22a, "692b214174f3c5d9a8d55aa2bbc0790e98b0b677084b07a0f890ba663114d0d8288388bca22e2ca50663512612259107782404db0fe62d666cadef6a7edc628747426025d8e2b89f9dc5ba094793af73980e82e1a77764d0bb8c1be2f29bfa548c86bd2a4dda2572dea834c5b22355c56e53d5204f3e620f3943f22156b1eda0aabdd5e3ff8559a26f6b6980285c258ccab62585fbbbe6e7183fc5f66d4f97b5f9f3ebcbd6ead972cba43913fb4eebca6cfa64edee0f4cf2774c221065951b9bac5b1656cca0dc75"}, {0xc0, 0x0, 0x0, "3e2e6ba7e3d691ca13a5d81d3b29a53d58b7ecdee7f3f5e1d1728ec0e8b5f9c9c98e5fb7e6d4fc9fbe66546b0294b4de6b58cd7302186f50555738eb9d6a6d1275d34e9f64d6b545a7f32937b630d1e6c0988e4aff815f737ae663ebd924ab586e68f84ca06569328ac057f2ddbb57408ea50202c548934b11995f29e3815e8610b32ee69f323ed6f5c06b8250c7d4d3b3dff50c3a0611bfc73834b5bd1f452bab30075e23ecdba9f3eb5f2e08ae"}], 0x198, 0x804}, 0x9}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)="5468eb4a3845904fa191f6695d1d7846a27886a2bc4671461d8689af9a7c956ae0f39034daec1d201ee275b1757afd2c8d40c14a54ce48bfcf91320b6d19a754f03f330bd693fbcf845dd23cb947dabd3793290c5d9b8a9f84f15ff4b1c8851002045c3e7cb485ed0bc17ad54fec4d8380049a1e9cb08f614df3a5dd62b06a567b4ffeaf2901d2ce37265c909f00c3b0821af3e67a14fc4de268b01f9011b0506680231f1883faced23327", 0xab}, {&(0x7f00000003c0)="192b2eb352782c35010bd836acaf96bad6991045cc080abecee8d834c5d0e1f9abea8aa7522821ac78db1431977c2bfc5e5f84892be74014dbffa17a2d6949859648c8b467d3368bc9f33ffb19fe85c00f27f3a0a22a34cfd0fd414900e3e9bcd4caeeb58ec42df0e42e", 0x6a}], 0x2, &(0x7f0000000ac0)=[{0xffffffffffffff0a, 0x111, 0x0, "172cd239697c4a95d022f19e1ede0e005efcc852a827d5cb406b7f62611088b6de"}, {0xd8, 0x11, 0x40, "22339030356b3beedefa98ded4a4745d1824c84482a2de49e7cd43497e7e03edcf32285627509145d576233bb7b97de5f1882ee9a306ad70040b737d4b17b292a5cb5005775e02eecade23cec771efb0869aca51a5c6608740cd5abab6eda81d6d02070b78dc9f44c2e7fda763e3f4bd130a5e0132a1ca3f8a18b22b6eb4056812400b232e1e3d2f6cb16d4b67be605df6f18cf861be82075acf335ccd45201c1775e7c2734f7988dd19436d31eeb631acb4739bf5fc7d00530bdb401750b598a2a5f07d631b"}, {0xf0, 0x0, 0x5, "a1e37564602fba23d5c71d8ec4e164c4341a66681f33d7f30a6d1e396adafccd22a67c01fadc08efb4b2d630839adb329ab0047b194b381867cf0bd73f060ebbfd115a782180d7fc31583b181124771dfaffd56b398aa02968f88249d9b45f729322a91e4677453307f64af1216744fa3e2f465776a97297e07b72251bd23c56e59e7c5e4cd5fbbcd42a8326fd8cff0418bce33555f02ab8c07cf196e0cab8f1045be9b78cf9849d1a1911d34b2ae4e78edbafbbed628095701cecc91c81ea0404183b42ddf165459abf0cb131fce9d853447106894543273326"}, {0x58, 0x197, 0x1, "82a09dd0835c9860a109a9d8ea75a7cd322ab0eac6b1da279582a1ac63be653b50d3ab89247256a5022cc90521dc3b43ecbb52f319ed2366edef1b5b7a441fd5512174b6a4"}, {0x48, 0x11f, 0x80, "9640ab8e7bd5c5e5d44b168c81184bb9c8ab09f4c449c13f4b5d4f9534976e5548a922799b772819f682655cd992e443171afba5fd9071"}, {0x48, 0x10b, 0x2, "8de6a75c4fb7fc36f9ac344a6a38cddf6de30279182eac94b710ea9acfc261faa1015c1d3c8427b8f7cf74a08dc03b145e"}], 0x2e8, 0x40800}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000dc0)="05a8c9d9170a995ef410f09a7c8f6a1433337ca9cf6841b93cf4540f78e2db79a2eb9a5fed0fc2ac50a6cb670081a597d155503346433b72bf308a45889b78e73f8d1db41408da1d17720cbc4262153466df90a8c2adcf92dda36bbc8419d58b30b603f81e56fd829bbd4b468b854fe63243830465031dee93985d2f3ab724d6be69d45cea6978fdc76b", 0x8a}, {&(0x7f0000000e80)="8d78ae9060271e7ab562376724682a431224e306", 0x14}, {&(0x7f0000000ec0)="be269f7a18736bfbb4fd19290de7adb6dd9039295a596747b01eaef116c9c7a30d732b868532f44ab15f4fb00dbf815860cbd1486e111403564178d3ed28e114d3914f2c6cb44142d5e7d38672bffc5cf2a8beb15820386d22d799ef73d061c86b55cbb8231092c0bd815eb3cfffe7f91f6f8143d08cf16c0ca1ab3c518a181a252eb416b5f8c87e929fdf6879a70357422364b3d70866475997616f4fc35aac1dfed035f65d4aa3", 0xa8}, {&(0x7f0000000f80)="a3cc271bf964cff63d9dace229a90b7f961e6ae4a8e4048bc1f7223e2ac9364ad175090a476925df43c6c2f072316b69fc1af987bf345ee6ad341639fa00be14bc365f737e35d5de1fcaf995cb42da3f53d625e2c8cbde74c873b7f813b367857a88091160addf03dabe042fbdeeceea3c8ffad6c91158d558feab7adbfe54ee6195c7ffbd80153f19a18a3ba782489ffb3e8995463d3417e8d4f02a60bd1eed82c8b272a3531fee9fc1a04bb0971e90f5ff0d362475e92b230e32b31db13af195947160d3f915d20ef8bcecc18dd3b2eb99775c37b11ca57aef04d75ba4da80182054033149", 0xe6}, {&(0x7f0000001080)="26a0929740f49a8169d5c540dc6adb5c834ba9f40794acc03df68591315edcaec0c0d0dae0a2e7eb4b96003303fe2deb4e8e475eb91320b3ca9b14b31125bec7b54c31b70da4b0edbd0f68f7572cd130e9912af1f4d6033b526b2cce0370d0a6ddbe5bc19578a6544a5314", 0x6b}, {&(0x7f0000001100)="f2f591d7b6d72e570fa63366cda5769a", 0x10}, {&(0x7f0000001140)="df747d2d89f2b6318b0230b6ab629e97094aba433eb41c8012ff3ccd2f4669f05bdbb593222badcb6924e926f8120684bce25035fbf62f5b66a710fc9f6c7e0d3c1a6d73e101f4665f5a30c9f29a07132c9c00adb1479edcacc414b5af13857c7579633c5f2c085e5c156d", 0x6b}, {&(0x7f00000011c0)="5840ec069d21dd84c0ab1acfbc028264148c04082d9c1cad6e410168d7c299fe301f68e2687f147a0c416532b8e99a1c337dbbb8cccca18320909fbff0e6fc1600bf53818d5c3f56b7eb328f1fa28541fe783ffa54006450713de3b639e2c53b74bf7ecac356ed0d2995c166ab1bbcdfa83950d98389564653ffac184accd4a5c7032862b21e7c1b727b664d79577d4d8fa274005fe3adee2d10170f", 0x9c}, {&(0x7f0000001280)='\\', 0x1}, {&(0x7f00000012c0)="093db3785b68c03bd36c5596ef2861887c7c26ac3bcf1508d2349ab3dc7b7f2956db74a8df610d3ee759be0418dd001988252a744fcc553e2e72ee7067e0360550ced5f85c8afd77bf0810cccc580b42ea8bce97eed798b376d66c8a071130f75177b82bc0c1d05d199583853e3de27b9389e5c0d8c34940610cf1196a3805b664c64c8a9e7620b3a5bbf6b139bfd16b197a8610097a1a778aa8a114bd2a6530d86907bd361792f172", 0xa9}], 0xa, 0x0, 0x0, 0x8004}}, {{&(0x7f0000001440)=@xdp={0x2c, 0x2, r2, 0x30}, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)="a631621452160ab8f06e76", 0xb}, {&(0x7f0000001500)="4215", 0x2}, {&(0x7f0000001540)="f4e245e01736168449843d49a8a9826588d3024254056767087b99517785689b1de9d3ba730461b8c824cb20d768c812b4a46017e26466187828332a9827c6d9ba8b7a705329e88d3a42d7d6a46b59ba3adbebec541afc2ab521c66e6ab0faa9b5b6f1", 0x63}, {&(0x7f00000015c0)="1a823323e3a50d5ec1d3bfab827e58c8ae8e15ffa776b4726b646256fd2dca83b46fea98ef4305b3f3f86d0cade59ae3d88b2af447408e968c", 0x39}], 0x4, &(0x7f0000001640)=[{0x60, 0x10d, 0x4, "5dac5d9877751f24d7a84e7e05d57be36eae90b84cec6d6bc72bceaee627de8b3f57b4993aa0df9414c933c69474a85fb9dea2124bfbc34936ebe6cfd60afd036cc2a05c8c350b7c37bbdcefbe722d18"}, {0x1010, 0x0, 0x401, "fcb0dc3112ebdc322a961eacaf11819a56a62409742446bfaa42b909615f81aabc529a979b3cd6b983e0db183dd31ec3759f9c7e5eaee612dc87917e68b704ef8dfbd9ded44ee678d0ff29930f03c69a7ce73a538da3ab49325de29c8d0968708c7790029b1eebb7409c1eb615d5646b672b9a42d48da669c7357dc9e936f6b3306fcae86cfd0ca39bcdeddfd223da0552ca77bdcc8af7e12e7322c4e8218d7a45e5ca124e0544a6748cdd83eaf63dd4a8457158623fce143dce7dc6eef9d004d87c7d9583f43b7ae9c48ed6f9395f1aa5479a9db4f8ca5fc6ca32f1574c3f89f496f28e3de23f1de0f4c78f4c2ff7c3a918166c0af4852dd961439ad1c9c15a52107117e90e89d3c9a8bce57140a629ac162767d9b4ff9a5c8fc7f716b6ceb8b2e99896c27bde52cd66edce18c36eac9aea9904d7d785d6eb873076b66b549b343be0b07e69541775f1d9a78920a773668c56db21ea45ffdbc4e26e74263add1ec66b789d364d2dafba30e5dee20fd0d795f3295312a454535e85f17089d9c52430506663abf56e7c7bdadde0cb9b5ccba897fd130424d37c5658674f254dc2938d0d4e9371f6519c684f0db13d3c89a4fb069180b8b63f502943ce3967305857dc6854fd709d90e7fd7a004446c17f93ed7c250b3766a6df4b1a8b03c3bc13898fe08ae0b9abbe5733d7dfd6f23018151f8b39cecc79cbe0dbba9358d10be7f7d30867cab6521da54e8167717a17405f288b5586979f421fb61528ac9d0e540fd3f5b3a6316998d5fd6f5b0cdfe9954c2791f750a11df09dc92a360503a93d82a5e89c709a77e1622092adad72474459a768f88818732b6940e8943da853a42343be69c6fe1c6f96fa70917ff6c1908442cfe09de3f5f77069c49144608dcb22722c8e662acc28352e76c3c48e4c4e64c0aeaf144abed2f60dfa4394e4bb2858a5876c4cfa7df4d3a6e9676b16c0caa9cee09af23ebb28ae7e04dd171aadc80134fea1b06c70f7db6edf58a39dd39784f11e3de1a3d965c664c663373bfaf2ee5dd6e82217da0273cd2aecafddc90fde014cad14d89bda3179f8bf01646c76fde032d93e1372ed58bd5ea48a96a6b42c682c6ba798ca8fec23157061417fefbcddbd0e49c1128806ae8c0f620cb7b49caa71a9ac71902f6307eec6a84c69de2c3fb5cfd98fbefee565587765fcc753559911f291f6c85043a5ba64766fcc9a54cbbe520712eb3dd3262559d5e3d200ba4baa981dc69979ff5ef187484eae747a1cd9925c7b36c35e5d38dc55b20c28b6bb760466eb00b7af65a52d2e192a818944712d19696233c3d0b483643c5722b5ae81a95691fa59b8b5155e8ea5f4de9015467dd03f6c6be3de64e3bf26ea855ef45e51b454c1c356615f50e27c63f7c7d55882e9d71256e0a042a62fd298c69b865beaec47eb5758cc347a12fda05d9ceb4fe01e0a2938438187a9fc3ded11710472b292f552c2169b8c970bbaeffd9095bd29db4529b28d662359b723c112dd3803c946b067f2d4203a90d31f2041447c345263572fe7633ae7c5b8d9647efeb778839b525a9fd99ff8b14970e3bf275e01dba9e3146e9fc50d2cde8db02cc2e02145eaa6540bf3e94ed2f7e338e1d4b0ff51c9865f6e766ebafe6631e4fa9b0b132933796cd38c88933de0feef8fce9e58e79fddcd63d84212539f765d8428f23dfa468c94cb74ab64f22cb7e07a65741748a772019153294794545036782160f6e361c537dcd4a870a8444df10cf78a83c47c817df6f2cc2424de2ecbc7b876846ccca8a90963dae3d78bebfbf06b22f2a8e46a3bbefd4234a091d2c7492b7d86421ed933d7b7475e9ec3aa06ef466fa6221f02ec2e31f6f43035de5274eeafd39fcdb5aaef1753ca5a95b115af6fb32025e121b3dbbffe0de96e9c2efe429029492aff3261615bf9e829254f615f3091b7960e3fb35d37438247ef25102753c9a87473730191b4366f6e5d7d6c0a80ef6b06fd2e5ab97ff8b0deaf98d48c4559abc359b5c2766534634acf10103a50daedb9f2775239e5fff939a8524428df91eadd672e100893a789c26c10b24fe645440c32c968f19a0539d5feb79bc6100c350e40eb00ef45b08fe302c4b195fbf2525f9788953a0c85c65a5176a8c76e8feab07c382c5c97fa533e09b0550c29a49dd62fdc6cd9185e4814e20db19feccb483adfc4f47312a0c24685b1585f71fb56828b4517b61b2b1dc4ad3064e3a5c15a77e0c5428f9146d6ac98d61a494632bd76e00c8a905afaf92d2d77b035cb9d0d6dcc780ba7f47920e70ef9cbea92714854533775e2e804f6251736c165d1e323ace9d0564ee9cf4f3d37ecb5a6e57da5ed9e260168b40eed922f705aa40d49351c6eef027bf310cbd0fef1dc51c097bd03f24119fc5d2aec3cae4e0ec8b2d4763f149151f13296496a1d6779a329bb3acef2d5ced616bf86167398d392712c2fea613dbd51406cfd1d0de08c4bc562d5bb6eaf626ea94317c1c7fd5fbca82526cccc6b151dcd4966c44ae0444620552fc87ddf106f6eea99ca9b8dd8474924eb2a6afa50173e0a8bfff45d7325b73573bb3b70171ebba7f4127dfed3b855555c1cb96719c027c36f6bb5b927ef67693ddbf4d7b80fb4b5250578608e91cdb3ff651fe96f65743285e4291ee3d327738278a98a764edc950af3ae58254870d58f22882aeebd4086c7a12b077d300bf402269917024c421a052e90abdb6479844b5a978d3e54320fa49ea8dee00ec5322b56cf49af0189dd7f68fefd336c7a09c1bd3554a274f64654118c10ad3f5a696a847fc7ef8835b5de388f2e8fcc6cd130ae41f367820c852ee494dfa25481dc322c19bcf73d4af14bacb5e26cd1a570252e713026c7a20c8ee6d2d837b09796de18441ea4fa1dc7830e168f0824d80a3297f68ee8a316f8ad05da4eddbf8c8d311df4d3ecea1d78e08ab790248431ed44b4a73b5f5dcf4b8bf7d72e93ceaba8b5f4a54ea12645ed1ec0e15d81957e511ab9142133500907f42eb5cd6cb8356b892e418cc388c4bc4668f2dabed09f70ad613c9dfe89ee9edb90a506b79643c7571b679fe109e85e4a75d18fea22f1666be3ecdca7939319c79d04aaf4229636fb2b66221d984f2c3dd1165913abacd3a0f7cfdbf1a37aa9c48d62c9e7c6ddc25e15f4ab378b78ed6b6c484d767f227e165455d615d95885f2162544d4754911beced4425b1b91fa175e54ee84af9eb7f9a11c1b37ea4d16c14a9d91332d68637418708a2d83f18f493d34e0a1e9840dd6f2aa950fd7916631a0768f3232df12d8256dc464fe639c0e209eaee14eebbc78925bb1242c571a96ed6b43dbe9e606a9b26309aa09a1e60c52f437ea3cf3d1748160ba6c6f6fabb168a126a4a2ebad1997992490a23ba3d18fbc8d15b5dd2195f42891a302934fbc3bc665ff7605122be9d154bcba31e3b1598e79be0deca0e31182806008cd58ca002ff87e528c2f4260bba4eb5b49b81e3ffe933bc2d5969c1a15d68791cad51166f0f92c3b1f2e4b49824629cd39859d73e68712579b6de4e63fe3687711408e9773c57e827425a4af6b572358f35db382c100a94ef9956c565b12978e2a3599c03c34fc49e2c90ec8ebcb1dc0c8cc7ebf47d1fead372a20a96c12ff24ca46a0d64de220fb53ef9156b9991d458c709fc0ce055c9e040fc01a18d44771849180a2004002632b1de8914e52ee6f1ea2c74bd0d715815a0b351be389d04c162fcdde2b2ce882d2d2e9b89f05b58936f3bac8f7aa4a7cac1d44102581c8a69ae8a8acde994ca1430e3e89c7157cc17a73da74cbeae9306349c6d32531b18b05bcdb8987214769b5a195885f24a7a5f5eb19ac5eb18efda4a6e95682eef5f5633de7d30c6a4c712e5fc4dda6d95f4c4d113e0340aec9ccabcd8f87e680d0186c141542799e1e561ff2884c8621ed50d65cb65f265ee770e9e009908c12ebb671bafbb82db6224085f4c0d37879abe7ba6707af1950e0a81d82c0dda4dc6f986a8d5ae1892f97dc70953f1454a39d771135b2e824c46243796a44e62cce7275ca7f86c405a37aa6b0c3de955d74efd96b9cf0d59184f0a11a24bf05ac863d3b85dfec64dd03057ee4ce24a6a6100dc2db5f6c01bfcc166c8fa8c4934dafdc46f0679430582adc298f8543b1d58a802b43a909465bbfe8375ebba09a3bec42d3db116145b8a7d4d0370dfb2adccf3b5272110fcfc0725d3b3b2923f543cc941751a754bad2035379abbd3d827b1291309835cda36121202992c454ed6f4adbf29c0a4c05683f25cedfd7b661dba33a01fc1e6da3bb38ab0af602030bcce629baa9a05de558a5b0749f2b40c435776d356f8ff9f94c6879f8d6210fd6aa000b76bdcbcef7a9468c00d768cb4324ceaaa81d070040689b87324a557c7ff8bd1bafb8a0cc26aea246d6681e19af3e4f2766d37e0247c4aef1743b1d193aa8f5021a0f045c2c0a8eced26a28edaad0ca460608049f3436dcb13da8047891b8a534d8087c36bae4e0c86a5c20fe7d2d6bf568b78f286336b4c8e0394fa05b851cfb05bdc34c0a875e221455464cefec295c6076a25c311dcd282edc6d28deb4ad1b51823ff03afca8f42f0e24e2c2faf856cb0a0b704c641c800097f0ce630443b92b1941e1ac3dadc36337d14e1b02eb0b5665767e18f052708918a6aadc938c2e40bed7a8f5c503a261ac8b8b6330748c1fa6c24cbc96e7a3551a8882c3b32a6cd1735763066398daa7589afeb6af0a4c5987fbce0ea6721237cd67efb2c3f4e617bd33497ade87f2a625d3a102a0e50ef20c6efff384961230b672aea6c229069820ce372ffee7ef7669fbf192b353ddbd8216b4757dea37eb552b0692874062b09362e62863cdb822d2e819cd35561d460dbb655a7e462342d4a0072a4ca0e1c0e83d532d06b15a79a318e5fdd075f667a1ad98dd8e77ff3d39144cf9752a65e23f63073a35224b0dfd0013ceefc26ff7b1ee41b007121583d8d2b82f72d63f46339e3cc87641460f85daa2a3ed856ffdd522883d6b26e5211ed86b890844bfe767c7bb36bfc422a89614d086abcedfa151cda76867223fdd8bcf80cf30c58bddc7fa7d1fbfe9614f12580bfdd5445a050641fbc42883c16c6bac886d008afce863d300374ecc41f10f84c8cb55fef6e2362ad705b28a91e8a829df6ee9ca9fb7936a545899350ab25bf737e31d305f76281ac7839877e0c69778d29c92bec99a88500e5dbb0aeb0e54216e2a6031e87fb793a34ec4ea0003774e68128a5106d5e6dae113fcc51c8c60ee50467a7306b43eea8518dcf8259697bd528df3d290056cfddaa36c5d4a696627be1dc3bb306de6df973e16e65ff4127591cc73239a7873e7a82590d07c72a4d64fe59b683ff6d65b02727d3e21805e253628c0e88a2dc0212d0f9b8e3b3a686ac758b264a5368ac4f8d803e8f3fe16bef38533c72061e04208a3115b524d026d927bc8869095e93746e23b3fe9f93fe1bb0f418f707346e8ed3972ece6f93eb9c88a590ce0625fe1ebf18abe555a97b9605c58843fb5b9de209c0855ec3e74348d0fe275e9457adf26ea403d8a243bdebaea0d8a01d2cd8c212b1b721e3861962f81a6df175096575eb5d0cd41b87543d4321f4649a6b3010d82d6b69026d6185108f798431244e6ce66a90ff5d3fe0f941270810c2682751983ffcb6e8f92884f05e1d08f121c2072588da349a0956cb9455d256cc3d0cd08fb0ccf0832dd2b43c623906aa834d842266cb3125113ac019b857c28273429890823d8b8"}, {0x40, 0x115, 0x8, "db59ffbb879acc744fb4633d821846e49991fe2dfb4ff6f0ff298ce248a3bed25021f210b627df2a1fba9d"}, {0xc8, 0x13f, 0x40, "8c4596ce25595f570e04d1a942d0cf19f448291a17abb5ac67eb6e68400c2b37259182614687bf4833780df503bdd56d53b040f7fee6d4a18c9d7c46db902f68900713c85049afdcde89e4e904300ca2c87b24978fac8111bf513d3e0e2a3116297fd08a06c00d679f394fb5863ad29750d67c983e689bb3c251ca35f3b243cff735414af8b1fadf9106086425e1c4ab6a18632a7d2e6278b19dc20397197746a52457741bcce50cd28081453dce182965"}, {0x1010, 0x6, 0x91ed, "0f8c316611ba416501496e5082ead116d92dbcbc28b6fc6b19d204329b0ed126f8b3862dc431cf15145b44086690f60006e31c32baf84783e0339984006fa0396d90fea31f37987dfb4502ad950a0944911fdf4d67c3dec0e89b92776f9902f535744f7e0c22f31b94a8ab7da961ee74d34c9906d38b0458e3119535e69f70cb4365033de886da3a26be9acb7e37561d1f9fdbd6f00001c33696d51c43ad745d3ced05275c1088196bd66c570a9e9a66ae70cbe35df1270f16f9a6146dddc569b0bcddcab6a3837fa526d8fd2f8420013c44a2c5c2627614231917f29c37e5cbc0dcfc0070c1e04efca43126e09636b760c1ec582665f6f2837632a898d24e35675b3caa36517c954fe15c3e82d37762fd1cb3b4dc2b3d41316fd900d8d1f0b3e66940d8dc9b0f8a0e6273999f55542f4b657656facc2cdce51d8d2134a9571990708b500afc1fb337f284ad30020b26b595b833cda83fbc56b40b9af1b811a7fbe14abba7667f665ab40fe12cd2d6840d7c59e8100b50ee6a8a99aaa736443617911ee928c69bbb7fc23cb5f083a5c2d311293863e843febc742e6ead03e0ebcface572a5155a611a449aa7c6857e437730352f4274bc3dc6d2c1dabf4aaac59ed4014e44a478e6574971b309709a9ad6036d1dc2b589572031c355440b154f69cd4cb58d13ac25f002a3fcdca167f26e89572198006e615fbbf56f65efc067cd8940bde32d26035923af825e1f0d21ccb731b84275b91849113226747585ba32f552f4fed5dc3820c376e165feb3b45e5181a3035aca7103c0ff359d376ecc75f08acecb169812e8b79d0f6672786f42f6c10e66f73c0a3c7665c311237e1bb2e7fbc9ed0f0e4006c4048d84c3ceead5b79d7371a4d298395fe7abf0fef9cf3893a91d1ae020654aae92ff3b9d364a1933c4d8e16f497cee19463c2491bd1253d1b4486ffb663e43be22c378b747710aaefa4c3684d642fcacbb0a40c87bb3b8c6af4251359050e672506b3cadbe7e1238dbd5d949fc5bf8ed7f57537a3cde00da4155a39cefaf16bbfd428d9b2835ef45a33db68fd6e2bbc61fe6aa50ffa4df73b0b431201ada38cc12000eff566fd7996d9eae0a3c3cfd00371d5f2388bedda982e75cc5f45e3e220f61ab9476c2ffd4ba145674e9005238b613184bc974905b51f265e3a8c61635e7e0cbd3eece8d6149b033c1081c881b6036e2b4a7dfcb7fa0f760e38c8bec98b5e89788867b37659bd8f42b503fb0dfc5dd5f7476b4531590790f812ee0fbacf88600442d4434aeeaa4ea47bc0582d7d0c6a993b7c7bba583cfd50023806f73c6773e30b772a70b0581f1afb8bcf24e59147b8a5f43525569a1b3b5ea31f60c8ee7dc164d883012afbf4da224fbda7f1df7a280e4d6103021039b75047c1e34a270dbf83c0fef2912a43ee69aab244429ab456d86f8e1d5b7495210f1f027566ee56c289376d515a2f229ed5ee0adfaa6d24ab8c5f543d9e7b14326f194866eb3418efabe5fc24bc7449ce51d14900277546cc0e4df8f4b8a4827039ad902f53592b4803d37fde87ceaf2d44508820ca44cd08b3abc58ce1f2cdd59c5623f389ebe55efd67496fd38e36c19fbd69d1ebf295d1d43b871895a9aadd163710226c12adb1229d505d5b993d3d9f332a1fbe195be6f10a335be7db5bb825aa4bd1fe636392103fabe7cb4eac6110b5ff7d537d79abd4b6a5aa3d4f291ffefbe80f6dcded84a7434faefc9db45854e2390deb87ee5d5e6851bd92fc99f6e076eaa6d7f5995d9cbfe09d4090373e5f2f3956471c702980a8fe1a472819fa425de6a4707a2628dde91a6db22eecd2952ed9de260aeaee7dc4c3c8457f428b93e4453fd65e3800936d72d1faec1fb3f82e98106c607bbcad8be3903a16be18c9533d08e4504ef95f5d425338940d8fde555a022dcdfe2b3241cabae9cad0a0cae7dd4950cb24c27fa1256c56ccd361a96c2627755fde2deadb31e18e494a861783af8ac806abed4df428c2b9db00f96d1b6a9b83ada75a486ba3057c71e777ca0096788dbac69ac3d9e047e6fb076c39fe3c01d55c8ebe001ce795e7414cd529cf8f8adbdce60203882d0f57bc91de13fa09e46d33b534ffec84a8a69d95d746649cf8965b8c3131a1a34067e19105c7489467a3429ec4ca087a38da3de04976661665bdcb0f7ba0bb19ae62664305860172dc35b832cc1d030e7107dd6a3b85a49f92cca3dc5fb6f0c5eeb44a4964db418c471f5086464e047084f234937ffbca01e2476a200f7dac8e84ba7df527c38ba78f9398a71768dd7aadc7ddb51c9ed0cab0e0848087629f9324ea1c69b68ed5b777b67576b121c3eeb3d77aff428ae1c3116b8e3f7a13e6fffe55d817ac676093d7000ec2ba3b36f8e1674c4b4a970d4abdf4bee5ab2dc84a2ad42baf2bd8422160cd5ac38a369956c24aa4c0a3b26df1b5edcabb8c15597cbb142e02ec9293a16b7d71beca3d8a90c2a8f289a815242c75f70ae4e7c24049d041e3db250a70744b11e2327d3b650d9b1bb399c6a0031a92db16d4af0475e04587769f010f65e369d33766d422465546fd9b7632016e10e09a233cda1f6cb1fb0ecc35bf2dceb28b1abb013ab818be68eb5e3129dbc5e8543ca8ae13062e91b1152962f29f251058feb783b0b87bb6c5acc4783775aa2017f9c9b184f0734b2ccca4a05a4b78bef0cbdb62fe5c2667e8942c97fd9ad4159dd5ee761a2ea4a5d99ff72ef76112f22f71d73aed0607773a0503e0e0ff946978274f0822077d8a317574cc299fe11f687bf2da17fcf87323f5a4cc6a13a58b822be21d333b6bf5ad8f1e166a0fe8856715cbf8a667573b0b045ea42a70321e6962295efcce665d5aadb9ebe6c37fcfa0139e653d436555c652296b9535a0e90205e87d06571bbce496132fc3c4dc14ffff69c4d4bbec0bd786d45bb8d08ef0bf46b9497a6c5f45bd038f798a3c0b427e245f582cc694156898a4937c23bac748d6a6ec32ec6b59164a8c63f862602d9b96db6d781b70677bef0572d958b58ade140e33246bc21a293bffd9fe48f88665d03c85de980ef4430a26e0360eeb1b7b94983b19ff12051c22dd81734f271b24ee5c24c41e9f29980e33772ab172f54999a1e6a889948c31a7fa2bb46c9713fd00de6660ff721b520f3a916b0a6aa1ffed0c7a3cb7801d5d305f6b5b4fdb2d31f792a34f071a1fdd288e50914bc2f9f0e545460c8d675580d32bfb1b8b04091e7834d38a33b747c496f8f472f40e3db46f094993059d9029e1f15533d76701b65cd962b39fbdedf79956c6d231b69202baaae5ea2e38a72ff599b0ee5c71fa6e20f58386f4fd21feaf8d378ebe5881498919371a7d1064574c63c99dfca805d93b192427a7ea0664d9d443040b8d0308a26b7a61ee0bc5eef27e16824f3c1f6e157ad2657ac11907b4a221db6c69d910891d06a53b4a0a031f3fe61df4b1662626a5d2f332bd7af07a64076d39378b57cd9c6f3ae2b0404ec17126065fd1cbf4011d529f24305a39062031915e9cbf1dc6b25366e44aaee806bf84dcd3b95b6ddb5ffac6632f78b189c85d062f5568f3207dbcc1e3acf3bfd44775c1b44df27bc810224c0404915a84c40cfaafe47c206d8056eb07cde8bd49631284640376a9a73911369b78b185debe6b78d962e92da87a0c9e1f956b6d15bfc0c6cab71da7ceb3415d415943bb7ea9b421106aeb5c978fe241ed5257cfa88b73fb0e7e08a4d7fe468a8fd2e6c680a7f90f3ed5aa1bc1b81f8b4354ce9c87f9a817e0207cf2627740365df9d34cb34e36e7013ffb56176ee54ec4c07e2c973e3c6de6bee7fd6fe149dd3950a292a7a2ac09c8cc0a4cdd12e8bf6e8bd3c57cde5c69dd66c322233b048abb5a2c3f44345a8ecbeabfeff24441be613e699628d01e7a99d5028f5a5c80eb65d88da90ef6e593c7ef34f0061679f9e8784b9b8f1b4b9c2d4a7a575f5531cb610d34f1f34b723744b9978c1dbec8abd090364944b0787991c3e17cfec3e1565d232fe7e7dace1cef060363a62175d8c6b8d5e1e54a09bb43f6a4d0c04bb913b83f6283fb76511c99b4b7f2fd04bfdeb496ea26d779b54f25298953916b1a15f93526feb89d0e68093c2267ae11814c18100cd8c7d5dbd066308c06e5247bbf39215c67f34edbd9ce822337ad58617e7f0519c8e6743c8368fbae2c5baae5ea3be6bf2da9cebceab667f86106a70bc6edada7fef6714098a1de954556013a809964f0ada9bfe267f6d06f759dadacf28671391ead5ab699caeb48c56ad4a9cc8f8a462e385aab7ae462f59bac50f1cc356fdbacd8e504ea552e155b95d909acb76368b5ff867874d3b8a237e3ce80247bb15bf6732951c21900bd98a9604decec3ac93c698651d71650e1a83f522ad5910c0b26977cb7a1c64a73deb3a0f7e8f83f6a6fba32403900bcf9c55e7d1d9cb0abff46db6138156a8c2080132f50c3d355e16eeae4746523a149e6e3e84611e3e1e27051cb21626b7fd5d9a0cf582cc4c9a5eb87335eb5434f6e2470f1c29b54949e6227b4159690ec29e1eafea5a2d7c2b098629aa54cfe445845ac3decd34c93a657b92dc9bb58bf0cd06f5d219b99c4642896ff708f7e5bea56fd758c7de5680178a751d7c29863c2c1ecede3fafc59cdfc6ce441c7d9c641603450137e8d0da6ed5c74b88229cc60657ce62e2b1cd802735f84fedda65f7af26e7e8868288b28d5845bf045dba6dad572f8593b7e97e0903acda81dacc8f0bfdcfb2eaf2b45c0f20c8800ebbc18e03bf4c04d80ae2ea51a2d8d007f80fb3a89f52daad05143caf97af5de7d738b04592a90487ea9f5ade2824da88ccef2083e3edbcb2154099f362f636e1629151e48aac53ea33503d9da4b2fd810787ee38bfb16981ed5aabb8b2590ee92bbe8203e703a057adac71889d878d0af4b48ef26f69acd6a49b1e9981227e9da7677a7e9a0b653d60873826ef4b785c2e78b26aaf1f0a949bb969d2c0e72dfd6c00a52df8b7924b5af31cff4c7733b9654bb9b602a4e5c63001622a4609967aac387e29d0b1a4a5f554c2b50bc095f7eea223d771c78ad1bc8c4c708f4902d90bc4ba4c0f3a8ff21dd1938d29566c3e7164b1c68831ffadfacb7b68dfaf16772f8e59e5b8486b7ae297174094cb802e55eb1a48c9cf68c72f089cb8dff326755ada656d052feca5233c9f9ca8fe37ab22625c2f817aab4b42ff5fc111bd40fb19d7c8aa19e7cc8b76c1d4608cc714a74671acd4daad59adfbf403a615702c1ae5afc5d973ce30f904e400a75cd65c9ef5fb5bd7ebb8dd6c626ca0de3fb108e3b2b7bd8f246476e90b03b20d47c968d0d7bc05e8bd1f6d837c7fae3e42a1629f142cd54c76a4a1d7e135182245f5d3813163e3ed3c15e04894a3d93f7b8dd09dc827ead765ecff13425b0be954f05e655ff2bcd8ecae7fd86e30ba3d47e75c4b82df6f29cd43e1436d03ced6df8652fabfca6a2a2467026e489de91e0246d395c5ae91cf946670af7397aa413624cb941393a45c2aba7f544abc05ec07df53a3ca1cf172162cb11a94af30d1b12fe001db51898c54eeb66f2ed6c9f7e1680394658f0fb35e060d6335c009626eeb3e1ac7a8e2c679ccd1be40d3d1f5280cd5cf68d4756c20de85648fe645a57fe67725299957642c4d7b360d40939856b9be34d7a540ed80ef40c80bbc4bc8021a39d5d2d23aa07de1168b2aa5f714037daacb6228a09095100aa1d3b91c53f040226a26026594fee0258f328ceeca7b54dffe40b366cbf0dd6c8df4062c"}, {0xd8, 0x88, 0x549, "a3af60f48c0bd28d05cdd97057e452ecdf60a756a989c0438bc3344a1e48d8d87cfdd7d68fbd0d84befa64f762e1b7b35c61659d3695350038e07e6593747a2da0b0d6c1f14bcd9f78cc91bc740ece6075a90d7110ad9dd64245edf3623aa0fd6ea6e11fbf1bb309ebc5959e98c6e4e0d441c263f34e4da675f8165697e45eb4082eb129e91284636ea9218d9b0ee546b455571365c0a93a2abb831c3e3b89a5b56c2b9e2598a55bd2ff8f065d9419f29f72addd3b968d64e09633d5c2682b3a83c86a"}, {0x98, 0x10d, 0x81, "496c8d4dff0583dc1825f13c0efd7b3defbe0595d76032c31d5a0819ebdcd8622eda297333334aa1d8f3d4fa9c8b5183ce49cffa94e46b28cfeb4a7c0fe53ebdb8fbcea6626d3c5673a365c1d2c22d7752d6685e0ee5994aeb5f58b79881c0c2eaafb9b115fa1c84918fb521de513477c1ff47ff3aa418c466d2c860ca56ca80738d6ffcbcbf16"}], 0x22f8, 0xf82f2efe6d852a9a}, 0x8}], 0x4, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{0x2, 0x4e21, @broadcast}, {0x1}, 0x0, {0x2, 0x4e21, @dev}, 'bridge_slave_0\x00'}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000640)) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@empty, @dev}, &(0x7f00000002c0)=0x8) 07:11:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x2}, {r0, 0x1000}, {r0, 0x1}], 0x4, 0x76f5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 07:11:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @local}, &(0x7f0000000040)=0xc) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/rtc0\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x2d466107, 0xa, 0x11, 0x4, "600ddd1876024d7db7568d3a91715b431b45144c0546acf6326beca43a659cfd4f5479a63723881b5b4b4b8921753ca4bea39922c970a6e633c9758f7044d1cd", "5eddfb8f61f7205908ac601ef52e8fb1e88ec5b27a1e59c3534debdb7cdf183b", [0x70, 0x9]}) bind(r0, &(0x7f0000000300)=@ll={0x11, 0x5, r2, 0x1, 0x4, 0x6, @random="a8197332b995"}, 0x80) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@remote, 0x0, 0x40, 0x4e22, 0x7fffffff, 0x2, 0x0, 0x80, 0x7f, r2, r3}, {0x0, 0x400000, 0xffffffffffffffe1, 0x0, 0x2, 0x99, 0x2}, {0xfffffffffffffffc, 0x0, 0x20, 0x1}, 0xfffffffffffffa42, 0x6e6bb5}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x0, @in=@rand_addr, 0x3500}}, 0xe8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = dup2(0xffffffffffffffff, r1) llistxattr(&(0x7f00000004c0)='\x00', &(0x7f0000000500)=""/43, 0x2b) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000380)=0xf6d) sendmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="2b907684ac67a96d635992cebbe7bc93d37e7bec6c32d7fa2e84052ce674a8b1564546b3912fb092165cab6187aee1acf346bf13124b8857fa2f01d0160870c990ec98837f502890d9dc13775baf8ad60fc68327b5a010ddf4f37177d1cf21ffbe09af0c8e04d162499b2da9233353eb2b9f062cdcb21e7f0ff9cfc0d1bd7e1f0c5645994fe5394980e7bc7defce7a5ac7b287f7196229d0aa1b339c77b51310c1cb433822527b5f69bce684ffce13b9257a8ac30c04d3d6a0133e18f850481355", 0xc1}, {&(0x7f0000000680)="9fc8349f0fb447b5134f3766e79d4a0ca72d5ef0e2ef6cfe1dce95fb7057d828e7d8d3f73657d28156a885a710db7f46e56f90fd373c8c835d05ccca96c5391580fd27b56166e4a4ec6fbe64a5fbffc970cdc1c74f853757fbb0790934245f1bd1732b938fadef0cac18d2cb844ad71eaa4933d611b53714432b68568a79d658c878821a52314a5b211a37f6d0", 0x8d}, {&(0x7f0000000740)="2e7554450bf6ff228affdcf41c2115aecf7c364bb55f356d4ae9a40e46d22bfa9d480f163346ac17d177627fae40c2d4c7e667df3872dc19e6e85cb312395592d7f480c65bf30ed19e8515c5468e70e5eadef2f3a6c8f3274c4fd9ab49e65dc6048790d69dfa16dfa863c02b65cd873ad0903df8a88c5153e7760e4467c1c77093565b8ecfb6c7d507386714264614087d132c7597762d22092b67d9f91f959962878939fa4c72bfad2e8f7e3f06825be40f34e861a66e0322ee3ec7f9de", 0xbe}], 0x3, &(0x7f0000000800)=[{0xd8, 0x0, 0x22a, "692b214174f3c5d9a8d55aa2bbc0790e98b0b677084b07a0f890ba663114d0d8288388bca22e2ca50663512612259107782404db0fe62d666cadef6a7edc628747426025d8e2b89f9dc5ba094793af73980e82e1a77764d0bb8c1be2f29bfa548c86bd2a4dda2572dea834c5b22355c56e53d5204f3e620f3943f22156b1eda0aabdd5e3ff8559a26f6b6980285c258ccab62585fbbbe6e7183fc5f66d4f97b5f9f3ebcbd6ead972cba43913fb4eebca6cfa64edee0f4cf2774c221065951b9bac5b1656cca0dc75"}, {0xc0, 0x0, 0x0, "3e2e6ba7e3d691ca13a5d81d3b29a53d58b7ecdee7f3f5e1d1728ec0e8b5f9c9c98e5fb7e6d4fc9fbe66546b0294b4de6b58cd7302186f50555738eb9d6a6d1275d34e9f64d6b545a7f32937b630d1e6c0988e4aff815f737ae663ebd924ab586e68f84ca06569328ac057f2ddbb57408ea50202c548934b11995f29e3815e8610b32ee69f323ed6f5c06b8250c7d4d3b3dff50c3a0611bfc73834b5bd1f452bab30075e23ecdba9f3eb5f2e08ae"}], 0x198, 0x804}, 0x9}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)="5468eb4a3845904fa191f6695d1d7846a27886a2bc4671461d8689af9a7c956ae0f39034daec1d201ee275b1757afd2c8d40c14a54ce48bfcf91320b6d19a754f03f330bd693fbcf845dd23cb947dabd3793290c5d9b8a9f84f15ff4b1c8851002045c3e7cb485ed0bc17ad54fec4d8380049a1e9cb08f614df3a5dd62b06a567b4ffeaf2901d2ce37265c909f00c3b0821af3e67a14fc4de268b01f9011b0506680231f1883faced23327", 0xab}, {&(0x7f00000003c0)="192b2eb352782c35010bd836acaf96bad6991045cc080abecee8d834c5d0e1f9abea8aa7522821ac78db1431977c2bfc5e5f84892be74014dbffa17a2d6949859648c8b467d3368bc9f33ffb19fe85c00f27f3a0a22a34cfd0fd414900e3e9bcd4caeeb58ec42df0e42e", 0x6a}], 0x2, &(0x7f0000000ac0)=[{0xffffffffffffff0a, 0x111, 0x0, "172cd239697c4a95d022f19e1ede0e005efcc852a827d5cb406b7f62611088b6de"}, {0xd8, 0x11, 0x40, "22339030356b3beedefa98ded4a4745d1824c84482a2de49e7cd43497e7e03edcf32285627509145d576233bb7b97de5f1882ee9a306ad70040b737d4b17b292a5cb5005775e02eecade23cec771efb0869aca51a5c6608740cd5abab6eda81d6d02070b78dc9f44c2e7fda763e3f4bd130a5e0132a1ca3f8a18b22b6eb4056812400b232e1e3d2f6cb16d4b67be605df6f18cf861be82075acf335ccd45201c1775e7c2734f7988dd19436d31eeb631acb4739bf5fc7d00530bdb401750b598a2a5f07d631b"}, {0xf0, 0x0, 0x5, "a1e37564602fba23d5c71d8ec4e164c4341a66681f33d7f30a6d1e396adafccd22a67c01fadc08efb4b2d630839adb329ab0047b194b381867cf0bd73f060ebbfd115a782180d7fc31583b181124771dfaffd56b398aa02968f88249d9b45f729322a91e4677453307f64af1216744fa3e2f465776a97297e07b72251bd23c56e59e7c5e4cd5fbbcd42a8326fd8cff0418bce33555f02ab8c07cf196e0cab8f1045be9b78cf9849d1a1911d34b2ae4e78edbafbbed628095701cecc91c81ea0404183b42ddf165459abf0cb131fce9d853447106894543273326"}, {0x58, 0x197, 0x1, "82a09dd0835c9860a109a9d8ea75a7cd322ab0eac6b1da279582a1ac63be653b50d3ab89247256a5022cc90521dc3b43ecbb52f319ed2366edef1b5b7a441fd5512174b6a4"}, {0x48, 0x11f, 0x80, "9640ab8e7bd5c5e5d44b168c81184bb9c8ab09f4c449c13f4b5d4f9534976e5548a922799b772819f682655cd992e443171afba5fd9071"}, {0x48, 0x10b, 0x2, "8de6a75c4fb7fc36f9ac344a6a38cddf6de30279182eac94b710ea9acfc261faa1015c1d3c8427b8f7cf74a08dc03b145e"}], 0x2e8, 0x40800}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000dc0)="05a8c9d9170a995ef410f09a7c8f6a1433337ca9cf6841b93cf4540f78e2db79a2eb9a5fed0fc2ac50a6cb670081a597d155503346433b72bf308a45889b78e73f8d1db41408da1d17720cbc4262153466df90a8c2adcf92dda36bbc8419d58b30b603f81e56fd829bbd4b468b854fe63243830465031dee93985d2f3ab724d6be69d45cea6978fdc76b", 0x8a}, {&(0x7f0000000e80)="8d78ae9060271e7ab562376724682a431224e306", 0x14}, {&(0x7f0000000ec0)="be269f7a18736bfbb4fd19290de7adb6dd9039295a596747b01eaef116c9c7a30d732b868532f44ab15f4fb00dbf815860cbd1486e111403564178d3ed28e114d3914f2c6cb44142d5e7d38672bffc5cf2a8beb15820386d22d799ef73d061c86b55cbb8231092c0bd815eb3cfffe7f91f6f8143d08cf16c0ca1ab3c518a181a252eb416b5f8c87e929fdf6879a70357422364b3d70866475997616f4fc35aac1dfed035f65d4aa3", 0xa8}, {&(0x7f0000000f80)="a3cc271bf964cff63d9dace229a90b7f961e6ae4a8e4048bc1f7223e2ac9364ad175090a476925df43c6c2f072316b69fc1af987bf345ee6ad341639fa00be14bc365f737e35d5de1fcaf995cb42da3f53d625e2c8cbde74c873b7f813b367857a88091160addf03dabe042fbdeeceea3c8ffad6c91158d558feab7adbfe54ee6195c7ffbd80153f19a18a3ba782489ffb3e8995463d3417e8d4f02a60bd1eed82c8b272a3531fee9fc1a04bb0971e90f5ff0d362475e92b230e32b31db13af195947160d3f915d20ef8bcecc18dd3b2eb99775c37b11ca57aef04d75ba4da80182054033149", 0xe6}, {&(0x7f0000001080)="26a0929740f49a8169d5c540dc6adb5c834ba9f40794acc03df68591315edcaec0c0d0dae0a2e7eb4b96003303fe2deb4e8e475eb91320b3ca9b14b31125bec7b54c31b70da4b0edbd0f68f7572cd130e9912af1f4d6033b526b2cce0370d0a6ddbe5bc19578a6544a5314", 0x6b}, {&(0x7f0000001100)="f2f591d7b6d72e570fa63366cda5769a", 0x10}, {&(0x7f0000001140)="df747d2d89f2b6318b0230b6ab629e97094aba433eb41c8012ff3ccd2f4669f05bdbb593222badcb6924e926f8120684bce25035fbf62f5b66a710fc9f6c7e0d3c1a6d73e101f4665f5a30c9f29a07132c9c00adb1479edcacc414b5af13857c7579633c5f2c085e5c156d", 0x6b}, {&(0x7f00000011c0)="5840ec069d21dd84c0ab1acfbc028264148c04082d9c1cad6e410168d7c299fe301f68e2687f147a0c416532b8e99a1c337dbbb8cccca18320909fbff0e6fc1600bf53818d5c3f56b7eb328f1fa28541fe783ffa54006450713de3b639e2c53b74bf7ecac356ed0d2995c166ab1bbcdfa83950d98389564653ffac184accd4a5c7032862b21e7c1b727b664d79577d4d8fa274005fe3adee2d10170f", 0x9c}, {&(0x7f0000001280)='\\', 0x1}, {&(0x7f00000012c0)="093db3785b68c03bd36c5596ef2861887c7c26ac3bcf1508d2349ab3dc7b7f2956db74a8df610d3ee759be0418dd001988252a744fcc553e2e72ee7067e0360550ced5f85c8afd77bf0810cccc580b42ea8bce97eed798b376d66c8a071130f75177b82bc0c1d05d199583853e3de27b9389e5c0d8c34940610cf1196a3805b664c64c8a9e7620b3a5bbf6b139bfd16b197a8610097a1a778aa8a114bd2a6530d86907bd361792f172", 0xa9}], 0xa, 0x0, 0x0, 0x8004}}, {{&(0x7f0000001440)=@xdp={0x2c, 0x2, r2, 0x30}, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)="a631621452160ab8f06e76", 0xb}, {&(0x7f0000001500)="4215", 0x2}, {&(0x7f0000001540)="f4e245e01736168449843d49a8a9826588d3024254056767087b99517785689b1de9d3ba730461b8c824cb20d768c812b4a46017e26466187828332a9827c6d9ba8b7a705329e88d3a42d7d6a46b59ba3adbebec541afc2ab521c66e6ab0faa9b5b6f1", 0x63}, {&(0x7f00000015c0)="1a823323e3a50d5ec1d3bfab827e58c8ae8e15ffa776b4726b646256fd2dca83b46fea98ef4305b3f3f86d0cade59ae3d88b2af447408e968c", 0x39}], 0x4, &(0x7f0000001640)=[{0x60, 0x10d, 0x4, "5dac5d9877751f24d7a84e7e05d57be36eae90b84cec6d6bc72bceaee627de8b3f57b4993aa0df9414c933c69474a85fb9dea2124bfbc34936ebe6cfd60afd036cc2a05c8c350b7c37bbdcefbe722d18"}, {0x1010, 0x0, 0x401, "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"}, {0x40, 0x115, 0x8, "db59ffbb879acc744fb4633d821846e49991fe2dfb4ff6f0ff298ce248a3bed25021f210b627df2a1fba9d"}, {0xc8, 0x13f, 0x40, "8c4596ce25595f570e04d1a942d0cf19f448291a17abb5ac67eb6e68400c2b37259182614687bf4833780df503bdd56d53b040f7fee6d4a18c9d7c46db902f68900713c85049afdcde89e4e904300ca2c87b24978fac8111bf513d3e0e2a3116297fd08a06c00d679f394fb5863ad29750d67c983e689bb3c251ca35f3b243cff735414af8b1fadf9106086425e1c4ab6a18632a7d2e6278b19dc20397197746a52457741bcce50cd28081453dce182965"}, {0x1010, 0x6, 0x91ed, "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"}, {0xd8, 0x88, 0x549, "a3af60f48c0bd28d05cdd97057e452ecdf60a756a989c0438bc3344a1e48d8d87cfdd7d68fbd0d84befa64f762e1b7b35c61659d3695350038e07e6593747a2da0b0d6c1f14bcd9f78cc91bc740ece6075a90d7110ad9dd64245edf3623aa0fd6ea6e11fbf1bb309ebc5959e98c6e4e0d441c263f34e4da675f8165697e45eb4082eb129e91284636ea9218d9b0ee546b455571365c0a93a2abb831c3e3b89a5b56c2b9e2598a55bd2ff8f065d9419f29f72addd3b968d64e09633d5c2682b3a83c86a"}, {0x98, 0x10d, 0x81, "496c8d4dff0583dc1825f13c0efd7b3defbe0595d76032c31d5a0819ebdcd8622eda297333334aa1d8f3d4fa9c8b5183ce49cffa94e46b28cfeb4a7c0fe53ebdb8fbcea6626d3c5673a365c1d2c22d7752d6685e0ee5994aeb5f58b79881c0c2eaafb9b115fa1c84918fb521de513477c1ff47ff3aa418c466d2c860ca56ca80738d6ffcbcbf16"}], 0x22f8, 0xf82f2efe6d852a9a}, 0x8}], 0x4, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{0x2, 0x4e21, @broadcast}, {0x1}, 0x0, {0x2, 0x4e21, @dev}, 'bridge_slave_0\x00'}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000640)) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@empty, @dev}, &(0x7f00000002c0)=0x8) 07:11:33 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x2}, {r0, 0x1000}, {r0, 0x1}], 0x4, 0x76f5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) [ 137.752219] audit: type=1400 audit(1542870693.175:24): avc: denied { map_read map_write } for pid=5027 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 07:11:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @local}, &(0x7f0000000040)=0xc) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/rtc0\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x2d466107, 0xa, 0x11, 0x4, "600ddd1876024d7db7568d3a91715b431b45144c0546acf6326beca43a659cfd4f5479a63723881b5b4b4b8921753ca4bea39922c970a6e633c9758f7044d1cd", "5eddfb8f61f7205908ac601ef52e8fb1e88ec5b27a1e59c3534debdb7cdf183b", [0x70, 0x9]}) bind(r0, &(0x7f0000000300)=@ll={0x11, 0x5, r2, 0x1, 0x4, 0x6, @random="a8197332b995"}, 0x80) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@remote, 0x0, 0x40, 0x4e22, 0x7fffffff, 0x2, 0x0, 0x80, 0x7f, r2, r3}, {0x0, 0x400000, 0xffffffffffffffe1, 0x0, 0x2, 0x99, 0x2}, {0xfffffffffffffffc, 0x0, 0x20, 0x1}, 0xfffffffffffffa42, 0x6e6bb5}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x0, @in=@rand_addr, 0x3500}}, 0xe8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = dup2(0xffffffffffffffff, r1) llistxattr(&(0x7f00000004c0)='\x00', &(0x7f0000000500)=""/43, 0x2b) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000380)=0xf6d) sendmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="2b907684ac67a96d635992cebbe7bc93d37e7bec6c32d7fa2e84052ce674a8b1564546b3912fb092165cab6187aee1acf346bf13124b8857fa2f01d0160870c990ec98837f502890d9dc13775baf8ad60fc68327b5a010ddf4f37177d1cf21ffbe09af0c8e04d162499b2da9233353eb2b9f062cdcb21e7f0ff9cfc0d1bd7e1f0c5645994fe5394980e7bc7defce7a5ac7b287f7196229d0aa1b339c77b51310c1cb433822527b5f69bce684ffce13b9257a8ac30c04d3d6a0133e18f850481355", 0xc1}, {&(0x7f0000000680)="9fc8349f0fb447b5134f3766e79d4a0ca72d5ef0e2ef6cfe1dce95fb7057d828e7d8d3f73657d28156a885a710db7f46e56f90fd373c8c835d05ccca96c5391580fd27b56166e4a4ec6fbe64a5fbffc970cdc1c74f853757fbb0790934245f1bd1732b938fadef0cac18d2cb844ad71eaa4933d611b53714432b68568a79d658c878821a52314a5b211a37f6d0", 0x8d}, {&(0x7f0000000740)="2e7554450bf6ff228affdcf41c2115aecf7c364bb55f356d4ae9a40e46d22bfa9d480f163346ac17d177627fae40c2d4c7e667df3872dc19e6e85cb312395592d7f480c65bf30ed19e8515c5468e70e5eadef2f3a6c8f3274c4fd9ab49e65dc6048790d69dfa16dfa863c02b65cd873ad0903df8a88c5153e7760e4467c1c77093565b8ecfb6c7d507386714264614087d132c7597762d22092b67d9f91f959962878939fa4c72bfad2e8f7e3f06825be40f34e861a66e0322ee3ec7f9de", 0xbe}], 0x3, &(0x7f0000000800)=[{0xd8, 0x0, 0x22a, "692b214174f3c5d9a8d55aa2bbc0790e98b0b677084b07a0f890ba663114d0d8288388bca22e2ca50663512612259107782404db0fe62d666cadef6a7edc628747426025d8e2b89f9dc5ba094793af73980e82e1a77764d0bb8c1be2f29bfa548c86bd2a4dda2572dea834c5b22355c56e53d5204f3e620f3943f22156b1eda0aabdd5e3ff8559a26f6b6980285c258ccab62585fbbbe6e7183fc5f66d4f97b5f9f3ebcbd6ead972cba43913fb4eebca6cfa64edee0f4cf2774c221065951b9bac5b1656cca0dc75"}, {0xc0, 0x0, 0x0, "3e2e6ba7e3d691ca13a5d81d3b29a53d58b7ecdee7f3f5e1d1728ec0e8b5f9c9c98e5fb7e6d4fc9fbe66546b0294b4de6b58cd7302186f50555738eb9d6a6d1275d34e9f64d6b545a7f32937b630d1e6c0988e4aff815f737ae663ebd924ab586e68f84ca06569328ac057f2ddbb57408ea50202c548934b11995f29e3815e8610b32ee69f323ed6f5c06b8250c7d4d3b3dff50c3a0611bfc73834b5bd1f452bab30075e23ecdba9f3eb5f2e08ae"}], 0x198, 0x804}, 0x9}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)="5468eb4a3845904fa191f6695d1d7846a27886a2bc4671461d8689af9a7c956ae0f39034daec1d201ee275b1757afd2c8d40c14a54ce48bfcf91320b6d19a754f03f330bd693fbcf845dd23cb947dabd3793290c5d9b8a9f84f15ff4b1c8851002045c3e7cb485ed0bc17ad54fec4d8380049a1e9cb08f614df3a5dd62b06a567b4ffeaf2901d2ce37265c909f00c3b0821af3e67a14fc4de268b01f9011b0506680231f1883faced23327", 0xab}, {&(0x7f00000003c0)="192b2eb352782c35010bd836acaf96bad6991045cc080abecee8d834c5d0e1f9abea8aa7522821ac78db1431977c2bfc5e5f84892be74014dbffa17a2d6949859648c8b467d3368bc9f33ffb19fe85c00f27f3a0a22a34cfd0fd414900e3e9bcd4caeeb58ec42df0e42e", 0x6a}], 0x2, &(0x7f0000000ac0)=[{0xffffffffffffff0a, 0x111, 0x0, "172cd239697c4a95d022f19e1ede0e005efcc852a827d5cb406b7f62611088b6de"}, {0xd8, 0x11, 0x40, "22339030356b3beedefa98ded4a4745d1824c84482a2de49e7cd43497e7e03edcf32285627509145d576233bb7b97de5f1882ee9a306ad70040b737d4b17b292a5cb5005775e02eecade23cec771efb0869aca51a5c6608740cd5abab6eda81d6d02070b78dc9f44c2e7fda763e3f4bd130a5e0132a1ca3f8a18b22b6eb4056812400b232e1e3d2f6cb16d4b67be605df6f18cf861be82075acf335ccd45201c1775e7c2734f7988dd19436d31eeb631acb4739bf5fc7d00530bdb401750b598a2a5f07d631b"}, {0xf0, 0x0, 0x5, "a1e37564602fba23d5c71d8ec4e164c4341a66681f33d7f30a6d1e396adafccd22a67c01fadc08efb4b2d630839adb329ab0047b194b381867cf0bd73f060ebbfd115a782180d7fc31583b181124771dfaffd56b398aa02968f88249d9b45f729322a91e4677453307f64af1216744fa3e2f465776a97297e07b72251bd23c56e59e7c5e4cd5fbbcd42a8326fd8cff0418bce33555f02ab8c07cf196e0cab8f1045be9b78cf9849d1a1911d34b2ae4e78edbafbbed628095701cecc91c81ea0404183b42ddf165459abf0cb131fce9d853447106894543273326"}, {0x58, 0x197, 0x1, "82a09dd0835c9860a109a9d8ea75a7cd322ab0eac6b1da279582a1ac63be653b50d3ab89247256a5022cc90521dc3b43ecbb52f319ed2366edef1b5b7a441fd5512174b6a4"}, {0x48, 0x11f, 0x80, "9640ab8e7bd5c5e5d44b168c81184bb9c8ab09f4c449c13f4b5d4f9534976e5548a922799b772819f682655cd992e443171afba5fd9071"}, {0x48, 0x10b, 0x2, "8de6a75c4fb7fc36f9ac344a6a38cddf6de30279182eac94b710ea9acfc261faa1015c1d3c8427b8f7cf74a08dc03b145e"}], 0x2e8, 0x40800}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000dc0)="05a8c9d9170a995ef410f09a7c8f6a1433337ca9cf6841b93cf4540f78e2db79a2eb9a5fed0fc2ac50a6cb670081a597d155503346433b72bf308a45889b78e73f8d1db41408da1d17720cbc4262153466df90a8c2adcf92dda36bbc8419d58b30b603f81e56fd829bbd4b468b854fe63243830465031dee93985d2f3ab724d6be69d45cea6978fdc76b", 0x8a}, {&(0x7f0000000e80)="8d78ae9060271e7ab562376724682a431224e306", 0x14}, {&(0x7f0000000ec0)="be269f7a18736bfbb4fd19290de7adb6dd9039295a596747b01eaef116c9c7a30d732b868532f44ab15f4fb00dbf815860cbd1486e111403564178d3ed28e114d3914f2c6cb44142d5e7d38672bffc5cf2a8beb15820386d22d799ef73d061c86b55cbb8231092c0bd815eb3cfffe7f91f6f8143d08cf16c0ca1ab3c518a181a252eb416b5f8c87e929fdf6879a70357422364b3d70866475997616f4fc35aac1dfed035f65d4aa3", 0xa8}, {&(0x7f0000000f80)="a3cc271bf964cff63d9dace229a90b7f961e6ae4a8e4048bc1f7223e2ac9364ad175090a476925df43c6c2f072316b69fc1af987bf345ee6ad341639fa00be14bc365f737e35d5de1fcaf995cb42da3f53d625e2c8cbde74c873b7f813b367857a88091160addf03dabe042fbdeeceea3c8ffad6c91158d558feab7adbfe54ee6195c7ffbd80153f19a18a3ba782489ffb3e8995463d3417e8d4f02a60bd1eed82c8b272a3531fee9fc1a04bb0971e90f5ff0d362475e92b230e32b31db13af195947160d3f915d20ef8bcecc18dd3b2eb99775c37b11ca57aef04d75ba4da80182054033149", 0xe6}, {&(0x7f0000001080)="26a0929740f49a8169d5c540dc6adb5c834ba9f40794acc03df68591315edcaec0c0d0dae0a2e7eb4b96003303fe2deb4e8e475eb91320b3ca9b14b31125bec7b54c31b70da4b0edbd0f68f7572cd130e9912af1f4d6033b526b2cce0370d0a6ddbe5bc19578a6544a5314", 0x6b}, {&(0x7f0000001100)="f2f591d7b6d72e570fa63366cda5769a", 0x10}, {&(0x7f0000001140)="df747d2d89f2b6318b0230b6ab629e97094aba433eb41c8012ff3ccd2f4669f05bdbb593222badcb6924e926f8120684bce25035fbf62f5b66a710fc9f6c7e0d3c1a6d73e101f4665f5a30c9f29a07132c9c00adb1479edcacc414b5af13857c7579633c5f2c085e5c156d", 0x6b}, {&(0x7f00000011c0)="5840ec069d21dd84c0ab1acfbc028264148c04082d9c1cad6e410168d7c299fe301f68e2687f147a0c416532b8e99a1c337dbbb8cccca18320909fbff0e6fc1600bf53818d5c3f56b7eb328f1fa28541fe783ffa54006450713de3b639e2c53b74bf7ecac356ed0d2995c166ab1bbcdfa83950d98389564653ffac184accd4a5c7032862b21e7c1b727b664d79577d4d8fa274005fe3adee2d10170f", 0x9c}, {&(0x7f0000001280)='\\', 0x1}, {&(0x7f00000012c0)="093db3785b68c03bd36c5596ef2861887c7c26ac3bcf1508d2349ab3dc7b7f2956db74a8df610d3ee759be0418dd001988252a744fcc553e2e72ee7067e0360550ced5f85c8afd77bf0810cccc580b42ea8bce97eed798b376d66c8a071130f75177b82bc0c1d05d199583853e3de27b9389e5c0d8c34940610cf1196a3805b664c64c8a9e7620b3a5bbf6b139bfd16b197a8610097a1a778aa8a114bd2a6530d86907bd361792f172", 0xa9}], 0xa, 0x0, 0x0, 0x8004}}, {{&(0x7f0000001440)=@xdp={0x2c, 0x2, r2, 0x30}, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)="a631621452160ab8f06e76", 0xb}, {&(0x7f0000001500)="4215", 0x2}, {&(0x7f0000001540)="f4e245e01736168449843d49a8a9826588d3024254056767087b99517785689b1de9d3ba730461b8c824cb20d768c812b4a46017e26466187828332a9827c6d9ba8b7a705329e88d3a42d7d6a46b59ba3adbebec541afc2ab521c66e6ab0faa9b5b6f1", 0x63}, {&(0x7f00000015c0)="1a823323e3a50d5ec1d3bfab827e58c8ae8e15ffa776b4726b646256fd2dca83b46fea98ef4305b3f3f86d0cade59ae3d88b2af447408e968c", 0x39}], 0x4, &(0x7f0000001640)=[{0x60, 0x10d, 0x4, "5dac5d9877751f24d7a84e7e05d57be36eae90b84cec6d6bc72bceaee627de8b3f57b4993aa0df9414c933c69474a85fb9dea2124bfbc34936ebe6cfd60afd036cc2a05c8c350b7c37bbdcefbe722d18"}, {0x1010, 0x0, 0x401, "fcb0dc3112ebdc322a961eacaf11819a56a62409742446bfaa42b909615f81aabc529a979b3cd6b983e0db183dd31ec3759f9c7e5eaee612dc87917e68b704ef8dfbd9ded44ee678d0ff29930f03c69a7ce73a538da3ab49325de29c8d0968708c7790029b1eebb7409c1eb615d5646b672b9a42d48da669c7357dc9e936f6b3306fcae86cfd0ca39bcdeddfd223da0552ca77bdcc8af7e12e7322c4e8218d7a45e5ca124e0544a6748cdd83eaf63dd4a8457158623fce143dce7dc6eef9d004d87c7d9583f43b7ae9c48ed6f9395f1aa5479a9db4f8ca5fc6ca32f1574c3f89f496f28e3de23f1de0f4c78f4c2ff7c3a918166c0af4852dd961439ad1c9c15a52107117e90e89d3c9a8bce57140a629ac162767d9b4ff9a5c8fc7f716b6ceb8b2e99896c27bde52cd66edce18c36eac9aea9904d7d785d6eb873076b66b549b343be0b07e69541775f1d9a78920a773668c56db21ea45ffdbc4e26e74263add1ec66b789d364d2dafba30e5dee20fd0d795f3295312a454535e85f17089d9c52430506663abf56e7c7bdadde0cb9b5ccba897fd130424d37c5658674f254dc2938d0d4e9371f6519c684f0db13d3c89a4fb069180b8b63f502943ce3967305857dc6854fd709d90e7fd7a004446c17f93ed7c250b3766a6df4b1a8b03c3bc13898fe08ae0b9abbe5733d7dfd6f23018151f8b39cecc79cbe0dbba9358d10be7f7d30867cab6521da54e8167717a17405f288b5586979f421fb61528ac9d0e540fd3f5b3a6316998d5fd6f5b0cdfe9954c2791f750a11df09dc92a360503a93d82a5e89c709a77e1622092adad72474459a768f88818732b6940e8943da853a42343be69c6fe1c6f96fa70917ff6c1908442cfe09de3f5f77069c49144608dcb22722c8e662acc28352e76c3c48e4c4e64c0aeaf144abed2f60dfa4394e4bb2858a5876c4cfa7df4d3a6e9676b16c0caa9cee09af23ebb28ae7e04dd171aadc80134fea1b06c70f7db6edf58a39dd39784f11e3de1a3d965c664c663373bfaf2ee5dd6e82217da0273cd2aecafddc90fde014cad14d89bda3179f8bf01646c76fde032d93e1372ed58bd5ea48a96a6b42c682c6ba798ca8fec23157061417fefbcddbd0e49c1128806ae8c0f620cb7b49caa71a9ac71902f6307eec6a84c69de2c3fb5cfd98fbefee565587765fcc753559911f291f6c85043a5ba64766fcc9a54cbbe520712eb3dd3262559d5e3d200ba4baa981dc69979ff5ef187484eae747a1cd9925c7b36c35e5d38dc55b20c28b6bb760466eb00b7af65a52d2e192a818944712d19696233c3d0b483643c5722b5ae81a95691fa59b8b5155e8ea5f4de9015467dd03f6c6be3de64e3bf26ea855ef45e51b454c1c356615f50e27c63f7c7d55882e9d71256e0a042a62fd298c69b865beaec47eb5758cc347a12fda05d9ceb4fe01e0a2938438187a9fc3ded11710472b292f552c2169b8c970bbaeffd9095bd29db4529b28d662359b723c112dd3803c946b067f2d4203a90d31f2041447c345263572fe7633ae7c5b8d9647efeb778839b525a9fd99ff8b14970e3bf275e01dba9e3146e9fc50d2cde8db02cc2e02145eaa6540bf3e94ed2f7e338e1d4b0ff51c9865f6e766ebafe6631e4fa9b0b132933796cd38c88933de0feef8fce9e58e79fddcd63d84212539f765d8428f23dfa468c94cb74ab64f22cb7e07a65741748a772019153294794545036782160f6e361c537dcd4a870a8444df10cf78a83c47c817df6f2cc2424de2ecbc7b876846ccca8a90963dae3d78bebfbf06b22f2a8e46a3bbefd4234a091d2c7492b7d86421ed933d7b7475e9ec3aa06ef466fa6221f02ec2e31f6f43035de5274eeafd39fcdb5aaef1753ca5a95b115af6fb32025e121b3dbbffe0de96e9c2efe429029492aff3261615bf9e829254f615f3091b7960e3fb35d37438247ef25102753c9a87473730191b4366f6e5d7d6c0a80ef6b06fd2e5ab97ff8b0deaf98d48c4559abc359b5c2766534634acf10103a50daedb9f2775239e5fff939a8524428df91eadd672e100893a789c26c10b24fe645440c32c968f19a0539d5feb79bc6100c350e40eb00ef45b08fe302c4b195fbf2525f9788953a0c85c65a5176a8c76e8feab07c382c5c97fa533e09b0550c29a49dd62fdc6cd9185e4814e20db19feccb483adfc4f47312a0c24685b1585f71fb56828b4517b61b2b1dc4ad3064e3a5c15a77e0c5428f9146d6ac98d61a494632bd76e00c8a905afaf92d2d77b035cb9d0d6dcc780ba7f47920e70ef9cbea92714854533775e2e804f6251736c165d1e323ace9d0564ee9cf4f3d37ecb5a6e57da5ed9e260168b40eed922f705aa40d49351c6eef027bf310cbd0fef1dc51c097bd03f24119fc5d2aec3cae4e0ec8b2d4763f149151f13296496a1d6779a329bb3acef2d5ced616bf86167398d392712c2fea613dbd51406cfd1d0de08c4bc562d5bb6eaf626ea94317c1c7fd5fbca82526cccc6b151dcd4966c44ae0444620552fc87ddf106f6eea99ca9b8dd8474924eb2a6afa50173e0a8bfff45d7325b73573bb3b70171ebba7f4127dfed3b855555c1cb96719c027c36f6bb5b927ef67693ddbf4d7b80fb4b5250578608e91cdb3ff651fe96f65743285e4291ee3d327738278a98a764edc950af3ae58254870d58f22882aeebd4086c7a12b077d300bf402269917024c421a052e90abdb6479844b5a978d3e54320fa49ea8dee00ec5322b56cf49af0189dd7f68fefd336c7a09c1bd3554a274f64654118c10ad3f5a696a847fc7ef8835b5de388f2e8fcc6cd130ae41f367820c852ee494dfa25481dc322c19bcf73d4af14bacb5e26cd1a570252e713026c7a20c8ee6d2d837b09796de18441ea4fa1dc7830e168f0824d80a3297f68ee8a316f8ad05da4eddbf8c8d311df4d3ecea1d78e08ab790248431ed44b4a73b5f5dcf4b8bf7d72e93ceaba8b5f4a54ea12645ed1ec0e15d81957e511ab9142133500907f42eb5cd6cb8356b892e418cc388c4bc4668f2dabed09f70ad613c9dfe89ee9edb90a506b79643c7571b679fe109e85e4a75d18fea22f1666be3ecdca7939319c79d04aaf4229636fb2b66221d984f2c3dd1165913abacd3a0f7cfdbf1a37aa9c48d62c9e7c6ddc25e15f4ab378b78ed6b6c484d767f227e165455d615d95885f2162544d4754911beced4425b1b91fa175e54ee84af9eb7f9a11c1b37ea4d16c14a9d91332d68637418708a2d83f18f493d34e0a1e9840dd6f2aa950fd7916631a0768f3232df12d8256dc464fe639c0e209eaee14eebbc78925bb1242c571a96ed6b43dbe9e606a9b26309aa09a1e60c52f437ea3cf3d1748160ba6c6f6fabb168a126a4a2ebad1997992490a23ba3d18fbc8d15b5dd2195f42891a302934fbc3bc665ff7605122be9d154bcba31e3b1598e79be0deca0e31182806008cd58ca002ff87e528c2f4260bba4eb5b49b81e3ffe933bc2d5969c1a15d68791cad51166f0f92c3b1f2e4b49824629cd39859d73e68712579b6de4e63fe3687711408e9773c57e827425a4af6b572358f35db382c100a94ef9956c565b12978e2a3599c03c34fc49e2c90ec8ebcb1dc0c8cc7ebf47d1fead372a20a96c12ff24ca46a0d64de220fb53ef9156b9991d458c709fc0ce055c9e040fc01a18d44771849180a2004002632b1de8914e52ee6f1ea2c74bd0d715815a0b351be389d04c162fcdde2b2ce882d2d2e9b89f05b58936f3bac8f7aa4a7cac1d44102581c8a69ae8a8acde994ca1430e3e89c7157cc17a73da74cbeae9306349c6d32531b18b05bcdb8987214769b5a195885f24a7a5f5eb19ac5eb18efda4a6e95682eef5f5633de7d30c6a4c712e5fc4dda6d95f4c4d113e0340aec9ccabcd8f87e680d0186c141542799e1e561ff2884c8621ed50d65cb65f265ee770e9e009908c12ebb671bafbb82db6224085f4c0d37879abe7ba6707af1950e0a81d82c0dda4dc6f986a8d5ae1892f97dc70953f1454a39d771135b2e824c46243796a44e62cce7275ca7f86c405a37aa6b0c3de955d74efd96b9cf0d59184f0a11a24bf05ac863d3b85dfec64dd03057ee4ce24a6a6100dc2db5f6c01bfcc166c8fa8c4934dafdc46f0679430582adc298f8543b1d58a802b43a909465bbfe8375ebba09a3bec42d3db116145b8a7d4d0370dfb2adccf3b5272110fcfc0725d3b3b2923f543cc941751a754bad2035379abbd3d827b1291309835cda36121202992c454ed6f4adbf29c0a4c05683f25cedfd7b661dba33a01fc1e6da3bb38ab0af602030bcce629baa9a05de558a5b0749f2b40c435776d356f8ff9f94c6879f8d6210fd6aa000b76bdcbcef7a9468c00d768cb4324ceaaa81d070040689b87324a557c7ff8bd1bafb8a0cc26aea246d6681e19af3e4f2766d37e0247c4aef1743b1d193aa8f5021a0f045c2c0a8eced26a28edaad0ca460608049f3436dcb13da8047891b8a534d8087c36bae4e0c86a5c20fe7d2d6bf568b78f286336b4c8e0394fa05b851cfb05bdc34c0a875e221455464cefec295c6076a25c311dcd282edc6d28deb4ad1b51823ff03afca8f42f0e24e2c2faf856cb0a0b704c641c800097f0ce630443b92b1941e1ac3dadc36337d14e1b02eb0b5665767e18f052708918a6aadc938c2e40bed7a8f5c503a261ac8b8b6330748c1fa6c24cbc96e7a3551a8882c3b32a6cd1735763066398daa7589afeb6af0a4c5987fbce0ea6721237cd67efb2c3f4e617bd33497ade87f2a625d3a102a0e50ef20c6efff384961230b672aea6c229069820ce372ffee7ef7669fbf192b353ddbd8216b4757dea37eb552b0692874062b09362e62863cdb822d2e819cd35561d460dbb655a7e462342d4a0072a4ca0e1c0e83d532d06b15a79a318e5fdd075f667a1ad98dd8e77ff3d39144cf9752a65e23f63073a35224b0dfd0013ceefc26ff7b1ee41b007121583d8d2b82f72d63f46339e3cc87641460f85daa2a3ed856ffdd522883d6b26e5211ed86b890844bfe767c7bb36bfc422a89614d086abcedfa151cda76867223fdd8bcf80cf30c58bddc7fa7d1fbfe9614f12580bfdd5445a050641fbc42883c16c6bac886d008afce863d300374ecc41f10f84c8cb55fef6e2362ad705b28a91e8a829df6ee9ca9fb7936a545899350ab25bf737e31d305f76281ac7839877e0c69778d29c92bec99a88500e5dbb0aeb0e54216e2a6031e87fb793a34ec4ea0003774e68128a5106d5e6dae113fcc51c8c60ee50467a7306b43eea8518dcf8259697bd528df3d290056cfddaa36c5d4a696627be1dc3bb306de6df973e16e65ff4127591cc73239a7873e7a82590d07c72a4d64fe59b683ff6d65b02727d3e21805e253628c0e88a2dc0212d0f9b8e3b3a686ac758b264a5368ac4f8d803e8f3fe16bef38533c72061e04208a3115b524d026d927bc8869095e93746e23b3fe9f93fe1bb0f418f707346e8ed3972ece6f93eb9c88a590ce0625fe1ebf18abe555a97b9605c58843fb5b9de209c0855ec3e74348d0fe275e9457adf26ea403d8a243bdebaea0d8a01d2cd8c212b1b721e3861962f81a6df175096575eb5d0cd41b87543d4321f4649a6b3010d82d6b69026d6185108f798431244e6ce66a90ff5d3fe0f941270810c2682751983ffcb6e8f92884f05e1d08f121c2072588da349a0956cb9455d256cc3d0cd08fb0ccf0832dd2b43c623906aa834d842266cb3125113ac019b857c28273429890823d8b8"}, {0x40, 0x115, 0x8, "db59ffbb879acc744fb4633d821846e49991fe2dfb4ff6f0ff298ce248a3bed25021f210b627df2a1fba9d"}, {0xc8, 0x13f, 0x40, "8c4596ce25595f570e04d1a942d0cf19f448291a17abb5ac67eb6e68400c2b37259182614687bf4833780df503bdd56d53b040f7fee6d4a18c9d7c46db902f68900713c85049afdcde89e4e904300ca2c87b24978fac8111bf513d3e0e2a3116297fd08a06c00d679f394fb5863ad29750d67c983e689bb3c251ca35f3b243cff735414af8b1fadf9106086425e1c4ab6a18632a7d2e6278b19dc20397197746a52457741bcce50cd28081453dce182965"}, {0x1010, 0x6, 0x91ed, "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"}, {0xd8, 0x88, 0x549, "a3af60f48c0bd28d05cdd97057e452ecdf60a756a989c0438bc3344a1e48d8d87cfdd7d68fbd0d84befa64f762e1b7b35c61659d3695350038e07e6593747a2da0b0d6c1f14bcd9f78cc91bc740ece6075a90d7110ad9dd64245edf3623aa0fd6ea6e11fbf1bb309ebc5959e98c6e4e0d441c263f34e4da675f8165697e45eb4082eb129e91284636ea9218d9b0ee546b455571365c0a93a2abb831c3e3b89a5b56c2b9e2598a55bd2ff8f065d9419f29f72addd3b968d64e09633d5c2682b3a83c86a"}, {0x98, 0x10d, 0x81, "496c8d4dff0583dc1825f13c0efd7b3defbe0595d76032c31d5a0819ebdcd8622eda297333334aa1d8f3d4fa9c8b5183ce49cffa94e46b28cfeb4a7c0fe53ebdb8fbcea6626d3c5673a365c1d2c22d7752d6685e0ee5994aeb5f58b79881c0c2eaafb9b115fa1c84918fb521de513477c1ff47ff3aa418c466d2c860ca56ca80738d6ffcbcbf16"}], 0x22f8, 0xf82f2efe6d852a9a}, 0x8}], 0x4, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{0x2, 0x4e21, @broadcast}, {0x1}, 0x0, {0x2, 0x4e21, @dev}, 'bridge_slave_0\x00'}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000640)) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@empty, @dev}, &(0x7f00000002c0)=0x8) 07:11:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x2}, {r0, 0x1000}, {r0, 0x1}], 0x4, 0x76f5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 07:11:33 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:33 executing program 5: r0 = memfd_create(&(0x7f0000000040)="1f00000000000000", 0x3) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000000000000035570007efa973c914f53b380002000000000000000300000000000000000000000000000000000000000000000000000000008000f800000000000000"], 0x68) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) write$P9_RREAD(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="92000000750200870000007939d94fbeda73c435e3d44b05a96f94f0bb7c5f0cc76ec14a0cc5f7cad142403c7bacd94a81180867ab180fe09cbb8201db3497bbe9de17b9e39261c1db3a4b4d52aded956efbe302ace0feb2db29efd424bdcc289b5179afadfb73af6d79b5dfc1fa6b61bfa248a47abc302df3af3e"], 0x7b) write$P9_RLERRORu(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="972058fd373712347f34b315000000c5ad0731006b"], 0x15) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f00000002c0), 0x1000) 07:11:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x2}, {r0, 0x1000}, {r0, 0x1}], 0x4, 0x76f5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) 07:11:33 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:33 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:33 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0x2}, {r0, 0x1000}, {r0, 0x1}], 0x4, 0x76f5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:33 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:33 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)='@', &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 138.187494] binder: 5062:5066 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:11:33 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/25}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 138.264078] binder: 5062:5086 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 138.299262] binder: 5062:5086 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:34 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:34 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:34 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 139.064342] binder: 5114:5122 Acquire 1 refcount change on invalid ref 0 ret -22 [ 139.076632] binder: 5115:5123 Acquire 1 refcount change on invalid ref 0 ret -22 07:11:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 139.110804] binder: 5114:5122 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 139.125600] binder: 5115:5123 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:11:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:34 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 139.191184] binder: 5115:5127 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 139.202069] binder: 5114:5134 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 139.209162] binder: 5115:5127 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 139.229812] binder: 5114:5134 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:34 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:34 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:34 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:34 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:35 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 140.009845] binder: 5185:5187 Acquire 1 refcount change on invalid ref 0 ret -22 [ 140.036853] binder: 5185:5187 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 140.107023] binder: 5185:5199 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 140.140601] binder: 5185:5199 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:35 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000480)="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") 07:11:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x0, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x0, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:35 executing program 3: r0 = creat(&(0x7f0000004880)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, "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", 0x1000}, 0x1006) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000280)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) fcntl$setstatus(r2, 0x4, 0x4400) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) sendmsg$unix(r0, &(0x7f0000004840)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000003780)="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", 0xbb5}], 0x1, &(0x7f0000004800)=[@rights={0x18, 0x1, 0x1, [r1, r0]}], 0x14f, 0x1}, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:11:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x0, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 140.398827] binder: 5221:5223 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 140.468793] binder: 5221:5230 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 140.479643] binder: 5221:5230 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:36 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x0, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:36 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:36 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:36 executing program 3: r0 = creat(&(0x7f0000004880)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, "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", 0x1000}, 0x1006) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000280)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) fcntl$setstatus(r2, 0x4, 0x4400) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) sendmsg$unix(r0, &(0x7f0000004840)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000003780)="3332d0e3b811796417c4ab3bfb5c1f05b62422d061e7da9d6813daa75f1fcf542399aa85e159cebf9b1d8d6f11c89811d5fb577f7f505f6762cafe2555326f3fd2181dab15228ccf30cd032cda3df0cbec97db03c9596530ebd3570c800138c8d51b7f7ef0a74aeb621ccefd03da9d1b623b1b118f8a47631a0e35dc7e6c59bd0e2acdf5b18099251373df200cca19ea535030a66b40fbb283a67af74d0b5387104add243b6f450c1a98123161baf5ed7125b6e8eb86dfb86534513917091a8f9bc8fc7e9a4ec8c0f9aefe289eea0a0a8e1561cb49c86744af27aadb7f5852fe80931068c23e7dc76692bf24ae789346c3c7a156f7fbe6e798e6dd50750f5683d6a87709e1d8f74e01e319f44ace1451e3c87c04f29ffe3e72f4b98f3eb5387deadf236d0f5fec4852157d7ab147427181e7667dc9ea6659b8c018d41919bf990bc0581c1aa9ea0886cebc01e7b73375850e88cafb6bbf03d77d200c1e52d217f0304bc390fcdc95d4d0c8387b4a6e3015c05f962777c0f51e19c17b0bd980ad0dd8272ea2fa325143da4587029b4193d88e961c93236a8d3f501a0d8daf67592d5bd779650ddc33b46b64bf74d35eb96e0f2dfbc380e45247dcaeaaaa79a2c8e9506d17713aff4802bf21c7d681ad33f2c5d56d2083d66a6a3e49394c74278f54538b12e09fda61196040f0a08f6a864bad31aad80b591089a10784055b365d2678967a72ef806d8843efb4b8030b28e753b0bcbf8b4d11d8374c0827e7bc54702e753791e4bb463ba20c62c5b39ffc249e82cc3e39ee56e549375e2814732e99db3d746472b41ab876f14172b272c6f6854a61570235499d36b27ba9d20766a756f241db75cfd6c782b91b683e57883b1300acaa6b9a45a9af7728574a9f92c9c04541f0f5375c12ac89d343a3eb55a96458a77f0262951b41ff9bba71db13abf53aab3e1ff39b5a427cf54b7d7b54f0085ea0d3cb3ec7070b78e5c0ad9b34d5ed8e1ea30e6c476e15d9b284489404040562fca1b89e1a57389ca033303fbb5ec0ba87eebaa8eadd495e5603655e7adf84faf752dc515e0794588dfcf3177bd029d16c191e1774a99bd3683ffb49a883dd61810052a7e5a2d97c07bdd393a6f1e3d24b0a874c47c0d65febf231f14a69d2fabefff8296a6de57e8cbb17b2208f3506450abb0055e8a46de6d6bb5a37f53b3234704a594d0095c76750c935486e6d8e2b394e50372db72afc49be24eb2f235ae4e0d9b341cb8111f7d1a1bc42675f800f0c96b4ec5a2629297099bc20792f3d0f2b574fef1d2b80a2ec033cf61601807251690ae963d842e653ede6602134bf3616fe22ca197a4e9b471d956b853cccef9db0611398d043f32f2fddb1f43484b59663038b613090e48c05f5a1dd2c3404f7d40ae1f49dbf9e3c75c3174af4dd4daa5947e83af757eb056bbf8cd6b7fe60042f1006c96c53cc605aad858bfe2595ecfe705e5157457ee1e1c332f8f0f4d2bcff9aaaa5c3a153886a06866cc651f2cee1f2b6850a10ac5f19c1459ef4e4db5ed95a43caadd61e1b259efecdc0dfdf5064cc8af7ef2973410c1981b08bb6a523f0b8e190ef4a806b5bf21c9b1f2a4eb78760296e7abf52e30512941aa55aebc89b1fefe4d7e3d7ab709de0e0ea2bbf49fbec9a369284513de3c856fcb6a4a281e07107660f6cf3545ec9337c6062d87486b3a81f1653ebb95b548eb613759aabe6d4ea4cd296b7d99ea6d17f85e9765b38f50ac210f89a3ecfc1a771397674aacdbf1637ea03d488775b9f0635d3b30759692523f3397a1017886f0d84a01c6d9ef5a12ab7eca26980c0b0953458d12b42f717114251137afc8e8272191cc8a35846de742b0acac676e5c7385aec968b5a1af2e24264d583c8266547264d3fac77cbcf00e4601312be94a0ca98eb37b7b03861d7223bd21233a16f279e2cf9fd68d87525ca58686e8ab49c5e110db6f8cbd55abb0df60853ff02e3006d6b34d503ce2000ce65b283d4507c6714635ae3f2068dd462649eee5e902c15e72f357a4a50d53fa3785b0d981bbe922feb14eddb2d719d2d76bdbd8aa638a00a8b9b26c5bee06049139caadd4684b210f856745e28a06b5eca675895e10d300095f50d0f245031ec396834fbf03ad6af49a1cbf9bddc41b78cefd7c56d71a087a7251d1142cdfd66da8c67f778aaa3ccbab71a8f680e1c795333c0ffec45ec6124f6818c568fe75535814358ad82b7f7ceb32ca7e3a80e041096cfbc18c2f36c5fe46a953c0e8fa2e1a14a46df705a2474f898f45f05c758d0657fd14b6a58c8f8f066c8b602ce2aef9b2cc0b82c6d4c3419f76dc629cd6b483a4a31bdad8d53e4c9b593757b1e5c607f725a856eaa51603a16c7ba542a107ac5cc441aef714bf0c2333d35d13bab817fc48c5d5eecf4c67f9947d447c46917ba682619cb4a48d50f05a5bcbe60e7ade218afa64258ca59432286ee2c5b1f9bf6a2bc7160290cfbc1f2944d0c784f3576d7f576c1f75cbfdef1f9a95ae2b63d764cfd51ecf17b51cb823c0124ecaeabe14da1f8e9d2025f1cabd0ba62e3515293e8bb862ebe1967659def7ab5e1b2302cd266d06bcad6d8802e7697189fe0ef735004ff1fbc2d6b7980ebbd1b9212d8980d2b5b1ff8c720663dd4bb5f02c81cf1b8d2b5ecf5fa40e1968e968abdb3fb3ae63f81e19fb09a23335ddfc8441f3e6a97bb422b458a15d7723e4c3b54d7350fb030f9f5087ae97023d08558bd8231e44799bfcc95f7910db2e197bb388b248c8460e5e4875d83a8726c9f0cf4767d93b365fb84fc19edc4e872bcf9111dd285451cc377dd57fecddbdbff78cb56ef00e21a93a7b0c3ff2f46f1a7eefbc0d11fcbf338d9758d67dfb3f821226fdced23d568218ba927923a2841cee9fe5b114b0e68bbe41cdd903fa6afad9e51626b686bf4d998f45d9e86e16ab11aabf6eefc702e3f383fb670dbc4c58fe613ac1a89c2b373006c60cbe58f52c6c804d949246e403fd6ce06cf37723ec8ffd31f01b05d7b9cfca7a0ec3d7880a1b8c5dc5584e9307d59b9afb15a71ff9cb20310e7bb39d3856e42c4a61bb089edc71d79a181c2453efa22143d417e56e65b3f656d05cbc9f3ed62675e54055fde14fa9e237c2a270919f009f0290112e75e1309f0a35ecfcb3dac7f4de970296e6e37e412aa536b9269d13133e532af9c89645a571cb703ca50cbc121b46050561dd42cd6625b67893df810fd15f70145d2fe76859e64e5e2a925664f9b1de9ca5ccef05bb2b032c60e806fa72c81fd899352151679712833062cf1ed95e4626d0e86ff458418123732634ea0c10dcf960c3a47ed90b8e28f69453b78626f12d207354922f27e39756b5d2b3ebddf39ada97e42509521c02d305220d151737462b4ad7e004f5156656eff07bc980e33e28509176f3d3f6f5f3b7320154e4aecb47e65343cba21093f4f441b44d49248a28da80dedf186c264fb278e8dbe2d3c71796d18fd7b3027e8ebb482ce9c28c0bfe0dd178fdc4ee013fe1431eb87b7979ca4120e43d7e3dfb06bed46a3814750f1b28d754eaa669697d7f3e608a5237eeaf1609a69084cb1f9d2cab5314584e5a913a006111dfb1a341e35891eb0f68ebc7e5d230309fe49ca6a06a80ec107bdf5bed34b830f17acb7c3286d338f9e3df69bb0249b5c96349f115e2bbec870e4db39657600279fabb9e7f5627de7b2b4be92cd0b67b984f1bb05f6ac1b2b5b913541e3236df85ba0c41f93ef6567fead22ab05908d5efedda4490ee25f77012112b41719e76c432bef5acc9d8d9e02c04d8e7cf713df6c7fa79ef2e3fcda14d9d2c82a80beff6e950aabb01000d4275910a666f1315c32c5993201f7c500fcf53b45986fc85bf7cc23908ba0c0471cca7984bc329b780ccc3acdaec58b5d86544aa0b4f9ca7caa684ef32f9462540b35170e2c2ef711efa490baeb312787fc0ada2956ce9f35d23f9e5b3a280937a563f9a3b1c3823c440534242825b31fc2deecd0874ec661d9ca8677e954927eeb752b2da2e5f6d77ba91688f45b53653e3bc75bf50840525f60846bd37fe01e18c601af663bd85b8f28e8b2f8f37874e8f887bc0853aacb9f679be06b4547381425ee03313fd51d2a21af458f3a1be764884175c11c0aff8732e3d13afb7844da6f2f99b35d9dff7e7b5d52a86d5f9a6e99cd87d66988ccc2fce8ecda6a456cece6e008114d723c39e40167d6eecde00d", 0xbb5}], 0x1, &(0x7f0000004800)=[@rights={0x18, 0x1, 0x1, [r1, r0]}], 0x14f, 0x1}, 0x0) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 07:11:36 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x0, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:36 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x0, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x0, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:36 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x0, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:36 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:36 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 141.220621] binder: 5276:5281 ioctl c0306201 0 returned -14 [ 141.242134] binder: 5276:5281 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 141.309050] binder: 5276:5286 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 141.324414] binder: 5276:5286 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'ip6tnl0\x00', 0x200}) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x709000) 07:11:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x0, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:36 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:36 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 141.477528] binder: 5299:5302 Acquire 1 refcount change on invalid ref 0 ret -22 [ 141.503724] binder: 5299:5302 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 141.558288] binder: 5299:5312 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 141.566468] binder: 5299:5312 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x20000006, &(0x7f0000000080)=0x8000000939, 0xfffffffffffffd52) setsockopt$inet_int(r1, 0x0, 0x40000000000014, &(0x7f0000000240)=0x2, 0xa533ae33) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 07:11:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:37 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:37 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:37 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 142.049606] binder: 5322:5324 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 142.058182] raw_sendmsg: syz-executor3 forgot to set AF_INET. Fix it! 07:11:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 142.110233] binder: 5322:5337 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 142.140408] binder: 5322:5337 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 142.273195] binder: 5347:5348 Acquire 1 refcount change on invalid ref 0 ret -22 [ 142.290952] binder: 5347:5348 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 142.344316] binder: 5347:5352 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 142.351547] binder: 5347:5352 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:38 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:38 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 142.880655] binder: 5361:5363 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 142.961236] binder: 5361:5381 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 142.991456] binder: 5361:5381 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 143.088330] binder: 5387:5389 Acquire 1 refcount change on invalid ref 0 ret -22 [ 143.096624] binder: 5387:5389 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 143.153295] binder: 5387:5392 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 143.160531] binder: 5387:5392 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:39 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 143.765279] binder: 5402:5413 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 143.801940] binder: 5402:5413 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 143.911697] binder: BINDER_SET_CONTEXT_MGR already set [ 143.918203] binder: 5427:5428 ioctl 40046207 0 returned -16 [ 143.971684] binder: 5427:5428 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:39 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:39 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:39 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 144.594778] binder: 5440:5456 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 144.628055] binder: 5440:5456 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:40 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 145.348080] binder: BINDER_SET_CONTEXT_MGR already set [ 145.356785] binder: 5473:5482 ioctl 40046207 0 returned -16 [ 145.380494] binder: 5478:5481 ioctl c0306201 0 returned -14 07:11:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 07:11:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 145.447405] binder: 5478:5496 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 145.479865] binder: 5501:5502 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 145.491717] binder: 5478:5496 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 145.545358] binder: 5501:5508 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 145.553022] binder: 5501:5508 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:41 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x0, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, &(0x7f0000000200)}, 0x20) 07:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) listen(r1, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x0, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:11:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x0, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 146.240765] binder: 5519:5532 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 146.270430] binder: 5519:5532 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:41 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x0, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 146.303125] binder: 5542:5544 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 146.383460] binder: 5542:5554 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 146.390734] binder: 5542:5554 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:42 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x0, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, 0x2, 0x3, 0x2, 0x2, 0x6, 0x4, 0x1}, &(0x7f00000000c0)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:42 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x0, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 147.062663] binder: 5566:5576 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 147.084823] binder: 5566:5576 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 147.142636] binder: 5585:5586 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 147.223441] binder: 5585:5595 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 147.238811] binder: 5585:5595 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:42 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:43 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 147.956183] binder: 5626:5629 ioctl c0306201 0 returned -14 [ 147.962349] binder: BINDER_SET_CONTEXT_MGR already set [ 147.980275] binder: 5630:5633 ioctl 40046207 0 returned -16 [ 147.982145] binder: 5626:5629 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:11:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 148.032288] binder: 5626:5644 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 148.069258] binder: 5626:5644 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:43 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:44 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 148.807295] binder: 5678:5679 ioctl c0306201 0 returned -14 [ 148.829241] binder: 5678:5679 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 148.834361] netlink: 64 bytes leftover after parsing attributes in process `syz-executor3'. 07:11:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 148.870829] binder: 5670:5690 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 148.887839] binder: 5678:5696 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 148.907277] netlink: 64 bytes leftover after parsing attributes in process `syz-executor3'. [ 148.934886] binder: 5678:5679 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x2008200) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x10000) 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 149.571963] binder: undelivered death notification, 0000000000000000 07:11:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x2008200) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x10000) [ 149.616695] netlink: 64 bytes leftover after parsing attributes in process `syz-executor3'. [ 149.636115] binder: BINDER_SET_CONTEXT_MGR already set [ 149.642235] binder: 5712:5718 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 149.652461] binder: 5713:5719 ioctl 40046207 0 returned -16 07:11:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 149.681554] binder: 5713:5719 Acquire 1 refcount change on invalid ref 0 ret -22 [ 149.694960] binder: 5713:5719 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 149.712499] binder: 5713:5719 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 07:11:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 149.735371] binder: 5712:5732 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 149.761188] binder: 5713:5738 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:45 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x2008200) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x10000) 07:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 149.786980] binder: 5712:5744 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) 07:11:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 4: r0 = creat(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 07:11:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:45 executing program 4: r0 = creat(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000200)}, 0x20) [ 150.509019] binder: BINDER_SET_CONTEXT_MGR already set [ 150.515215] binder: 5767:5771 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 150.533483] binder: 5769:5772 ioctl 40046207 0 returned -16 07:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, &(0x7f0000000200)}, 0x20) 07:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:46 executing program 4: r0 = creat(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 150.608718] binder: 5767:5787 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 07:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 150.651355] binder: 5767:5787 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 150.669097] binder: 5791:5800 ioctl c0306201 0 returned -14 [ 150.738186] binder: 5791:5809 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:11:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:46 executing program 5: r0 = creat(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 151.339446] binder: 5819:5820 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:11:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:46 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 151.414076] binder: 5819:5829 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 151.421697] binder: 5819:5829 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 151.450722] binder: undelivered death notification, 0000000000000000 07:11:46 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 151.488616] binder: 5834:5836 ioctl c0306201 0 returned -14 07:11:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 151.557955] binder: 5834:5849 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 152.146665] binder: 5864:5868 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 152.210522] binder: 5864:5871 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 152.217773] binder: 5864:5871 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:47 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:47 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 152.280002] binder: undelivered death notification, 0000000000000000 [ 152.307193] binder: 5878:5882 ioctl c0306201 0 returned -14 07:11:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 152.355336] netlink: 64 bytes leftover after parsing attributes in process `syz-executor2'. [ 152.368914] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 152.374113] binder: 5878:5891 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 152.438672] netlink: 64 bytes leftover after parsing attributes in process `syz-executor2'. [ 152.494642] netlink: 64 bytes leftover after parsing attributes in process `syz-executor2'. 07:11:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:48 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 152.975249] binder: 5909:5910 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 153.038345] binder: 5909:5913 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 153.046262] binder: 5909:5913 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:48 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 153.109977] binder: undelivered death notification, 0000000000000000 07:11:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 153.184005] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 153.195210] binder: 5916:5927 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:48 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:49 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 153.802275] binder: 5952:5955 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 153.856316] binder: 5952:5958 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 153.863719] binder: 5952:5958 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:49 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 153.924969] binder: undelivered death notification, 0000000000000000 07:11:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 154.022474] binder: 5963:5972 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 154.032522] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 07:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 154.155930] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 07:11:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:50 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:50 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 154.674018] binder: 5995:6000 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 154.691193] binder: 5995:6000 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 154.767031] binder: undelivered death notification, 0000000000000000 [ 154.802254] binder: BINDER_SET_CONTEXT_MGR already set [ 154.811457] binder: 6003:6004 ioctl 40046207 0 returned -16 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 154.889480] binder: 6003:6010 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 154.998509] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:50 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 155.489357] binder: 6037:6043 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 155.496676] binder: 6037:6043 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 155.594042] binder: undelivered death notification, 0000000000000000 [ 155.620514] binder: BINDER_SET_CONTEXT_MGR already set [ 155.629470] binder: 6047:6050 ioctl 40046207 0 returned -16 [ 155.689610] binder: 6047:6056 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:51 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 155.816031] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 07:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:51 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:51 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 156.320420] binder: 6080:6087 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 156.327751] binder: 6080:6087 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:51 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, 0x0, 0x0) 07:11:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 156.417794] binder: undelivered death notification, 0000000000000000 [ 156.456796] binder: BINDER_SET_CONTEXT_MGR already set 07:11:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, 0x0, 0x0) [ 156.475078] binder: 6092:6095 ioctl 40046207 0 returned -16 [ 156.551880] binder: 6092:6101 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, 0x0, 0x0) 07:11:52 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100), 0x0) 07:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100), 0x0) 07:11:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100), 0x0) [ 157.131264] binder: 6125:6130 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 157.139880] binder: 6125:6130 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:52 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:52 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 07:11:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 07:11:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 157.250918] binder: undelivered death notification, 0000000000000000 07:11:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 07:11:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 157.336249] binder: 6137:6149 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{}], 0x1) 07:11:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 157.959312] binder: 6167:6172 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 157.968003] binder: 6167:6172 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:53 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:53 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{}], 0x1) 07:11:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{}], 0x1) [ 158.080174] binder: undelivered death notification, 0000000000000000 07:11:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:53 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 158.138958] binder: 6181:6183 ioctl c0306201 200005c0 returned -14 07:11:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f640094000500", 0x2c}], 0x1) 07:11:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:54 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) 07:11:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f640094000500", 0x2c}], 0x1) 07:11:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:54 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x6, 0x914, 0x4000000009, 0x20, r0, 0x3f}, 0xfffffffffffffe99) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:11:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f640094000500", 0x2c}], 0x1) 07:11:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 158.855433] binder: 6214:6233 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 158.900386] binder: 6214:6233 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="1c5792f33a0f30d3695b4b1b845c1803", 0x10) 07:11:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000", 0x42}], 0x1) 07:11:55 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000", 0x42}], 0x1) 07:11:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0, 0x8000000000}, 0x382) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101240, 0x0) [ 159.612040] binder: 6253:6255 ioctl c0306201 0 returned -14 07:11:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000", 0x42}], 0x1) 07:11:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x400000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000), &(0x7f0000000040)) 07:11:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000), 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 159.695717] binder: 6253:6268 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 159.732493] binder: 6253:6268 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 159.735761] binder: 6270:6273 ioctl c0306201 0 returned -14 07:11:55 executing program 2: socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd0000001000010000", 0x4d}], 0x1) 07:11:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) pselect6(0x40, &(0x7f0000000000)={0x2, 0xc90a, 0x8, 0x6, 0x100, 0x800, 0xfff, 0x8}, &(0x7f0000000040)={0xfcd, 0xdb46, 0x8001, 0x6, 0x96c0, 0x20, 0x73, 0x3}, &(0x7f00000000c0)={0x1ff, 0xa99, 0x9, 0x1, 0x5, 0x7, 0x10001, 0x100000001}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:11:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:55 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, 0x0, 0x0) 07:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd0000001000010000", 0x4d}], 0x1) 07:11:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141401, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, 0xfffffffffffffffd) write$P9_RSTATu(r1, &(0x7f0000000340)={0x7d, 0x7d, 0x1, {{0x0, 0x48, 0xa02, 0x0, {0x98, 0x4, 0x1}, 0x20200000, 0x8, 0x8, 0x1000, 0x4, 'eth0', 0xc, '\'+em0&cgroup', 0x2, '}}', 0x3, '}lo'}, 0x20, ',lobdevposix_acl_access/security', r2, r3, r4}}, 0x7d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4080008}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = accept$packet(r0, 0x0, &(0x7f0000000000)) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x78160fe4, 0x4) [ 160.442223] binder: 6293:6297 ioctl c0306201 0 returned -14 07:11:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, 0x0, 0x0) 07:11:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd0000001000010000", 0x4d}], 0x1) [ 160.506982] binder: 6293:6309 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 160.526338] binder: 6293:6309 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:56 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20100, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x6, 0x3ff, 0x4, 0x4, r0, 0x8000}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:11:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, 0x0, 0x0) 07:11:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff00", 0x53}], 0x1) 07:11:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff00", 0x53}], 0x1) 07:11:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:11:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100), 0x0) 07:11:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff00", 0x53}], 0x1) 07:11:56 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 161.281536] binder: 6349:6352 ioctl c0306201 0 returned -14 07:11:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100), 0x0) 07:11:56 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x26, &(0x7f0000000100)="776c616e3147504c6367726f7570637075736574c6706f7369785f61636c5f61636365737300", 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x1, &(0x7f00000000c0)='\x00', r4}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) ftruncate(r3, 0x6) 07:11:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e", 0x56}], 0x1) 07:11:56 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(0xffffffffffffffff, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 161.359571] binder: 6349:6356 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 161.377103] binder: 6349:6356 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e", 0x56}], 0x1) 07:11:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100), 0x0) 07:11:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x10, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) ioctl$RTC_WIE_ON(r0, 0x700f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:11:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 07:11:57 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="ca5828e75a148fd9113405780ebbd69ce16ee10bac4201e93dfada2ac3d0b5eb051b22c8b429efb910e4f4798f2a868d1ecb84c5fd9ba54c026587ae7be69d70bbb639d8baa313e69f46f9c2cad6116de0fb32ca213e5789d34910858950ff82c536fb3f1c6fcd31a312dfee98aac79cd9d540aa2e6dab3448263298", 0x0, 0x2}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:11:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e", 0x56}], 0x1) 07:11:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0xffffff99) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5) [ 162.164302] binder: 6390:6397 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 162.173765] binder: 6390:6397 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 07:11:58 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05", 0x57}], 0x1) 07:11:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 07:11:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:58 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x180) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:11:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{}], 0x1) 07:11:58 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05", 0x57}], 0x1) 07:11:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="422ae71490857d75c42a3c5ee304fbfc40c92b812581f0bc0de3bd5b0f60c4c09740e435c51e6fc7b56eed8c5f93330a0611258888ac3e03dd5349ac9c4bd1c07ccd36838fbf2168a6b34a5d1604247be6591499d90f09112aaa4dc0b3e24576e91f192c52d5e70e63f869d92510163bcdad5d38a5d0e1631a185e5e91daa8b6187d897f", 0x0}, 0x20) 07:11:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05", 0x57}], 0x1) 07:11:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{}], 0x1) 07:11:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = dup3(r0, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) getpeername(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000000)=0x80) getsockopt(r2, 0x932, 0x8, &(0x7f0000000140), &(0x7f0000000040)) [ 163.014697] binder: 6430:6442 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 163.032667] binder: 6430:6442 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:58 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 163.132780] binder: 6464:6465 ioctl c0306201 0 returned -14 07:11:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/76, 0x4c}, {&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5, 0x0) 07:11:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:11:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{}], 0x1) 07:11:59 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10001, 0x2) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000001440)=""/4096) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:11:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2, 0xffffffffffffff9c}, 0x29) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000000c0)="7f1abfc297a9994e5811a9f87cb3b11f7931d9ced46be3ab026ce938ec3f934bc0dee5aac4ae2b310d428911de4e7c15cdab51ac79ee6ff401f4bf7ab561d2fc61b7a75c9734a537ae4a5079e5d21a77fb65d7a3ae3915a3a6a6408497dd9121bf04d1ccc42a4961444e0cc13ce62e475bc4879add8aded4bb82e2f17d6dde20e5c75f472659e4949eb130a0db7115a822af738f8daa5e7e8fa02e748441431256409bdcba95869f3a5492c8806373b8bf78654ac11b274c01cff5515e3e9a97786066e0e99619e2ea6b2b06b0e9fb270142bc54f2525263104b223e9c532ad9f13767a5ea72377856ec1d3d7e79", 0x0}, 0x20) 07:11:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f640094000500", 0x2c}], 0x1) 07:11:59 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 163.824091] binder: 6473:6476 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 163.844392] binder: 6473:6476 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:11:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000000c0)="92ef7ecdd7697e9fb6ce19c361ca7b1395f5ab08000000d67e4e06efb92a3b01b38830e0c185566070c18bdafca2bd91218898ff0000000000000000000000", 0x0}, 0xffffffffffffffc9) 07:11:59 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:11:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = dup(r0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x9, 0xff96]) 07:12:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f640094000500", 0x2c}], 0x1) 07:12:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=""/50, 0x32}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:00 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f640094000500", 0x2c}], 0x1) 07:12:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0xab9, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 164.651296] binder: 6520:6523 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 164.659791] binder: 6520:6523 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000", 0x42}], 0x1) 07:12:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000000c0)="9c44226a73268aa956bd9b5a0705e9ca0aeedb73015de8149d563ab9716e6594711d72c6fcc3989914b641545dafdf0924f18e6d828308664eee4ba1f63fa6719333a1b62335eb0e64ff1377ea6a2e4edd2472ab542d7c8b668c6b44021dc0866af1cb640fd5f03205578d238b17542da038c5e139b87f4d7cf57aae88bbc465c5fcd604299a6044a697790f394706dcf36c6d67cfd9258c8746dc1b11635a513e5c9fafdf1a802b495d836cfeadba0bcaa0f6f912e5f1d36c7ff3a077adcfd6cd79433c2cbc43b1cec91c", 0x0}, 0x20) 07:12:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000", 0x42}], 0x1) 07:12:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000", 0x42}], 0x1) 07:12:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000440), 0x0, 0x3}, 0x20) 07:12:00 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, 0x0) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 165.480870] binder: 6563:6566 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 165.489553] binder: 6563:6566 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd0000001000010000", 0x4d}], 0x1) 07:12:00 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', 'eth1\'\x00'}, &(0x7f00000000c0)=""/59, 0x3b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 165.526279] binder: 6573:6577 ioctl c0306201 200005c0 returned -14 07:12:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:01 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 165.686907] binder: 6594:6598 ioctl c0306201 200005c0 returned -14 07:12:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd0000001000010000", 0x4d}], 0x1) 07:12:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000), 0x0, 0xffffffffffffffff}, 0xffffffffffffff13) 07:12:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:01 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd0000001000010000", 0x4d}], 0x1) 07:12:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000240)=""/15, &(0x7f00000002c0)=0xf) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0x4b) ptrace(0x421f, r4) prctl$PR_SET_FPEXC(0xc, 0x80000) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x3, 0xffffffffffffff9b, 0xbe, 0x9, 0x0, 0x9, 0xa00, 0x8, 0x3f, 0x9, 0x7ff, 0x6, 0x2, 0x0, 0x706, 0x1, 0xfff, 0x7f, 0x2, 0x9, 0x3, 0xffff, 0x565, 0x0, 0x4, 0x1000, 0x3, 0x1, 0x9, 0xa1, 0x2, 0x77, 0x6, 0x8, 0x0, 0xbc41, 0x0, 0x3, 0x1, @perf_config_ext={0x10000, 0x80}, 0x30000, 0x9, 0x3, 0x9, 0x8, 0xffffffffffff0001, 0x8}, r4, 0x4, r2, 0x1) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000340)={r3, 0x1, 0x6, @dev={[], 0xb}}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000001c0)={r3, 0x1, 0x6, @dev={[], 0x18}}, 0x10) 07:12:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff00", 0x53}], 0x1) [ 166.284468] binder: BINDER_SET_CONTEXT_MGR already set [ 166.303069] binder: 6617:6620 ioctl 40046207 0 returned -16 07:12:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x81, 0x78, 0xff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000040), 0x0}, 0x20) 07:12:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff00", 0x53}], 0x1) [ 166.340660] binder: 6608:6630 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 166.363028] binder: 6608:6630 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff00", 0x53}], 0x1) 07:12:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x100000000000914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 07:12:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:02 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e", 0x56}], 0x1) 07:12:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:02 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 167.063449] binder: undelivered death notification, 0000000000000000 07:12:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e", 0x56}], 0x1) 07:12:02 executing program 5: r0 = dup(0xffffffffffffff9c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)={0x7, {{0xa, 0x4e20, 0xffffffffffffff0c, @mcast2, 0x1f}}, 0x0, 0x7, [{{0xa, 0x4e20, 0xffffffff, @ipv4={[], [], @multicast1}, 0x3}}, {{0xa, 0x4e23, 0x4, @mcast1, 0x6}}, {{0xa, 0x4e20, 0x1, @mcast2, 0x3}}, {{0xa, 0x4e24, 0x2, @remote, 0x1}}, {{0xa, 0x4e20, 0x1, @empty, 0x3f}}, {{0xa, 0x4e24, 0x2, @remote, 0x8}}, {{0xa, 0x4e24, 0xffff, @local, 0x6}}]}, 0x410) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x4, 0x3ff, 0x3, r1}) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0xc28, 0x2, 0x2, 0x0, r0}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000440), 0x0}, 0x20) 07:12:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e", 0x56}], 0x1) 07:12:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 167.171203] binder: 6656:6673 ioctl c0306201 0 returned -14 07:12:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) io_setup(0x6, &(0x7f0000000000)=0x0) r2 = dup2(r0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000018c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@dev}}, &(0x7f00000019c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001a00)={'team0\x00', r3}) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x56, r0, &(0x7f0000000440)="e4476a2552135223b247db83fa1b2fd27a22804c5ea802ec6db118a28e6c3831e8604345f2ad1909db9ba22d9f6f243ff3cf8a4edb321d22d705ed6453ea70809b89e2bc3eb38f86e55e8afe2079c1ff0e06323e13dbe2f382384997073459c7c5eb882cfbd42c3736b13dfb2da8cae5bb5926ea17e75f0dcc85f329c59f08638fe3b3764d6c29199c6ee6529ddc53b4d6bf8410940bbfc4d9e58abf44918aa0b2a8c4d54f1ded4e0712818cd201fb1c0fca1a9a12b34af5bb8b21979afd5af7367506c16bffb102940b1dab8d9a29655d71210878c6c6b3de188abe30e3ca768558b9ba2019f616742bac9c82960ff8fd9f9d916cf8163197061d676fac33359aaaad6f1bc127abc8d6ea833d8e60c3f1f837aa6a322c394c1757e739264fe9ee14b61b7fd944b9a5671b9d47c0f4a9007bf2bfffb2f45fb87a1062b287957afc466e34b9a76bd852f6a131fce27f55aa8c8b8f38958e69689eade03810b94b8d126d9067fc05a2bcbfb2510ca550d03e648d8af6534f9f481b67f2166bc4f66c8222300cb6f5c70f095b382d47df8cc3ec26f53357f1c6a190879799691b34916f8eca4604929fdd5160ed81fb0f3588c3063f1395249ff23bddb0e22718a14e5cdb5101bc8c51d5a279aea79229686e7e34beffbf191e36b602b653887805acc18d89ecd74bbc80d37d20fe50e933f73ec77a1e0ca4655c978fe3e7c79dc7853f24836a26d8bda82fdbe93cb0d4ff8982ca5150d6680b704d873f70f19eb411b731c78b1a7b50c447cebdfce8c83d22bd4667f24d3ad947c76233daf57719c32cbb2c099910f5e8bf7ab3a1da93763fe23fa6c82b962778f77529a97886649d15b2dda28bb840b14421a7fb68e2336e0e5ecb3869e87254d56140bd44d7393181a97f38105c2b3bea4907613babb8c6f6d1fd622ad9cdccfc6eae229dc87a15a6a865a8c2ded7252b8fa8105b682a3ac3ada1a629f815d727e96822dac2d42011ef021440cd5b5130360b59ac0dd4fb7446f23961ca58d6c8cc3e4db0f6b94c21f5822a29d8b68c1c09a093a63c4ec431d12194ac9c24a10b93c1b189f19bdbbc1416970b5bac78de2462e5e3e4ad92a0da3736b41c9448cac676e696a80b758f44355002d8fd168ef814d99956fc2532bfa98d51ce59684f06fea1c65e4d96dc786780e863af04f363e5c9e9ee74b961bd28251fcba7fc0627e960d50f2e21ec515a68efd75efe637ab2b8093b785dd4bf1c10cec50558092b5bcd4b51d1482429dea57c238dda6f72a901b2eed8b52441a9312c7015a54b4cfb8ff6b5a7fe342a8ba5cd032bc46e2e6a91a2f37307a135e0fa362c4675d20cc7b8c9a6f63ca753159eabcbb4d48a78f50e72ab0139ad9be55563df1576b9224d771ea379571da553a92f28d9613201fa852c3cbaa5721629d91cef7a4614b3a309aedbcdbe53fc1826274b7a7602f915bdc1be795ee2fc27acbcab4de7568e0689fd8432096df1dbf3c306f137c1786d0910ff168aaa4e44f569200eb418444b9c529f03bdb3bbac81d80e4f2de66f044f8af9568b5d579674244ebf4794d74bac67b173b4dee4274efedc73d6d8ef639a34d599b1eb3da231d0fa47ab85a2eba457be4d2f8e9b4b378b1f894c26c728449688748e8e8b1b2bdf566b543ca34d9f78cbb20470514a43422258d41fffeed5236df58a3edbf3b63bf57c233997d8e218079088ba7fd76cb377de8b977a082f9afc14049b728b7f861e1f8a36cb363ae5acdd82e22cd3f5b18e1affc0c1838822d6696f281b087e82fcf5d6d0e024974ea752604dd8bfecb7f314a6d5bcc4fe72d916916bf4a2411e3d23a25f6b1bef7f95de8a4ee410677917fd7e1e61e8b396d280a750602b3dbd1bdcb90300c51effc94b387f2c796dcd1fac2bbdb8d8f2d9a163358fd550591efdb05bc1a8218e4026d512a074efa2cfd1c69e6bf6bc2f911443138e151bdb6b92253d9d4ed6fa423f4a29f6218ea40acd11d5a49a7c85fa53e47fef38299d05e588d8522568eea2e31e5006f60c048f8f5b5eb8216d378ded8413c198776a0eea1f5efc0960c3e5518ee1db9943e28d99f3df9dec50e21e90646548d78fa631b8d0e7b6f24753816c45382d791808a214f88ffcdfcce829be6101c48c5e0065c734664cbb507a3ecad59e9ab3c0d581adc163053b72c78bc1aff3952ed3f618fe68e7b29d758da56815bee481934d0cd311ad1a55798e9b81ce8c26333974478e8db7a06bd8075610299d4da4095a66977d0ebbfd86f25bb96fbe4ea805955d4866c1df61c287cda75fb631a8fb77a49874b354d665e24cba85b80fc720ab4e1db81c2c7180bab3c41db1056909dee15cc9e7b60b57e7f959c9f5773a17f8c41882291aef37ce24fd11973b9cb901ab54136f485774f3e8f96f7ca79d6a31534fd6ef3604ced4e901a162f7e8e7754681c1f74e5fa394997e027a1f7eca14ddd54479828990a7a06cc0f201930f1bc5ba05f7aede36dedcf6fad4c449a5f75e0e6935334a7f45b4dbc2d2530ecfa023be9c53663a9173e7335414798d6afbcbfed0fafbdd1e8ace1c4a6a736c9a866df7890061bacd108aba6db03170001a6b2c5d487851905f3a7804b1b8fa29eb03618e4e7824f4fadec08051b855228c575b6d4defdf95d49aae19bd970e94bd8972ee3b7ea35f3560e438cbabd4e91ab4c83ad41e70c5e5782b45d39c1f2f9ac24c9bd77d1524178c346b6d1230a6c7f9be16cde77c2956b145914921f0a8e517714440e2f2e2116f8832a16c8bf5d7ff5cafd41769e6b51abd0c0ff09640390219ed42e6f23360e92c142f7812c452086cbf5e452559e6d4e3a8f89bad22d4e2efaae814fe0e8afb84ebb02a2a3014014e93581c17cdd9c1fb4601cad04e3487b96c2157a0820c3239ee846bca79de8b421d985cc6fe77c5751530adbc70f894bedd6ee74cbf3c1a338292410212cc3f3edf40f2a90e4f7ccff39b2a4978a32e64bb5a28453ab91d9c7ac83e17fb8fb337c8da09c99e32c4b35e1a04792aa43a18bf728862a6219649a2aeeb6a04adbbf259a0d9f330059d75a21d4c3e21f6edc675552a98fe616646b76c07d693762850033b42561c7b27b5d1b8121c8a0c5e77cdd1cb6e6e850f2004e0f22786052d7e3224a1a479b0b8ce3e644968029a70740f04aa7d4b3370a0761bd711428e57ba361ab467ade72406de1a9981f0a6afd25375699d0d533f9ed91f33b3a5e7ed6418c4d84bcd32880c1b274ce42cdc6914bddbb0910bb6d33077ee9f3401a1835ea9a32626756b0dd49ce66d533fbf604c3a6bf7005b97f6c7ef34ae78d14ecdd93860f878f35fa9db258325511ed88644358e1f2987ea4577a3b7e4cf41d7b19799eea5a78bee94e06ecdd70eb81e4d4f8b2e159b3c856618c8d7a76e74f6a20b13bb50a6ec743de0b4151a86f172a545f2ba5ba604bbbf0b26d48d4c588d234b0eeea7baf739da6af8706630c297d8b69e7b603750fa3ba8078a0d35a8e168ccc4bdb06042083329dd9bee87e40f771bbab1c801d9d994f199ea383382b762ab482d747062c35eb574123b06ab04daf291b42fd87f391b9074f14a3f48ea64c59f3bf293f3be98d1e7fa10db98bd5932a4fbb6ba5d3cbabaae88b242bc2c3819e8d54496462573df406885df6e04bb70a0909659865e97220314f832a5482c1fab7f9151e62f7b9ec08be2d14db33d78c24c5e0602eee4958b50ad55651f261a9d52a5ec0348e58c786d883303c8901eb9f08f27b4be288365da9750ec43606ae7e8f4131201fb7b497694186609b4807afa0710e307a7bf72f5182d5231b08485e56469f5808ab2a6501d06f087f2dea63633e17315d65432378761bf75cea091a845fe6a15ae9ac20c0438d9e2fa283f4d1f5781d952d5d7c906f235a001d1bb93a4f906774f370ee5285a2a707dd80172c673d1c90a16217be9cf7dd355de2ed40a4c54a6efed48860dd54ca66132976aaa601803df9cb1da2297e1c53c8c56459f306a150bf91ef7f0b4dc2ca0471e935290c9b6c6e9fa1779c86ec5bef28a54f74341aa65763c9c96e9d8551a8095141d9ea425ce54bef33e88b83b17563c9b982c398bfb00bcd735da31cf33e4f54de3b1a2d6795d7b18a28ad487263ac1df160592c292c469d22dd7104c8f9bd6dfe850ab08c9ebaff7ef656634e3ede07272fb708ce2cd4298463605d976e612a40feb533af82d698a205edda21e8bcd4bddbfd008f645220a45407f0dc559cfa6438184d02e77716a7b782e7cee0de38ff40ccbbfb906ebf250f865dae5f48b1639a8b4c582750b9c3281e84dbb8bc6a82dbdadab34038788acab66558af35a8e0c5b47904ef77856bbb5b7b57226ef48cbed694c2cbc38a06106a658e0f63d1f467909fe07a5e3572a726c3fd8e8759203b554286c3afc351e24cc49b850a6ba2d767d5c3ada6787dcded43d1ababb87a8105d3df6b64fcfcfd645126dbc51f355f569f446a9886e19f1066ae81cb93ae32ad616b5bac500f7108e90f7c6ca57399d642ae596d96204d31f3c6c3a1a6830ce7f27a6897792c83c19a3aca6393f7875e954226d1ef0eeac552cf31339b791123439c6719bf2be24276ec0d87c5d72927df88c5b1fba5a3183e077ac42c4ba5583804b77ed0682e182e3fd6808eb9fd813737f2cfc031fa229155e6bd9ef7f2f293e7728c628a32308da2b61c2fa8aa1d38300673a0fe96b2134f61c9b9f8d7670f62a11037c8f9598b1ddb1740e9f4dc6bc2204863e9396a7a8299c89e1184cf15835168b0cb155e2e917d95b3b06d57e5e3f8eb6e5049bf82127e725b106811d6d4a8360745c2985356fb12466e8c1143cd9a8907166b09c819ec401f024c00b74ed64a17823f61ea6b207b00bcaade19d00b0d13ec865d64d82821ac29b7a47c9a02133704cdd2839bc024f3706d4f44d7b647db61a817731f9e941d16bb200e554de4554ca207c8910e8601d6834e9ae9742893d7c93ab4da882b7936204540fbdf62e4d916a7d137b4e8c2a14665e4d6bfb6edd6ce81666d1ddda7ae60f65f641c2c44339257c9ffc700fe8dbd36a216ce1b3e68780c52766f9ada0b95aa9c9c923717f4f6979e68ec6c3df2111469e6d9b7b7ef5be1287bfc141681a6b0c7fc30df6d636f8708d9db5b2c38acc1274ce40b3be8d99a29e75de8288f9b481b262c61662916bf183158175320c4d116c64c2da1c2a14dff85c5ef9f053520d41f81148f1780d097c78dbe3486a2dbf1219d0bbccea8f35f78f289ab3c01ed64dd7fde6ef6295ae8e9e293c483918d682a308a9104e201a43f37889f8486311eb04ca334c8d6094e5ed4adc96c7d4a6468fdc4c5f46d08a64a6c92344473f4a9e685c42804e0a23a31473d9f030c62f39a597583320b1a6e94e96b6bcf9948d04d7e28d3719858cc20c0a1d53f0d06387645fb2b2f08f516fb33528a1fb0f0d319307d3710baeef85ffe2561f3236533625e8ddcbb1d24af093d08a7d35a59192155ba2fe6077a10fefc7ade0402ede8bacbf1015795f0ecff876a532f3b40b8a9d956956e19673cd0038d80c29cc3881199dd500ceb2a0e79fb12003a87c443b7e673e69b2c3c5bca9d06d993d190e2f457f50db881fb6331801bdfc955c86f529a5dd6d21cd784dd1ea64a0893f7d16dc8de3eb8b5bb7d675c3da43c957852005047d0539d3568af518de72b95c9feb93943c9afd29e232aaee3b0057d24993ab30556f5564773c6b56d5edf229dc4b4f3a9b0be62457a6262f36746b7790d05bd907", 0x1000, 0x2, 0x0, 0x0, r2}, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001440)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001540)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000002c0)=0xe8) r7 = geteuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000001680)={{}, {0x1, 0x2}, [{0x2, 0x1, r4}, {0x2, 0x3, r5}, {0x2, 0x3, r6}, {0x2, 0x3, r7}], {0x4, 0x7}, [{0x8, 0x4, r8}, {0x8, 0x2, r9}], {}, {0x20, 0x3}}, 0x54, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) clock_gettime(0x0, &(0x7f0000001700)={0x0, 0x0}) setitimer(0x3, &(0x7f0000001740)={{0x77359400}, {r10, r11/1000+10000}}, &(0x7f0000001780)) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000017c0)=""/219) 07:12:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05", 0x57}], 0x1) 07:12:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05", 0x57}], 0x1) 07:12:03 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x90000, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:03 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05", 0x57}], 0x1) [ 167.905966] binder: undelivered death notification, 0000000000000000 07:12:03 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x240800, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="589ad120832601b69d935a285a100be1", 0x10) 07:12:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000180)="52937339ea7d0b1e3164542d897f0023f3d98c64b24068a95a91138e697e40c2879fc62cbdbc1dcd0ac9ba0abbea8255cdf7b4382cff38e0c6e7a681310d79f846abc9d43a4b2bcc7ab6e2d545914d51cfe6e2c8a5c98efdb8fcd4316eea9f32440179916b2604609c2a8d8c0b7cb2f2be27f6647d7e78ee9e63d51642512149d36cdfd575835688464ad3f6e3184db70ed45d39be5ccb8acc02b50b0e0841d41e0c77d92df0c8a693d58adf53422c20b559586b29b9aaa5", 0x0, 0x2}, 0x20) [ 168.020633] binder: 6703:6719 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:04 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) fcntl$setsig(r0, 0xa, 0x19) 07:12:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x40, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2000000000004e22}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="15f6c5142230a91d0c6aba958a4b6632781bc6cb096231debe3ebaa99a3cdcdf9ebe692157e6123e54083dba454e10ef45d8bf2b478c8cdf29c8d343f6013fcc09b9620d66831d75490f7042da82076ccfc3c955c06d59bcf7b60f291ac4f5fabef29b57bd5bd15455f9d93c", 0x6c, 0x4000, &(0x7f0000000140)={0xa, 0x4e21, 0xffff, @loopback, 0x10000}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 168.735833] binder: undelivered death notification, 0000000000000000 [ 168.749411] binder: undelivered death notification, 0000000000000000 07:12:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400200, 0x0) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x14) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000440), 0x0}, 0x32b) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) 07:12:04 executing program 3: r0 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x80) recvmsg(r0, &(0x7f0000000640)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/39, 0x27}], 0x6, &(0x7f0000000540)=""/216, 0xd8, 0x1000}, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) prctl$PR_CAPBSET_READ(0x17, 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f00000000c0)='ns/net\x00', 0xffffffffffffffff}, 0x30) r3 = gettid() tgkill(r2, r3, 0x2c) listen(r1, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/net\x00') 07:12:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0xffffffffffff8000, @empty, 0x75ba}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 168.817289] binder: 6756:6759 ioctl c0306201 0 returned -14 07:12:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xb, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:04 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x5, 0x800000913, 0x4000000005, 0x4}, 0xfea6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0xfffffe9c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xfd, r2, 0x1, 0xffff, 0x6, @broadcast}, 0x14) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f00000000c0)='gre0\x00') setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0x0, 0x0, 0x2c8, 0x140, 0x0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x4, &(0x7f0000000140), {[{{@ip={@multicast2, @loopback, 0xffffff00, 0xffffffff, 'vcan0\x00', 'veth0\x00', {}, {0xff}, 0x7f, 0x1, 0x2}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x294, [0x2, 0x5f83038, 0x9, 0x8, 0x40, 0x1], 0x1, 0x2096000, 0x1f}}}, @common=@set={0x40, 'set\x00', 0x0, {{0x9, [0x80000001, 0x1, 0x1ff, 0x3f, 0x0, 0x7f], 0x9, 0x8, 0x7}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@rand_addr=0x5, @rand_addr=0x2, 0xffffffff, 0xff, 'tunl0\x00', 'ifb0\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x4}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x42ff, 0x8, 0x0, 0x2}}, @common=@set={0x40, 'set\x00', 0x0, {{0x7, [0x2, 0x200, 0x1, 0xb2, 0x4, 0xb1], 0x7, 0x32}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="73990e3dd68c", 0x81, 0x3, [0x2b, 0x1c, 0xd, 0x34, 0x24, 0x24, 0x3d, 0x2e, 0x8, 0x13, 0xf, 0x1c, 0x1e, 0x2d, 0x34, 0x37], 0x0, 0xff, 0x100}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@udp={0x30, 'udp\x00', 0x0, {0x4e23, 0x4e20, 0x4e23, 0x4e24, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7, [0x9, 0x0, 0x9, 0x3, 0xa5, 0x2], 0x8, 0x0, 0x4}, {0x5, [0x0, 0x10000, 0xffff, 0xdb, 0x5, 0x2], 0xffffffffffffff39, 0x4, 0x9118}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x3b, @remote, 0x4e24, 0x2, 'sh\x00', 0x4, 0x4, 0x50}, 0x2c) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 07:12:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 168.883057] binder: 6756:6782 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:04 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x40, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x54, 0xffffffff, 0x2, 0x3, 0x7, 0x1, 0x34a, 0x40, 0x1e0, 0x4, 0x7, 0x38, 0x1, 0x9, 0x80000000, 0x8}, [{0x8087e23e101eb719, 0x0, 0x8001, 0x9, 0x0, 0x2, 0x36d, 0x5}, {0x3, 0x81, 0x6, 0x80000000, 0x4, 0x400, 0x2, 0x9}], "8fdcbe60076c86b8f1e4989a2c68df431b0537b598a7dced1b4c3019b49b98221873bc81a2c59fe5974312a8a4869dd4473f2528bab9425ae26dede595f604fe8846b1965768e38c6cf356d4f13d1f84ed2579734b887170011287da3fc0e9e1ae7f1a3bdfd889f7f7f8de6242ce410e0a895c2fe3525025d08493a06943f6e0516715e3ce33c3f271b30aa7456063dfa117846ea951893aed1c109849b201ea52723cddcc90cc746a24fddbf88fbd2f72759d1a2ab3cb4dc232edb1d617dbbb14ff068b0579513c424a630d5726e39fde65c52324dc7e1f0953bd140a734e8e5c2af3cdc6ef99c8acf7b5911274f2925187d56fd268a2"}, 0x1a7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) listen(r2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:05 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x82) write$P9_RSTATFS(r2, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x2, 0x62f6, 0x2, 0x7fffffff, 0x4, 0x88, 0x10000000000000, 0x1, 0x4}}, 0x43) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000011}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="facc1737e87670b7fc73c0b3e9df350a3c3968a9", @ANYRES16=r3, @ANYBLOB="000026bd7000ffdbdf25020000000c00040006000000000000000c000800040000000000000008000100000000000c00060001000000000000000c0008000001000000000000"], 0x4c}}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 169.576459] binder: undelivered death notification, 0000000000000000 [ 169.594839] binder: undelivered death notification, 0000000000000000 07:12:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x1, 0x4) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x3, 0x100, 0x400, 0x2, 0x5, 0x6, 0x5, 0x5ecf, 0x1, 0x80000000, 0x1, 0x7fff}) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bpq0\x00', 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:05 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 169.669412] binder: 6815:6836 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 169.679100] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. 07:12:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000280)={'veth1_to_team\x00', {0x2, 0x4e24, @rand_addr=0x10001}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) sendto$inet(r2, &(0x7f0000000440)="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", 0xfd, 0x0, &(0x7f0000000340)={0x2, 0x4e24, @broadcast}, 0x10) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000002c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) waitid(0x2, r4, 0x0, 0x8, &(0x7f0000000100)) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000900)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'eql\x00'}, 0x18) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) 07:12:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x21}, 0x80000000000004}, 0x1c) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000400)={'syz_tun\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}) syslog(0xf, &(0x7f00000004c0)=""/4096, 0x1000) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@loopback, 0x4e21, 0x2, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x33, r3, r4}, {0x5, 0x7, 0x6, 0x3ff, 0x7ff, 0x3, 0x5, 0x401}, {0x40, 0x9, 0x5, 0x400}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x3, 0x3}, {{@in=@multicast1, 0x4d2, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x2, 0x0, 0x1, 0xebf6, 0x8000, 0x9}}, 0xe8) 07:12:05 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x40000a, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) dup2(r0, r0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x480000, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) [ 170.396152] binder: undelivered death notification, 0000000000000000 [ 170.421415] binder: undelivered death notification, 0000000000000000 07:12:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000001c0)=""/137) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="ef00000020200000ccb4d44429b756afad784d74b516314a7957a093812b999311da053b24bce144670c3846a7ca4946fa88785563bac525b1bac4bc52f41de69adf830b9ffbb8d07e7380b974fd10d0c9a9623bff74bd1f91b6fe8423f878ea3f091268f39e9a74e6f78ab644f22f18bfc9617520a7064e56f010b4fd7dd00209918e917f1ccb4da1fe614c8a510f18a9c804c1005a54f45ae2f418a6e51beda31b8c47d5dd336d76f37539ae18d23b7061947021d3206e0688daf8756cd7df83c4db3b652ae014491ed99a3c5072d9f78176e88cea421384b9b8461034094d37bd5a7916204645ffaa9f093d0d3f", 0x0}, 0x20) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:05 executing program 3: socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x17a) 07:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = dup(0xffffffffffffff9c) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000006c0)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="58a861de86a2845654841206bc7a3b70f3737dc8875e80cc494c13a3ddf79c19635622cfe9a141f759d40b78d614f038ff16d1f7d735e0be55b42bc7b3cf49e23e51ddf25b40fba9e186b3aaa424474d1d0f32288373c5e0d1823ba71646e84f12bc3164b19a25f1ce75de308f641ed5c215967709f6ec5f0e1ab8d0fd0696265eef9ac5892b25bb6e64a97d5adda1e91404dcc7247a", 0x96}, {&(0x7f0000000200)="56475825ac976c36d9e678784c9c5e3d95d06acb8af6030abb292416e10ea29eda2534b130b801c620d620e024bb6aa550245268384c9431eeb5d47f01968d6ddca8db153b81ada7bfa2530a990ebb8d91bff96ed160b509b516a76f68a2ab4cb485a9aef4670e0853fd84fe748d42853dadc046ea5f8873ada979dd836542d0771a139a8e15fcbea80a437ef3b7262a81ffc4c622f9de8e8c", 0x99}, {&(0x7f00000002c0)="fe1beed1df05248d25d1cdd9b9e00f12095dd1afade14ab19226d09ba0915cee455122f2a289b9adf12470ddca131fc43274dfe0ad15cb51186d2d22cff3183e1db2df38c47429bd2c3cd443a848d6e303eb0290aa7e2a9886ab3e2108e44a2929f1b82649cae12687a6113356132bda2a2dfe8b0107c29236bfbc92d467c32bd98686861e7debf9e4eb8c4a91c08acdbe07679588f445b76390bb3a52073eca058812bff08118f6227d8fa7906e76a4103b7d230594b7c0c8e9c47c82f9e4ae5e03272affce34bf5ece33444f2e338dfedda16aa64e913b57cd5fe6a166a4fb5123b4afed", 0xe5}, {&(0x7f00000003c0)="b604a63ca4e3fdb5b38353af0bd1a992466454bec5c5bd5640591ce1a0db565959b5f9a0a52ed6678fe8ec761300e588bd5204be3e2201473d7ba0169328367680297f79fc7f17ff729ca6a605a94634e96217e35a939a7d44ffbe2bf451f3c2ee32d084459fdcb97f140bb3433d4b3ead643cea149f1f0cc4c241b7bc7231f9e268e990fefa408a24d2d33fdaf46e056ed4c421657f979e9f0bfe80c6a91e087a85d279c439185e50ca54fc654f0c4f18baaea2e108c980b91d15824e58f24b4e8aefaad5179069efc1f777696edcf6980b9193845793f159", 0xd9}, {&(0x7f00000004c0)="6b5dba635735209d62fb71314abd41bcfa6a99bfb662d9ef6e7345159ba17b7c8fda00c2f3599480bcc246c9b7bbc904d33f9b28254a3694f27962fe4b40f13058e7e6e413f40c136019cf5764fce7ada0994a27b90fbfaeb64d9d3f093a34a1fbbcaed9efcb5b57bbc32176d47f00dec3546e21d6089c2c22765c9b64b56d1dc11844d449e521c0ed9e128e356a29402bb81715bccdc15df8b084dbd56de6ebb867ca710f7b3ef5ca24b228699572ee980623c41fb3048a215be885dc47c575c894a1602adeb28f348444ca137eecac9691fb", 0xd3}, {&(0x7f0000000700)="a8a16cdc773510300219718e0c388becfd56eab7eccd6cbcadc00078f178f78cabf78e1f40ba5aa8e841414a94639da93fe7a7af32be1e58e8d6db2deff02313c8f50425264ab7d1435f39e6637eaa43ac6baff941031d03360370d5916352ae93e687fb8c4c51ca7aba86ec36bda6b5f2c603691d7239c964f6c40fa7afced7708e0c44c72e5a8b27e67cd558a8f6ed540fddeada9c1caba5daf08df806a74fb1fcbe60be729a88", 0xa8}], 0x6) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000002, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @mcast1, 0x10001}, 0xeb) r4 = getpgrp(0x0) ptrace$getsig(0x4202, r4, 0xfffffffffffffff7, &(0x7f0000000680)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) ioctl$RTC_AIE_OFF(r2, 0x7002) 07:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='.\x00') bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000)="3e815661e0106d0e935ea5a7041a24147e93a23df96cbee196f1f53a6bbf662a26ffadd30e522eb8775fa88fab2f26", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 170.514048] binder: 6871:6883 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x200000, 0x0) r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x8813, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x30, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c4002000000010000100000000003780840", @ANYRES64=r3, @ANYBLOB="1063084000000000000000000763044001000000"], 0xfe, 0x0, &(0x7f0000000140)="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"}) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) read$eventfd(r2, &(0x7f0000000440), 0x8) listen(r1, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r5 = add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="89822ebcc58077081fef26505578cfb7e478fd446f9711ace379f9b0c92de32ffb8207b4933f52b83b8cbcc4251d79739c990a4754a29af32256694c517b40a81e13ef636a8208632314a1d7e55740b407adcd06851e95efd4bd48c8835de475b57bc2bb0f9fb8d69a420f8fc52bcdf4d3526cafa11e2e041c2a55feabddc89f92f82388ab17d0f2cada6fa275f37676078f1b8ded1caf13cc875b9f8746893fbc2e56ab876ac7249130f4b6dae92d482cf23a9ea8f3f06f58d46ea198d737f108b4dceefae330b4e676775f3675099b1dc2be1f62d4bca3f613cf2c34d234fa96c7f995639af13e0bd842ff9d9daf8b5d7dfc03741a89", 0xf7, 0xfffffffffffffffe) keyctl$get_security(0x11, r5, &(0x7f0000000400)=""/37, 0x25) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0xfffffffffffffd0a) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x42042, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) write$9p(r1, &(0x7f0000000440)="858af49eaa4f214cca3c3bf72a454f941fa215283b37eca7c6ff485c5542dbadbab7c3765cb67b4e7fc5c3d884e18e234ad6fb6e7e2cff0c31d638234a1f7c8b11e2ca426996f0d0e13c5c9d5be45a61e899f5b49075c76c0a537e16ebcbd186050993a34ad8acedc5d5c50ca29be9f0e6621caea4c3b4962bfabf09afdca670ddbdd25ecf04a839a2a1622de99d0a5561d5f612794af577fa2a7a218449ad484db9563b2d16b6a9a42627e01a2c193e92b9278115aaecd2a30a2647ec829d893391e7bde0d93ca603373b8df9afaf4a3247cda8c5bcfbb6ec762f64814eff265421c24754cc956100475e86472a111369", 0xfffffffffffffedb) 07:12:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @empty, 0x100}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:06 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:06 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x28}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000200)="22ef8e5b29310c29f4bc650d2a00c77dc164318d0610bf08a2b36b57be708b5c50377cf6d0d5468d0afdde261f3c51a341799b3827f61f88e4a7c5e1fc6a211b31b3ec9220b744c08fc607ea5eba48820751272db4d91978fd699e7636de46762ab2b4cbe25f839ac37a87badb522f535c772e4d16cd87cfa5ea2dd81f36c6527041c35764818388565ea409000b7170ddea53c9d2d104376de9f3e0f9d73023e1807a2ac0b1a4a8133aac3757f70761be7af0aab38f4688c2f50d0351d51304621ee6df1f1bbc41724a4d483e8a1ea4785dbd6f", &(0x7f0000000340)="db0af7c93b64a413afffa731ecd5fe69b459a24a0805e9e5b1435d866b56da2d56ac6e3e2cd3535a89b536f4a01dc215acaad68eae05c34f7eea0ebb5fe22f3aa0cc3f9412faf0d68c8a63001b7eec73dcb747771fedea6b4b6500132367ad9219ecda02875fc1deb3d12b17a68e88cb169b5df1bb59f6949c3db6fd99da6d709bfcbcddbe9302e17063217e416c469240f9"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000480), 0x0, 0x2}, 0xb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000440), 0x0}, 0x20) 07:12:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='ip6gretap0\x00') 07:12:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 171.252021] binder: undelivered death notification, 0000000000000000 [ 171.262383] binder: undelivered death notification, 0000000000000000 07:12:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x100000000a, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) utimensat(r1, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)={{0x0, 0x2710}, {0x77359400}}, 0x100) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000)="01e21c94fcabad7bd96c2d63ff65398f94a804ca43118179ca1591ca35f2b0ddc7897f190ca11c80a18baad897e62391", 0x0, 0x2}, 0x20) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x1, 0x40, 0x9}, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 171.309217] binder: 6920:6924 ioctl c0306201 200005c0 returned -14 07:12:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "16a7e9b8513e057ab1dc6e07fef990ca355bf62befa81b822a857abf66a2c246b9a3d57cb17eeeaca085f46f0adebc355b56cc6da2bfcd0406e0a67fbd7d3d607629e1dc973d4d044107ceec58852c6e5e5987b40dbcb8d7207b3183ebcb2d641aba46b780e22f306d825d772084ac891e894f8daa42339a875868ca8745c15eacb68a232a540e0cee6d635adf6b0ad86f139e72e4ac768a09dc630e18fc01d7c22a451b86f847de083e803679901afb922ec8338eb881393afd5012716b711d72c702f720b3ef347cf9ca5dbe6a4d9f"}, 0xd4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socketpair(0x1b, 0x3, 0xfffffffffffff801, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f00000000c0)={0x2f, @remote, 0x4e24, 0x4, 'wlc\x00', 0x14, 0x81, 0x28}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000000)="7a330dd79488f4b38359221e52c93ef5b3137f4bbe37c1620a275d6246bbcbb0fec2e0c14a6ffb341da088b0c749e6104e2d3540315d04286649bef6cef5a0d852fd49d8aa7bf6f5acc408125f5f4bb657", 0x0, 0x1}, 0xffc2) 07:12:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 171.401277] binder: 6936:6938 ioctl c0306201 200005c0 returned -14 [ 171.424426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42774 sclass=netlink_tcpdiag_socket pig=6944 comm=syz-executor3 07:12:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xc6, @mcast2, 0x200}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000180)=""/89, &(0x7f0000000200)=0x59) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) timer_create(0x7, &(0x7f0000000240)={0x0, 0x3d, 0x3}, &(0x7f0000000280)=0x0) timer_delete(r4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 171.474040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42774 sclass=netlink_tcpdiag_socket pig=6944 comm=syz-executor3 07:12:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xfffffffffffffc00, 0x2, 0xff, 0x10000, 0x3, 0x80000000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) fcntl$setflags(r0, 0x2, 0x1) 07:12:06 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 171.516287] binder: 6951:6957 ioctl c0306201 200005c0 returned -14 07:12:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) 07:12:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) 07:12:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:07 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:07 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x1000004e22, 0x7}, 0x38c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x240880, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000140)={0x3c, 0x1, 0x13, 0x1a, 0x9, 0x8, 0x5, 0xce}) [ 172.110430] binder: undelivered death notification, 0000000000000000 07:12:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000140)="46e27d4f0d3756da3138a97cae00a9a166c7490709b951b290bc119644f9a0e8d342d73237d773d45f18a7dea3ddc1032497a2b9ea11cff660f0106546fe990149068b0f4d1c77154386f547d74393db1edae55f418dee564d05bb033b53a93cd940009201741f6c4a5681a09cd81716f084bc0f04ecbd9ff4af9fba25951cd2ab2255e08a2d7e76618f34cf975d35f57d54dd2780fab5825f6892230f82e37f97f6cc5c32e55a790a0c026deb89e15b381c5f9460badd4ccc04eedaa49e2ede906e58d51f2fa61eb5e394922ecfac002e86ba97b98ea9a70f1984ebe5e4129a37d67300513f95be0b3a678d13bee0e58645ae41d0", 0xf5}, {&(0x7f0000000080)="817425db63036d3e56c558617850984cfba961aa461ecf194d1b501fe8e46f48e2e614977792315d88dd3ea93d7fc3edcf527b31f919b644dee6110367090c6e6b26123c423dcf000ffdd9a25788c15b54deed13da6087d949f0e1951f25b1a34d693e6469943e1c", 0x68}, {&(0x7f0000000240)="1804a17afb110d383bc33835ebe95f6f75b51f0ac8d2aec8b34f8165b550031b3a37e3266e789f77ddebf12e53185a288ba0d17d7e6e5a8c5ff6da4128519dc3abf0e0bd370fa5de6555423c3458d8a2c8ace64b38fd663943725596eb1f96581e6fd0b40be4d29545a5be0fc477add268da22f49d483e264f2e2f2aa9740ab5390c93cffe49cfbe84c60157f4c5bc", 0x8f}, {&(0x7f0000000300)="1743f4f372a0d2d97f2140fc53210b3aa78b7594a00925516cf9", 0x1a}, {&(0x7f0000000340)="1f5c39a2322974df36132742312b7de5290100f0618fa94520e1d91fff2d61e6b989c785846d39cf781c62cbd37397802f3f678fce523d9b03aae25c026564ba9c400d5a577782607c18f28456cebcc73feecd76ffe3dbf6e6ed651235a4e3685199d256530bb722a37c356420082dc192a64d28f469e1798d6c9110858a4cf2bc054c07d9875f8804bedc85f3785aa46a76a817e6c10464a263a38a", 0x9c}, {&(0x7f0000000400)="37fd", 0x2}, {&(0x7f0000000440)="370b3dcba919b8fe7f1575596ba33ccb52968e7e07d51c8a6c8770dca65c0a2c70a8bb848dbbdbc291bae6cd8e5d965999552c7c0dbeac6424a7fe51323533c1162e67dcf3cd06aa80eeea911955e775904e01f5e08b5cbbdb595d5ce881c618f3577a837badc4804a8907df723f8be0c0e70c087164e2d4425fb1387de390a99771a92e3105c5ebb93703d5e60bc85c448fa8a15d8bda43b15ab845c2ffb454f74fc7637666ae4f9b582abd1b1590a6a65321e40ac337c29da3e90ce627d33cbfe1c9f08d5d80976fbd8222118f189644235e32539d96eba8ffef3fc5f9af", 0xdf}], 0x7, 0x0) 07:12:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x1}, 0x2c) dup2(r0, r0) prctl$PR_GET_KEEPCAPS(0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='systemlo\x00', &(0x7f0000000140)='&md5sum\'selinuxppp0},\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)='bdev\x00'], &(0x7f0000000480)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='$\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000440)='eth0.(\x00'], 0x400) epoll_create1(0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) 07:12:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getpeername(r1, &(0x7f0000000080)=@rc, &(0x7f0000000140)=0x80) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='coredump_filter\x00') ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000140)={{0x2, 0x4e22, @multicast1}, {0x3, @broadcast}, 0x21, {0x2, 0x4e24, @remote}, "693467b09ba2db00"}) 07:12:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) geteuid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:08 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 07:12:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="dbfeffff7d020000007b00390a010000000803000000070000000000000000003000010001008000000005000000000000000e0065746830766d6e65743173656c6602207976b8070f002d2423007b766d6e6574316e6f646576657468302c73656c667365637572697479656d31266c6f1500126d643573756d73656c66776c616e305e2d5d267b01005dcade16474a4ae32d67d94800dfad4f1fc5e2558fe346119bde6b5d37bcd787dc07eb5d13934e12c05b452f4e50c60588036a1827b4073a8634a69fa70367b274a1d966faa0f4c6ab3b567012e72178166e5255ac1c80063050db5c270481c942", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0x91) 07:12:08 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), 0x0}, 0x20) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040)=0x5, 0x4) dup(r0) 07:12:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r1, 0xffffffff) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 172.943062] binder: undelivered death notification, 0000000000000000 07:12:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0xfffffffffffff3d8, @remote, 0x4}, 0x1c) listen(r0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)='vboxnet0vmnet0,\x00'}, 0x30) sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x236) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) write$P9_RWALK(r3, &(0x7f00000001c0)={0x16, 0x6f, 0x2, {0x1, [{0x40, 0x3, 0x4}]}}, 0x16) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x1f}, 0x1c) 07:12:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) memfd_create(&(0x7f00000000c0)='vboxnet1lo(trustedsecurityeth1&&selinux\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000440), 0x0, 0x1}, 0xfffffffffffffdeb) flistxattr(r0, &(0x7f0000000000)=""/64, 0x40) [ 172.992256] binder: 7043:7050 ioctl c0306201 0 returned -14 07:12:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x3, @loopback, 0x48}, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x1a}, 0xb6}, 0x3, [0xecc, 0xffffffffffff8000, 0x4, 0x5, 0x2e, 0x8, 0x4, 0x100]}, 0x5c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100), 0x0) 07:12:08 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 07:12:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x914, 0x4000000005, 0x0, r0, 0xfffffffffffffffe}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x73b) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000200)) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r5 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='posix_acl_accesseth1^\x00', 0xfffffffffffffffe) keyctl$clear(0x7, r5) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:09 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) getpeername$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f00000003c0)=0xa2) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000a40)="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", 0x1000}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) syz_execute_func(&(0x7f0000000880)="c481505f07660f69d42e66653636660f543ff3470fbdb82ce437fa660f38283d001000004508730cc4a2cd3d92ffefffffc4a1a1f6d8c4e20d9f1d00000021c421a012f9") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22, 0x3f, @empty, 0x4000000000}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000040000000000000000000800000000000000370000000000000000000000000000000000000000000000000400000000000000000000000000000000000000"], 0x68) write$P9_RLOPEN(r0, &(0x7f0000000280)={0x18, 0xd, 0x2, {{0x8, 0x4, 0x1}, 0xbf}}, 0x18) listen(r2, 0x5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) fchmod(r3, 0x100) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000400)="ec1ba632e74b715c1c35e0949cc5d2ac950dc175799ef47b78d3ccc07e202faf7ab6a45ab60b33f6cf3383b9e1f15ba3413ce289234298b228342afe862418db86274875c1dcbd0909f980cd58e01a783f195e424abd7eb30f74549eab9872ae5a3614372112f397194d5550fead927747bdd4d6989f95db58b8ecb9e8bb1bdba189429bcb4566361dd66b92e12f429259176aabee7933850ca740aa5eebd9180e911da34e4b316e0047e20e8c4e8957230ac3c92fd36561e915e010402f708d1a5c5a41b933eb39df94a3291642d7acbdf8ccc624071d91d791cb451279", 0xde}, {&(0x7f0000000500)="d8a8065926064b2c41f885dd29c2c2dfa16ac62ff3ec3ea1389fd28ff25132beef1faaa3e9abe25302be21ea681ef503f3d3ae98ce30e76d0fe07e5f3ffdf3613cf39e8b56b322744234469970c57592fe3690875837ca0b90f57c829e91c244ef76ee6b531227f59cc2fad37cd50d8eecf88478531adca2534b61729d9bdf39d6e5ad160052fdefecac62327da6cb1bf815978e10f6c9073fe034eb46a99f0b811a11e6475cb1dea2ac218b697234af952ba6e21c4651b9bd6706a51ee8284afcba24c2ef14060044583828469ad4d6d4a047756d4e1070fb997320fd66f6509e7a5edd41e91b832369ab43002a1d8f1921030e9dd7f26dbf", 0xf9}, {&(0x7f0000000080)="59377d38d7bb878bb93ecc732ae15cdb98c297ca64caf90c5ea9893e78de7328ebca6934cfcfe99309f1d7c30a5d5cefad21d2f67e897c1dac01d9de2d5a", 0x3e}, {&(0x7f00000000c0)="3cd30ee94f4fbf999d900ffed4f598bb2fcf31ef872e3b5c6e3b96d94f26c93b60768bdcbf91c4535b", 0x49}, {&(0x7f0000000600)="3929976d22722a2b85811877e241d6e2a2cc3cf15bc229341fdfd0e9af371283e7e726444a31edfa4b5e4c0a7bcad1bbac2a83622c2081bf53cba2c107c5fd8af9c22646e9ebdbed0b3e547efa85e508a03345a344f95cf70aed82a026504a398bc0e6bf972841a93e05e140a3247b55e304d19bf4f40bea0cc25a6904675ec64b9720b275adb3247413fd731d41d46fdc52675fdb", 0x3b1}, {&(0x7f00000006c0)="b4ec4875d3f4c8d851d51281eb9095a382aa01be3e4b73b4d43f48b5b1d128e70719453dccaad021876bc2b243ee73f798ffbcf86adaeda41a9d8c603b3c2f51c042af09e6e16d8256702b57d6faccdab07456dc2a7421db44e66ef90528a8daf5e05542a89a7d8f5e2d4f8cfe3f17f5a2ef84b091fc958268c81be9a0e06149d6286ac459364394038d345be65eb5fce2b7ad00d01d47f20147262338ab6ee099d7b5ff2def0d0502469a48d8be1fb74fdb23da8c1256f3077c60b8082dda51dc779266a5ef21a80373b01bb1d3e5547c82", 0xd2}, {&(0x7f0000000200)}, {&(0x7f00000007c0)="9afd5d829fd0fe27575505343e921028b71681776610ed20819ad250330ba73efa36ddc951802fce365a5b5a24fbe4809167bbd9938b61d27897098fc68cb230def6f4faa9368c50c8449915c53e90ccecfd86e28a87a6c92f7d86944e3da56994a86828a8938dee557640a614edfe564f5e9eb67dca555055cedf86fb53a0626594ca62d40fd188623b2d95a89e9e03371f7f3191", 0x308}, {&(0x7f00000009c0)="d3013ffecbe6135b0387181af5320fe7df36f876875506f3df57763dbb975febc5f4d46b9d38639d7e83b6712ff448054ca1504a91e01b1be79a0255f3699bf60fd533233bc4c95c2ccc81fbbe639bdf48142e7f386fa7901c9eea832a33595fd2f5ee75a87bd1c47440650bddda0704344d6c", 0xffffffdf}], 0x9) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x0, 0xffffffffffffffff, 0x3}, 0xb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 07:12:09 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x8, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x0) 07:12:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 07:12:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x4}, 0x2c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x80800) close(r1) r3 = accept$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)="a3366592e17e242a78d5dca44c6f5a47a799dc5f562e4599ba00ac1e723b5c1937fb65a2f770e2d2", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:09 executing program 2: socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4, 0x80, 0x7, 0x42b7c175}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x20004e22, 0x0, @empty, 0xfffffffffffffffd}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x8, 0x6ab6, 0x0, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000440), 0x0, 0x3}, 0x562bbb033b46f797) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x8b5a) 07:12:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 07:12:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x180, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000140)={'system_u:object_r:hwdata_t:s0', 0x20, 'system_u:object_r:semanage_store_t:s0', 0x20, 0xff, 0x20, '/usr/sbin/cupsd\x00'}, 0x69) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:10 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000440)=""/4096, &(0x7f00000003c0)=0x1000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000100)="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", 0x0}, 0x20) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40040, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000300)={0x1e, 0x1a, 0xb, 0xf, 0x1, 0x3, 0x2, 0x16a, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='![security-]\x00', r2}, 0x10) 07:12:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@empty, 0x20, r2}) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) socketpair(0x1b, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000300)="380153f4de25b40e933e1267d71d0b05a3ed7453b620aa6c11be3078adf9a7a33ae8f366f27d02866360378af3912efa3e05bfb39745b26356ff7c46fb8062d4586ad4b8f224400e8d6736b6c399e1469884edae933773c054d88de9208de068c94ab4ea25b380cf0f7a4450e784ff3205c4906cfe3891e6dd4950f6b533b5abee7d8c698086912ff592886d267ec771f2d73fc5744c0cbd43c239cdf3cfe9fa3b4cbff1ba192f6cfdc0caab053e1ba22e37d0e8311128a4ef581eeb308a5e8f445929a1e1bc1a11f31474c2f2", 0xcd, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@sha1={0x1, "0abb9796711150647a42e7c162f54e1f9e66aa6e"}, 0x15, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x900, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4008891) listen(r2, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r4, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0x80) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 07:12:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x914, 0x8}, 0x1cf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000080)="cab5372d07fb3e165cae53d3277c88a2a41e840812f18209982f55a7c5d4fcc15e4937673263", 0x0}, 0x20) r1 = socket(0x3, 0x2, 0x3ff) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/245, &(0x7f0000000200)=0xf5) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 07:12:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1000000000000153) 07:12:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0xffffffffffffff08) r1 = getegid() getgroups(0x1, &(0x7f0000000000)=[r1]) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x1, @local}, 0x1c) listen(r0, 0x2000005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x16) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x900, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000000c0)=[0xffffffff, 0x3]) 07:12:10 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:10 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:10 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x2, 0x6, 0x4000000005, 0x20000, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="11a1b620f524f6835a7af93cac4a5612e7f943d9b89bff5ff0004510d3981fe13e4952958f731a58cd0d2b19db9e85ce6db6afc4360280eaf1eaa3fb1997bae3ea7b424be5d3ac9fc9633bb54cda0934ebc282b32bb7454ce3efdcf6be9a875e1a021066b042cd9339c56974f00f58b51131cbde7443f2fbebcb409e86173eda40b2ee213a8b20ac4122eb6358400843d606281fae64b1ccc3eabac1563041ab6fa06810a3aaba075be39b1f828ae8a38a9feb165e3f4fcd01f8c03c68e00df4c41a466ee998bd77647e0db43be15de55e48017da11f3ed7d2cc9855a8b8abb5a619341baae1f15b877fbb334feffa57e2", 0xf1}, {&(0x7f0000001240)="f5900ed43360b7a927d9e509b0826246e3f29abb1b138161be2e4b7ae1487de0affaed2e62a39b260b59104fb7c0cd614660b8b7eb6e803301aaa0a1103f742ff1cf767f5f675e4764200245b12c70731b7e0fcb1f8f9279fa34176ae937748ab0d6b5600dab16042d79345e37d13c6ac08dd811d04e5686052e05729f6c8cfff2f03d4cb54dba1f75f553e6e5c32b4906711c692bedc96670687ec52a5565686cc0f1c32ccfda4f4a495a11bb60cf32f2a98124d513b34fec16bf92c5cb70252b7a497dc9c83301835cde47e449421897b8af44ed9dfec7c60342866265ce79b421a1bf5a265ed4a0d75fbaf935bf59f3a1f2dc9e", 0xf5}], 0x3) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 175.504952] binder: 7210:7213 ioctl c0306201 200005c0 returned -14 07:12:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) 07:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x4e21, 0x20000000000000, @empty, 0x1}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) ioctl$FICLONE(r0, 0x40049409, r0) 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000040c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000004100)={0x0, @multicast2, @rand_addr}, &(0x7f0000004140)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x8000, 0x8, 0x3, 0x80000000000, 0x1000, 0x1}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 175.614079] binder: 7227:7231 ioctl c0306201 200005c0 returned -14 07:12:11 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0xfffffffffffffe43) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 175.714528] binder: 7241:7245 ioctl c0306201 200005c0 returned -14 07:12:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000140)=0x68) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:11 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000001c0)="29eb34277ea6cb3e83820200000000000000de108e0f42b07ecc6b0b3ec6295eab53cb1970f694e238cb7e4b7d6010d342ff05415b83250b575c65b5fc785b68b5ad6b", 0x0, 0x4}, 0x5694254c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)="0612e6a59cc74e9d47305e0d37800f864817be07f37e334d6c8ea1c74004d42f802d1efea8379dd819623d850de52808ceaa175382e656914e9d4fe52bd8ea3660147841a98a0d8c0ffe0e9ba49698427286b54e3b573e294748c06ef09557f9a0be4f82c7c1e2dc7d552e54fe319addaf00837c865d6921632697faae44b34613296028c8329e12ce6864efd7fe49d52162cd765634786d529589ccfa2e53630a86c3cf14950613c0b3e42b7292e001d5aea2f5e3d200d0aec55a774537b9f419d22856a177f35ceba63c2bf10c0490d8768a697b4289809db754bafea52a4b0d"}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0xc0b, 0x3, 0x211b5695, 0x2, r0, 0x1}, 0x2c) 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x80000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x401) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @multicast1, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@mcast1, 0x72, r4}) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x9, &(0x7f0000000200)=[{0x5, 0x4, 0x4ce, 0x9}, {0x2, 0x8001, 0xddd, 0x31}, {0x0, 0x3, 0x3, 0x8}, {0x8, 0x6, 0xec88, 0x4}, {0x43a, 0x2, 0x83, 0x81}, {0x9, 0x8, 0xffffffffffffff81, 0x800}, {0x2, 0x401, 0x4}, {0x3, 0x0, 0x6, 0x4}, {0x68, 0xfffffffffffffffe, 0x100}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200400, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80100002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_newroute={0x24, 0x18, 0x0, 0x70bd29, 0x25dfdbfb, {0x1c, 0xb0, 0x0, 0x2, 0xff, 0x2, 0xfe, 0x6, 0x800}, [@RTA_DST={0x8, 0x1, [{0xfffffffffffffff9, 0x8001, 0x6, 0x5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) [ 175.915950] binder: 7268:7274 ioctl c0306201 200005c0 returned -14 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) prctl$PR_GET_NAME(0x10, &(0x7f0000000140)=""/4096) time(&(0x7f0000000080)) 07:12:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:11 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x6) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xfffffffffffffda2) fcntl$setown(r3, 0x8, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x10, 0x1, 0x914, 0x4000000005}, 0x2c) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000000), 0x0}, 0x20) unshare(0x4000100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000440), 0x0}, 0x20) [ 176.015304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7285 comm=syz-executor3 [ 176.042029] binder: 7293:7298 ioctl c0306201 200005c0 returned -14 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x4, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ftruncate(r2, 0xfffffffffffffff7) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 176.119697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7285 comm=syz-executor3 07:12:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:11 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) fchmod(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r2) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x89, 0x5, 0xffffffff80000000, "339c2ffcb603fd5dfeee23d9839da503", "bfad2374b3d16cf260fd47bd94d4cecf4c10cf686c071c769056f1239c025c24f9580f12f4c481a8ffa6f4a97a3535918b2925d81afb56829b186f4051baf15524513e4a52cec06bb5f5b06010eddbf652f7808f3dfbf01722f69df92c1c0fd2f71e8fd0885568e6f4fa2886ff78f9b2463b89e6"}, 0x89, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400000, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000140)=""/74) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0xff, &(0x7f00000001c0)="ed1e8e710e5590fe8131b1a9947e1caa01b90376f71a23943bb7fe75c774362e470fa0892db12eb36dd5835d691fc0e30b32f584641dd6ca91cf9264cde1d1efcf58280b27337291bc2617c3214576d04313aed8236bf68407b6426085e53e3ea2d4f81ea5f87b0054744effbc362b79092ec305af94758c5adb11935735b034a106483d48325aafa0a3369310acdd245f8b3a0745b5858647ad70bd92d739c70a7579eaf60d28b1c06237e2be277db68e15aa8c3e7f0ca5dcf7d4ed9328e6e919cafd2725c7234a54407d944690063a912dfc027476196285a4ff66d37df3683a5be8bd4240472d", 0xe8) listen(r2, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:11 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), 0x0}, 0x20) syz_emit_ethernet(0x11d5, &(0x7f0000000340)={@random='?(AMNJ', @random="460dbbf33d0a", [{[{0x9100, 0x0, 0x20, 0x3}], {0x8100, 0x100, 0xfff, 0x2}}], {@ipv6={0x86dd, {0x8, 0x6, "52ee29", 0x1197, 0x6c, 0x80, @mcast1, @empty, {[@routing={0x0, 0x8, 0x3, 0x9, 0x0, [@ipv4={[], [], @broadcast}, @mcast1, @loopback, @mcast1]}], @gre={{0x0, 0x0, 0x1, 0x2, 0x0, 0x400, 0x0, 0x1, 0x880b, 0x47, 0x3, [0x80, 0x5], "722408cf2d28b8efc2c90739e33c7d718ddca9d41ca2f9e79980b426e271fcc72c344668b8f07a02f85266570e4e9f51302ef9464889032bd5aa1b9508677258019af021841041"}, {0x0, 0x0, 0xfff, 0x43f8, 0x0, 0x0, 0x800, [], "f6c0af2b3ca4a68957ab9ad18fdca6b980e858c20986c072c6ce9c862f7572c555d14abadc02b4f2935a9713579b9b90f44b411e3fe33b68bbf72e1b4f49b889a04f1075dad50e08d57104f0bbd3a4025b0017f3a7fe9d8436a988378ca11c603547d8b51eba23221d13cb881d2fa2"}, {0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x2], "fc0d2a8d23e3842cba8941a626b44012cad1efc9306ece952f69daadc9416c793f90952adc82fb776620d5ae48e6b8a4f77a998a42fd0b0fee3cc41cf2d174222899bc383f4a92ced3040cb4c9f96f"}, {0x8, 0x88be, 0x0, {{0x80, 0x1, 0x9, 0x7, 0xffffffff, 0x4, 0x4, 0x4}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x40, 0xb6, 0xff, 0x101, 0x800, 0x1}, 0x2, 0x7f, 0x7, 0xfffffffffffffff9, 0x1ff, 0x80000001, 0x1f, 0x4, 0x40, 0x4}}, {0x8, 0x6558, 0x1, "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"}}}}}}}, 0x0) [ 176.271164] binder: 7319:7326 ioctl c0306201 200005c0 returned -14 [ 176.281567] binder: 7324:7330 ioctl c0306201 200005c0 returned -14 07:12:11 executing program 3: socketpair$inet6(0xa, 0xa, 0xfffffffffffffffc, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f00000000c0)=""/42, &(0x7f0000000140)=0x2a) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = memfd_create(&(0x7f0000000080)='cgroup)\x00', 0x2) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x1}, 0x2c) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e23, @broadcast}, {0x307, @random="338b1e1c8c3d"}, 0x5c, {0x2, 0x4e21, @remote}, 'bcsh0\x00'}) 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b40)={0x11, 0x0, 0x0}, &(0x7f0000000b80)=0x14) getpeername(0xffffffffffffff9c, &(0x7f0000000bc0)=@hci={0x1f, 0x0}, &(0x7f0000000c40)=0x80) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000d40)={@mcast2, 0x0}, &(0x7f0000000d80)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000dc0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000ec0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000001000)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001040)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000001140)=0xe8) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f0000001180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001200)=""/135, 0x87}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/182, 0xb6}, {&(0x7f0000002380)=""/151, 0x97}, {&(0x7f0000002440)=""/194, 0xc2}, {&(0x7f0000002540)=""/158, 0x9e}, {&(0x7f0000002600)=""/4, 0x4}, {&(0x7f0000002640)=""/233, 0xe9}], 0x8, &(0x7f00000027c0)=""/210, 0xd2, 0x7f}, 0x6}], 0x1, 0x10040, &(0x7f0000002900)={0x0, 0x989680}) getpeername$packet(0xffffffffffffffff, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002980)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000029c0)={'team0\x00', 0x0}) accept(r2, &(0x7f0000003d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000003e00)=0x80) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000003e40)={@remote, 0x0}, &(0x7f0000003e80)=0x14) getpeername$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003ec0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000003fc0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000004000)={@multicast1, @rand_addr, 0x0}, &(0x7f0000004040)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004080)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000047c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004780)={&(0x7f00000041c0)={0x5b4, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x288, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x8, 0x6, 0x5, 0x2b}, {0x6, 0xce, 0x3, 0x1}, {0x8, 0xe77, 0xdb58, 0x7}, {0x5788, 0x40, 0xfffffffffffffffd, 0x80000000}, {0x81, 0x7, 0x8, 0x101}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xde}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x27a}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x63dc0b7e}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x174, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfc}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x239}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x1000, 0x401, 0xfbe3, 0x2}, {0x8e8, 0x80000000, 0x7, 0x11}, {0x2, 0x833, 0x3, 0x1}, {0x6, 0xfff, 0x100000001, 0x200}, {0x7ff, 0x1, 0xd59e, 0x80000001}, {0x7, 0x0, 0x200, 0x5}, {0x8, 0x27, 0x7}, {0x40, 0x0, 0xfffffffffffffe00, 0x9}, {0x3, 0x7, 0x7, 0x20c}]}}}]}}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in=@multicast2}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) 07:12:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="475c6ea78009a734c61714a867ec4ec6c79b0ee268d470ab54d3be537aca4bf68518695df4b2eeebabe12d20a894822c8989cbd4359792c3c35ef98ad7f03678062536ef5659f5ac4abf2421ebaa9976bf50c1fd2f1469db", 0x58, r0}, 0x68) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) gettid() listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 176.598898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7379 comm=syz-executor3 [ 176.695160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7368 comm=syz-executor3 07:12:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 07:12:12 executing program 5: accept4(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), 0x0, 0x20000}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fchownat(r2, &(0x7f00000001c0)='./file0\x00', r4, r5, 0x400) listen(r1, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x20) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000400)={'eql\x00', {0x2, 0x4e20, @local}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000003c0)) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000004c0)=""/47) fallocate(r7, 0x40, 0x2, 0x79) fremovexattr(r1, &(0x7f00000005c0)=@known='trusted.overlay.impure\x00') ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000600)) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000580)={0x9, &(0x7f0000000500)=[{0x0, 0xfff, 0x0, 0x7f}, {0x1, 0x1}, {0xc12c, 0x8, 0x5, 0x1}, {0x3, 0x6, 0x8, 0x80000000}, {0x2, 0xd6, 0x9, 0x4000000000}, {0xdc9b, 0x80, 0x1, 0x6}, {0xb1d6, 0x7ff, 0x3, 0x4}, {0x4, 0x7, 0x5, 0x1}, {0x0, 0x80, 0x5, 0x100000000}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000140)={{0xe6ea449f968feda3, @local, 0x4e23, 0x3, 'wrr\x00', 0x8, 0x5780000000000, 0x36}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4e22, 0x1, 0x10001, 0x1, 0x2}}, 0x44) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) fcntl$getownex(r6, 0x10, &(0x7f0000000440)={0x0, 0x0}) ptrace$getsig(0x4202, r9, 0x3, &(0x7f0000000480)) 07:12:12 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0xfffffffffffffd08) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000240001000000000000000000000000000800040000000000b71db550b1dd69e6b5771d4fe3c567d1921366e1864f3d0d61df797f1c71fa53fb60aa1171759f2da4c216189c09abf9e8087b4a32fed5f9c0917473227fcc1ff8af0195125d4939bbc8c2b3a528e070bac13ec361574dbb76ef4918a1e57f2e201d9a0b170423f12af4ac2718dd93c4191e55668a"], 0x1c}}, 0x0) r3 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000280)=r4) ioctl$RTC_VL_CLR(r3, 0x7014) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, r0, 0x46) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) r5 = fcntl$getown(r1, 0x9) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000480)={[], 0x42b4ff55, 0x7, 0x0, 0x6, 0xfff, r5}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 177.132392] binder: undelivered death notification, 0000000000000000 07:12:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e25, 0x0, @empty, 0xfffffffffffffffe}, 0x1c) sendfile(r0, r0, 0x0, 0x2) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x3c) 07:12:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x840, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x1) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) write(r1, &(0x7f0000000140)="c2846dcfd8c791722560a3c16743fbfec416463043f4143c2696431964d4f6be1978440e9bf287000033275b64e87f8ddd047a4c76128d041894793e0ee93532afa2558cb6ca5c20771dc5ec11a606d75e13db913807e64e0b0b96889d58953b98615e5590be9ca6aba918a8291cea126b47ffdc1dd8510fd2dc429f140f718229b2a21b15959c0855512f73c9dfe11e1c06260ce9b396df9baff171f1fb6110e086cff370450396730094fe5125a46b9b7437a7051321094c4a853b569acae88b1ddc5b234fe92c23c7c478e33498", 0xcf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x4, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) fstat(r0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000180)=0x6c3, 0x4) wait4(r3, 0x0, 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:dhcpc_exec_t:s0\x00', 0x22) 07:12:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x101000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x4b8a, {{0x2, 0x4e20, @local}}}, 0x88) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfebb, 0x4004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote}, 0x2c7) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x2b, "b489fb1a4b18469d475fb2f3c862639ba49bb6884b38de1da2e7cd02b6557e93ea9aa812c48510c49e8a60"}, &(0x7f00000000c0)=0x4f) 07:12:12 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 177.272043] binder: 7410:7423 ioctl c0306201 0 returned -14 07:12:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e21, 0x0, @loopback}, 0xd7152792689394ac) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000140)=""/250, &(0x7f0000000080)=0xfa) fsetxattr(r1, &(0x7f00000000c0)=@known='com.apple.system.Security\x00', &(0x7f0000000240)='lo[@bdev:\x00', 0xa, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x0, 0x0) r5 = dup2(r0, r0) r6 = dup2(r0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x208000, 0x181) r10 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x0, @remote}, &(0x7f00000002c0)=0x80, 0x80800) r11 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000003c0)) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x101001, 0x0) r13 = socket(0x4, 0x80000, 0x3) r14 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) r15 = open(&(0x7f00000004c0)='./file0\x00', 0x8000, 0x20) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4804}, 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:13 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgrnup\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40, 0x0) dup2(r0, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x5) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xf) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:13 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:13 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 177.983106] binder: undelivered death notification, 0000000000000000 07:12:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x3) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 07:12:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0xffff}, 0x4) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa081, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x74) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x70, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:13 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x1}, 0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) listen(r1, 0x5) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x10, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}, 0x200000}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4031020}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="040329bd7000fedbdf250f00008034000300140002000000000000000000000014000600fe80000000000000000000000000001408040100020000003000030014000200627071300000000000000000000000080008000100000008000500000000000800030000000c000300080004000000000008000400090000000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x80800) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30) [ 178.325804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=7500 comm=syz-executor3 [ 178.551690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=7504 comm=syz-executor3 07:12:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000140)=""/76) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x6, 0x7f, 0x0, 0x7fff}, 0x14) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x3) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 07:12:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) write$P9_RREAD(r1, &(0x7f00000000c0)={0xb0, 0x75, 0x2, {0xa5, "5f64dd090a63c04cfc9db8a153e0e8ff097487e19c3d3eb4f966248708963a532356a1384648197649d9704088c6c4e33d1b8f2424d916c221defe4571c4eddaafdb86a4104bb7e989a96dda3a73bbf6d498d1be25e172c036f9fcf6b4ebdf97024832d9b51a39bc80febedb86a9dc5869143ad9295bee18c9b746c6a89d4ea8dfcda8d37e04e62ee3a550180e680d56d6d660be4de5a942f4de88fff5bc9f021e21628ed1"}}, 0xb0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:14 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 178.839641] binder: undelivered death notification, 0000000000000000 07:12:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x200, 0xd0, 0x8001, 0x9, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=@dstopts={0x0, 0x0, [], [@jumbo={0xc2, 0x4, 0x6}]}, 0x10) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r4 = getgid() setgid(r4) 07:12:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000008) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) accept4(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80, 0x80000) listen(r1, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) socketpair(0x4, 0x7, 0x3ff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) 07:12:14 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:14 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x14402, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x7, 0x2, 0x915, 0x4000000004, 0x1d, r0}, 0x2c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000140)={0x8, 0x2, 0xffffffff, 0x77, 0x1, 0x8}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0f9f308ae8c2d98ca5583300000007"], 0xf) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r3, 0xf, 0x2}, 0x14) [ 178.978637] audit: type=1400 audit(1542870734.395:25): avc: denied { create } for pid=7536 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_iscsi_socket permissive=1 07:12:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) fallocate(r0, 0x60, 0xf8a, 0x94e5) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x5}, 0x28, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000180)={0x6, 0x1, 0x2, 0xffffffffffffffe1, 0x8}, 0xc) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000140)={&(0x7f00000000c0)="851c", 0xfff1}) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200)) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000280)={0x68, {{0xa, 0x4e23, 0x5, @remote, 0x3}}}, 0xfffffffffffffd84) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) time(&(0x7f00000001c0)) 07:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$packet(0x11, 0x3, 0x300) accept$packet(r2, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 07:12:15 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 179.666887] binder: undelivered death notification, 0000000000000000 07:12:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = memfd_create(&(0x7f0000000080)="9c73797374656d6b657972696e67657468316d643573756d00", 0x7) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x4e23}}}, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) io_setup(0x6, &(0x7f00000000c0)=0x0) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xeb62c35dcbd5cffe, 0x6, r0, &(0x7f0000000200)="ea3d16436d19c44801702532506676ca19ae1632b10f3d6b3f0b93aac59c46c5720f670f7be2ccd7b875b0e376a5351ad7090b4a58e32fb7bf222ab7d99c56e9fd30e910edbf1bee34c71b712c5187b54f25fd2d55b1640210727f91e018b9dc5d8c1843bf881746e889a757b6dc3555189f8f825c014d34cda6fa7779e0c86c1022b55184a1e068665a73aa7793f888a1ff1ede91644006caaa9050409cfd73d0da46841df85c9fa5604635d924db3b4b0aa9ae0c17", 0xb6, 0xbbf6, 0x0, 0x0, r1}, &(0x7f0000000300)) listen(r2, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) write(r0, &(0x7f0000000280)="4d5471b3359dd7659883f0eed28b07d94c1dddd1ee22bd0ac99d2b7b096a7fcbecdc52f13892a857cd17e589f6044d7c2ba6dd25f9abcbba1b4df04ce83dd61da612ae6385470547c8140d7516eb2abd2128227fcc80670433602932e8820637d4281bd992f6003245441784df2d34dd892e20189854af58ea197f", 0x7b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_vif\x00') syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @local, [{[{0x9100, 0xa82f, 0x1f, 0x4}], {0x8100, 0xffffffffffff69fc, 0x5, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0x2}}}}}, &(0x7f0000000380)={0x1}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000240)=""/12) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2002, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/228, 0xe4, 0x2000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 07:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x2, {{0xa, 0x4e23, 0x1, @mcast1, 0x48}}}, 0x88) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 07:12:15 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x3) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x8, 0x6, 0xf0}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team_slave_1\x00', 0x10) 07:12:15 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)={0x5, 0x0, 0x4, 0x7ff, 0x5, [{0x5, 0x2, 0x4b2, 0x0, 0x0, 0x800}, {0x80000000, 0x3, 0xe5d5, 0x0, 0x0, 0x4}, {0x7, 0x4, 0x0, 0x0, 0x0, 0x2000}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x604}, {0x1, 0x2b, 0x5, 0x0, 0x0, 0x400}]}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) r1 = socket(0x5, 0x6, 0x3) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, 0x0}) 07:12:15 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$getown(r0, 0x9) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x110) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000180)={{0x2, 0x3, 0xa6e4, 0x0, 0x4}, 0x8, 0x4fec, 'id0\x00', 'timer1\x00', 0x0, 0x136d, 0x0, 0x65, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000280)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e23, 0x9}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0xfffffffffffffecb}], 0x1) 07:12:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) 07:12:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 07:12:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="00002001", @ANYRES16=r2, @ANYBLOB="080325bd7000fbdbdf250f000000280002000800070000000000140001000000000000000000000000000000000008000b0002000000500001000c00070008000000010000000800090070000000080004004e2300000c000700060000001000000008000b0073697000080009004500000014000300fe8000000000fcffffff0000000000bb080006000800000008000500050000000800060001000100"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x80) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:15 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x91b2, 0x3}, {0x0, 0x9}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x2, 0x912, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)="9c657468302100", 0x7, 0x3) r2 = dup2(r1, 0xffffffffffffff9c) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000001200000051d3ba1803e3f5072fdb7b1485c22b7c0b14"], &(0x7f0000000140)=0x36) [ 180.159183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=7651 comm=syz-executor2 07:12:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 07:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="bdcc6b43402584fb167391a8520366a53034539bd43fcf8f62ca337f50c51b7830e43a2bc8a874b7a0bce1553e9a3d1b37a49d636a962f740c90280eccfd19cab39c497fe09d99c8a9683b18b35dcb129c89f424a33d0ea5fa75e8e5e31425d9b2eaa333316cf8f98713b32fc91a0b9453cb74ea59b1d107420a358c6f98653ac1ffbbb0f1819ee789da49ef021a7f4d56cce9ced9ccb07f068c8ee054a2823c1d69b6ded85fbe4d67491690d6bc4b68e042911929da18438ec38461dcc7192048ae03703f7bb93051d3160e13859438cd5023bb93", 0xd5, 0x7ff}, {&(0x7f0000000240)="255c711c481004ba08d3e3a043ecf8f0a8ab322919198a9d20f9a541ab8b825cdb83ce825c5de199a347b50a4818924d10a8d3abca79c276eac5c56c5ca75ea3ed354b1954185470a9", 0x49, 0x5}], 0x100020, &(0x7f0000000500)={[{@fsync_mode_posix='fsync_mode=posix'}, {@data_flush='data_flush'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x36, 0x31, 0x66, 0x39, 0x34, 0x34], 0x2d, [0x77, 0x66, 0x79, 0x39], 0x2d, [0x36, 0x34, 0x77, 0x38], 0x2d, [0x7f, 0x35, 0x66, 0x3b], 0x2d, [0x0, 0x33, 0x77, 0x39, 0x35, 0x76, 0x0, 0x37]}}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, '&'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'cpusetwlan1eth0trusted[nodev'}}, {@fowner_lt={'fowner<', r4}}, {@dont_hash='dont_hash'}, {@fsname={'fsname', 0x3d, 'vmnet1'}}]}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) 07:12:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)=""/66, &(0x7f0000000040)=0x42) [ 180.208559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=7661 comm=syz-executor2 07:12:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 180.332947] netlink: 64 bytes leftover after parsing attributes in process `syz-executor2'. [ 180.358584] netlink: 64 bytes leftover after parsing attributes in process `syz-executor2'. 07:12:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0xfffffdfd, &(0x7f0000000540)}) 07:12:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28}, 0x10) 07:12:15 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000140)="19693095cf1038f7930d336b7de655b4467e277adfc4eb070d40cc947f80f99c0e25992951a2f0cb10748fb07d029a0a039a0559ed581f6376e82c5735b8f1cd688f568fda8c4e7d", 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 07:12:15 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCEXCL(r2, 0x540c) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x3) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c561def9f38ffff81004e220000000058000b4824ca944f64009400050028925aa800000000000000000000000009ff09000000fff5dd000000fcff0000040e05a50000000000000000", 0x58}], 0x1) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$RTC_UIE_ON(r3, 0x7003) connect(r1, &(0x7f0000000180)=@l2={0x1f, 0x59db4e2b, {0x1, 0xffffffff, 0x50, 0x4, 0x7, 0xaee7}, 0x10001, 0xff800000000000}, 0x80) getsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:12:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x7, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = dup2(r0, r0) write$eventfd(r1, &(0x7f0000000000)=0x7, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x10001, 0x4, 0x2, 0x80000001}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={r2, r3/1000+30000}, 0x10) 07:12:16 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x0, 0x6, 0x70e}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) signalfd4(r2, &(0x7f00000000c0)={0x3}, 0x8, 0x80800) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e23}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$UHID_DESTROY(r3, &(0x7f00000000c0), 0x4) 07:12:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x1a, 0x2, 0x2000000000914, 0x4000000005, 0x4}, 0x28d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r2, &(0x7f00000001c0)=[{{r3, r4/1000+10000}, 0x16, 0x401, 0x9}, {{r5, r6/1000+30000}, 0x0, 0x8000, 0x4}, {{}, 0x5, 0xe3, 0x8}, {{}, 0x1f, 0x2980, 0x3}, {{r7, r8/1000+30000}, 0x17, 0x400, 0xffffffffffffffe0}, {{0x0, 0x7530}, 0x1f, 0xc3, 0x800}, {{}, 0x16, 0x0, 0x11}], 0xa8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200)="59eacc4217ce20c04bd783bf0dbaab613a7a7514f3501b94b11a73215a277d0aa26d510bf359561a", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="a7e82de8b618fa5884d78acd7a44732fb80e863e2dd9e7b12f654532521e374f7b4c6eecd260f48e8752295b8214a4d20c9e04cc6ccb30f320149c567b0d57b03eaa366830ff9038bc16a17b23f5e1f9d83432ed24374b8d4364ba60e03ed40b3c3a42bb0f4401960e", &(0x7f0000000140)="a75089f99b9a3e36b9fd907e054213dd7cc1a2311a2341fe45a542480b371fa58362aee9728437d90704656d28d77d3727c6c8b674ea2193e651453bae58956b6ba3847b3de8c993b3b1ab6b74b19c4422543d9a8c9a3c30ab14c92b59826fc82f4ca49f5537aea92f4bde80d73be8bdbabf05961fc87946f5ec216be670ae610ea743665c7d66e01081cbc199b59d36048f058758df85d79edef0230a6be73d284ea2409ff225af521257e36bd5aa45e57e496837e8ea0152b39b132d", 0x1}, 0x20) 07:12:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x70, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10630840000000000000000004630440036363404001000000000000000300000000000000000000001002000000000000000040000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="856164660000000000000000000000000200000000000000110000000000000096b16c50d77fd8b8e157d7ce6c519291e9a837f75ce7c1890b599882c8feadda0fcdf0c5b283f03c92a50c767f8770e99260d15c47f60ce2ce327e938f5444b68626664e4ad0bedfbc585bec8b427a40667f65690c532bfb26fe6f5c2451d16b7d8b001fc31d616d0186471c3530620d1fd459fb8a3d895ad5b7542403a3810b6444f31626d4382db5e73bbaddcaa77416a35efec63e4b"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000040000000000000006800000000000000000000000000000069accd56780da581780000000000000000000000000000004800000000000000"]], 0xdc, 0x0, &(0x7f0000000300)="746c86a22c0b27323e30264193db1e5964c08436c12280df5f89709f18a6490a59f1ad4b4550a34a72b02a71e802e6022c3f8a8fa0f8dab87440d0406a0506afb14c0f0df72a134a00871958365f434e37018fcc84d8b4a0cc8da3bfb9ac2040bde786fbb068596a72e4ab6fdfed8b9a3b826a152508199de1acc5ff093f3f0a5b5860f3827d9ae3eda442cb5e2af3d7c853ea2f025ca14c9d13eb737304097a58875176b33c1fe7e7acf144dbcc6b4c4afb6805e77569fe5df94963c9f7ccf748dcb7f30bd9f9cd2bb1a9d10bca3cd40db32fe00eb59f4c861994cb"}) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f00000004c0), 0x4) ioctl(r3, 0x10001, &(0x7f0000000140)="fef2683dbb19c35dfe2e5cabe9fe25f978fae4bb151437534c8e768b3bb3d03f68c1b4a23d820e7ee369eead6e7bf56590c42ffd3a74cd283e8eba2303863050cc6cf39e6efcf9a986b1b90bf64ac724317b75c3e7c49a01ec2d6319168963323c0c59b76400051867638f8d06eb5948fb4d15074f1e2941ad3727d2ad08dd0591ab61c53ac02b841e6b011df7d3ff4dada918d765874a") ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000600)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x40, 0x0, &(0x7f0000000640)=[@free_buffer={0x40086303, r4}, @clear_death={0x400c630f, 0x1, 0x2}, @clear_death={0x400c630f, 0x2, 0x1}, @increfs_done={0x40106308, r5, 0x3}], 0x1d, 0x0, &(0x7f0000000680)="7ac3d5b73921c5cde9a097884fb8ea3bfc812db573de02517734309738"}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e23, 0x6, @mcast2, 0xfffffffffffff04c}, {0xa, 0x7, 0x10001, @mcast2, 0x8001}, 0x6, [0x9, 0x7, 0x7, 0x101, 0x100000000, 0x7, 0x8, 0x401]}, 0x5c) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000500)={0x100, 0x6c1a}) socket$unix(0x1, 0x2, 0x0) poll(&(0x7f0000000080)=[{r1, 0x1}], 0x1, 0x401) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x400400, 0x80) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 07:12:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') bind(r0, &(0x7f0000000140)=@in6={0xa, 0x4e24, 0x4, @loopback, 0x9}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pause() sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:16 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:16 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:16 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:16 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x23, &(0x7f0000000140)=0x6, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "68c6244e9c5083254632ae970323fc7f3b86efc81bbe1d5b976663785b916936"}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x404001) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:16 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 3: socketpair$inet(0x2, 0x80004, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='tunl0\x00') r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000800)=ANY=[], 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xfffffffffffffffd, 0x8, 0x1f, 0xa3, 0x0, 0x15, 0x10000, 0x4, 0xbf, 0xb796, 0x6, 0x1f, 0x5, 0x3, 0x100000000, 0x401, 0x64, 0x0, 0x3296, 0x1, 0x1f, 0xbf, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x9, 0x8, 0xd4f0, 0x0, 0xda3, 0x80000000, 0x5, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x13}, 0x1000, 0x7, 0x2b5d, 0x0, 0x6, 0x10000, 0x3}, r4, 0xc, r3, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(r3, 0x10, &(0x7f0000000200)={0x0, 0x0}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(r5, 0xf, 0x0, &(0x7f0000000240)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[], 0x0) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[], 0x1da) fallocate(r6, 0x0, 0x7fff, 0x4003ff) write$cgroup_type(r6, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r6, 0x3, 0x5e89, 0xfff9) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000003c0)={{0x2, 0x0, @rand_addr}, {0x0, @local}, 0x0, {0x2, 0x0, @remote}, 'nr0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00001fefe4)={0xa, 0x4e21}, 0x1c) listen(r7, 0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000000c0)=0xf3a25e5c491802af, 0x4) [ 181.763651] sched: DL replenish lagged too much 07:12:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r1, 0xffffffff) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x16) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x2b0a, @mcast2}, 0xfffffc5f) listen(r1, 0x5) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:17 executing program 3: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f0000000140)="8d644e218901258abe9ef19e143a9fbe2c822d670008c2f8e19cd85fdadad065af6a4e7927103afe3d3d7f5451e407e4f3643625e7141264fc766e0355695284a3996d1ddd8ed6d03973bc1fe42ca7f8689006c4a128f261dc098d5318b4e4e0a1360fd6ea149c7c75cc1f2e7b4b4a8cba49fdfe30dfb2a35e301cdedc5d77564fe606e9a44d8f8120fa0019f6660d79b343371d7e86f4307aaa730338b8828233d46bb73f6e4cbe9323205b12d849d1e48a26d21d9cd23fe13f4f4c7698b8a60e0af9820fd4e86f2c", 0xc9, 0x800, &(0x7f00000000c0)={0xa, 0x4e24, 0x3ff, @remote, 0x7}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 181.999403] binder: 7843:7848 ioctl c0306201 200005c0 returned -14 07:12:17 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8080, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/relabel\x00', 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x201, 0x81) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) fsync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_adjtime(0x5, &(0x7f0000000140)={0x7fffffff, 0x6, 0xa4, 0x5, 0x4, 0x85ab, 0x8, 0xe0a0, 0x79, 0x7fff, 0x101, 0xffffffff, 0x5, 0xfffffffffffffffa, 0x40, 0x2, 0x3, 0x0, 0x58, 0x4, 0x3, 0x9ce2, 0x101, 0x3, 0x3, 0x7}) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x0) 07:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x800005) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e23}, 0xfffffffffffffd60) listen(r0, 0x8) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) recvmmsg(r1, &(0x7f0000000f40)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/166, 0xa6}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/179, 0xb3}], 0xa, &(0x7f00000008c0)=""/34, 0x22, 0x40}, 0x40}, {{&(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/175, 0xaf}, {&(0x7f0000000a40)=""/104, 0x68}, {&(0x7f0000000ac0)=""/245, 0xf5}], 0x3, &(0x7f0000000c00)=""/43, 0x2b, 0xaf9}, 0x400}, {{&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/44, 0x2c}, {&(0x7f0000000d80)=""/105, 0x69}], 0x3, &(0x7f0000000e40)=""/221, 0xdd}, 0x20}], 0x3, 0x10000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/enforce\x00', 0x100, 0x0) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000001080)={0x5, &(0x7f0000001040)=[{}, {}, {}, {}, {}]}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000280)=""/172) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000140)={0x3, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:17 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x293) listen(r1, 0x205) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x220, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) 07:12:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x80000) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:18 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40080, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x17, 0x0, 0x3, 0x22a, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sec_ctx={0x201, 0x18, 0x8, 0x3, 0x1000, "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"}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2d}, @sadb_ident={0x2, 0x0, 0x3, 0x0, 0x7f}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_sa={0x2, 0x1, 0x4d6, 0x7b7, 0x80000001, 0xb, 0x3, 0x80000000}, @sadb_key={0x18, 0x9, 0x5b8, 0x0, "12fcf3a32758d5c18874da301bf02df0c95b6b96ec571d979da7694cfaef62228ad153e1fff025775b8a47fff066e67f14b4b82c1bc192d72ae573712aad799d7abd71de535d56b7a486ffd8aff697fccf0b1ebad6f22d1858dc8db0a994e40c95c8083bdb33af296018a84c56f3704055d7cf7ba2775a428f676a8d2c1b80399773d97999b261b3f29ed30aa50785915b2bce4e8bdb03727b334b6354d27a05a0880b3006346f4e92708094db31a4bb5aef5b077ebd47"}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bbc, 0x80000000, {0x6, 0xff, 0x9, 0x7, 0x0, 0xffff, 0x0, @in=@loopback, @in6=@mcast2}}]}, 0x1150}}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff8100c0e8d6262a5f8a110b4824ca944f640c9400050028925af0fffeffff09be46f0cc883f86c82e000000fff5dd00000010000100000c09", 0x4e}], 0x1000014b) 07:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="7a46597fdf78c46dbfc3dc2e457af2ab", 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x18000000000000, @dev={0xfe, 0x80, [], 0x1c}, 0x101}, 0x1f8) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:18 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10108000000006) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = open(&(0x7f0000000280)='./file0\x00', 0x200, 0x80) write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x12, 0x2, 0x3}}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x3}) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x9) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000014929fdc26c483c3bab8837c03359e96ddced3783079bae4808c0f"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000140)={0x5, 0x10000, {0x54, 0x8001, 0x1ff, {0x2, 0x6}, {0x7fff}, @const={0x8000, {0x6, 0x6, 0x241, 0x4}}}, {0x53, 0x1, 0x9, {0x7, 0x6}, {0x0, 0x6}, @period={0x58, 0xfffffffffffffffc, 0xffffffff80000000, 0x5, 0x7, {0x1, 0x3, 0x3, 0x4}, 0x9, &(0x7f0000000100)=[0x43c6, 0x3ff, 0x8, 0x7ff, 0x2, 0x7fff, 0x401, 0x9, 0x5]}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 182.854743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 182.879664] binder: 7938:7944 tried to acquire reference to desc 0, got 1 instead [ 182.888743] binder: 7938:7950 unknown command 536872576 [ 182.896958] binder: 7951:7953 unknown command 0 07:12:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) fstatfs(r0, &(0x7f0000000140)=""/181) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x800, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x20010, r0, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000240)={0x5, 0x4, 0x7, 0x80000001, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x140, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0x1, 0x4, 0x5, 0x5, 0x1000000000000, 0x8, 0x5, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x5}) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) mknod(&(0x7f0000000280)='./file0\x00', 0x8420, 0xbe11) memfd_create(&(0x7f0000001300)='\x00', 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000300)=""/4096, &(0x7f0000000080)=0x1000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 182.901739] binder: 7938:7958 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 182.905994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 182.933688] binder: 7938:7950 ioctl c0306201 20008fd0 returned -22 07:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e22}}) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = dup(r0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)={0x10002000}) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000100)=0x400) [ 182.958913] binder: 7951:7962 ioctl 406855c9 20000140 returned -22 [ 182.977978] audit: type=1400 audit(1542870738.395:26): avc: denied { map } for pid=7961 comm="syz-executor3" path="socket:[20807]" dev="sockfs" ino=20807 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_tcpdiag_socket permissive=1 07:12:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x20000000006) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x1, 0x10000) sendto$inet6(r3, 0x0, 0xfffffffffffffffb, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x1}, 0x1c) 07:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = getpid() r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000080)) fsetxattr(r0, &(0x7f0000000200)=@known='com.apple.FinderInfo\x00', &(0x7f0000000240)='{{\x00', 0x3, 0x3) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) waitid(0x1, r2, &(0x7f00000002c0), 0x4, &(0x7f0000000300)) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0xce}], 0x1000000000000066) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003180)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000003280)=0xe8) sendmsg$nl_route(r3, &(0x7f0000003380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)=@ipv4_newaddr={0x60, 0x14, 0x0, 0x9, 0x25dfdbfd, {0x2, 0x1f, 0x90, 0xff, r5}, [@IFA_FLAGS={0x8, 0x8, 0x169a41c84c4ec68d}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffffffffffffc, 0xfd6, 0x1, 0x20}}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x30}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x8}, @IFA_LABEL={0x14, 0x3, 'gretap0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4) [ 183.024886] binder: 7951:7953 ioctl c0306201 20000040 returned -22 07:12:18 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) sendto(r2, &(0x7f0000000080)="dcb5e1fdd5fe47dbfbc2adf46863ad6f9d668f7b338acfec615eea66ed673d1331e4dac1a4a5a65fc5b46649839198dde37c03ad07dc6ce282076c4ddc2c", 0x3e, 0x50, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x80007385, 0x0) r5 = dup2(r3, r4) ioctl$int_in(r5, 0x5452, &(0x7f0000e35ff8)=0x45) r6 = getpgrp(0x0) r7 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x19e, 0x0, &(0x7f00000001c0)}) fcntl$setown(r3, 0x8, r6) rt_tgsigqueueinfo(r6, r6, 0x10, &(0x7f0000000100)={0x2b, 0x6d64772a, 0x2, 0x9}) fcntl$setsig(r4, 0xa, 0x12) r8 = gettid() tkill(r8, 0x100000000000016) clone(0x20084005, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r10, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x80c0) [ 183.087733] binder: 7967:7971 ioctl 4b45 20000100 returned -22 [ 183.104470] binder: 7967:7971 unknown command 536872576 [ 183.118750] binder: 7967:7971 ioctl c0306201 20008fd0 returned -22 07:12:18 executing program 0: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/access\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000600)={{0x0, 0x1, 0x3625eaa9, 0x7, 0xe7, 0xff, 0x18, 0x10000}, "eeec77f126ca2c195b53ae2bd1b770875cdf634c665ab95a5c3f6180906a00d1c3625b275b3c919a1d5e4b31f0741298fd267b71fe707e57aa57253ea7ff12420825464fc9ffe13a9a0348f5691a21f92260838393a45a6cd1716fad155fb09723fa216b19fa1f07b27e061180fdb22cd5d6aa152e47e36f0e82a992d9e078938f260a8a1295d0f3aada96a79698fbd9a3d819e5d9299e9a945ff93ca652383177b0a85b63985bad8e3dc2ce71d2ad63afa29462b99f7bb8090c18a1e19653f057357a89964af93ecb8ade2a7f4e3c32615f9cc501e53b85f3f7173d1b6a", [[], []]}, 0x2fe) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x2) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000), 0xffffffffffffff74, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 183.164833] binder: 7967:7989 ioctl 4b45 20000100 returned -22 07:12:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 183.237942] binder: 7998:8000 unknown command 29452 [ 183.243813] binder: 7992:8001 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 183.244469] binder: 7998:8000 ioctl c0306201 2000dfd0 returned -22 [ 183.296896] binder: 7998:8007 unknown command 0 [ 183.303158] binder: 7998:8007 ioctl c0306201 200005c0 returned -22 [ 183.348261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7996 comm=syz-executor3 [ 183.362495] binder: BINDER_SET_CONTEXT_MGR already set [ 183.362501] binder: 7992:8001 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 183.375496] binder: 7992:7996 ioctl 40046207 0 returned -16 07:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1e3f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bba88e8cbf029ab0317541baeaaf080000004928f0a50b91f69c824f25bf758af0cb7c0b82000000000000"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) sendfile(r1, r0, &(0x7f0000000100), 0x7fffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:19 executing program 5: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r5 = getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) stat(&(0x7f0000007440)='./file0\x00', &(0x7f0000007480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000007500)={0x0, 0x0}, &(0x7f0000007540)=0xc) r9 = accept(0xffffffffffffff9c, &(0x7f0000007a40)=@pppoe, &(0x7f0000007ac0)=0x80) r10 = signalfd(0xffffffffffffffff, &(0x7f0000007b00)={0x9}, 0x8) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000007b40)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000007b80)=0x1c) r12 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000007bc0)='cgroup.subtree_control\x00', 0x2, 0x0) r13 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r14 = bpf$PROG_LOAD(0x5, &(0x7f000000cd80)={0x17, 0x5, &(0x7f000000cc40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f000000cc80)='syzkaller\x00', 0x4, 0xb0, &(0x7f000000ccc0)=""/176, 0x41100, 0x1, [], 0x0, 0xd}, 0x48) r15 = openat$pfkey(0xffffffffffffff9c, &(0x7f000000ce00)='/proc/self/net/pfkey\x00', 0x440, 0x0) r16 = socket$unix(0x1, 0x7, 0x0) r17 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f000000ce40), 0x4) r18 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000000ce80)='/selinux/status\x00', 0x0, 0x0) r19 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f000000cec0)={0x0, 0x0}, &(0x7f000000cf00)=0xc) r21 = getgid() r22 = getpgrp(0x0) getresuid(&(0x7f000000cf40), &(0x7f000000cf80), &(0x7f000000cfc0)=0x0) fstat(0xffffffffffffff9c, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f000000d080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r26 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f000000d0c0)='cgroup.threads\x00', 0x2, 0x0) r27 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) sendmsg$netlink(r0, &(0x7f000000d1c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000079c0)=[{&(0x7f0000000440)={0x21a4, 0x1c, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x20, @ipv6=@loopback}, @nested={0x10bc, 0x32, [@generic="1387f15c23ed0137fe21df0691cb80e75d4adaab6ac0da19a07615a68672ec1d65e2896bc024a8ffc03b9261fd5b24a051bab564737e1999f1f48239a15e8c3fe8632b92ac47ba41abc8b8a15577d2b81ec2e6af1d7787465c6f9047617ce5b68281bf6ef0fad5eede7c47cbe8ff539bf653f85e29c7a7ca78a1e889881db6121480d7cf1cf951c52cc5c71290c3742a41849e8f5bdd0b2aae921fb403dc7ca790ddb68f64ee8a7e31570d7a9fbd2c69", @typed={0x8, 0x84, @u32=0x8000}, @generic="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"]}, @typed={0x8, 0x86, @pid=r1}, @generic="71e29d4456b9773d9ab0f428cdef598d1942eebd9032d6321826735e5d808b472fa06dd1005913fde409a63be365cc95736ebe7bfd9d5976fa06cb0fdd06f68941069a548fc829664d237356", @nested={0x1070, 0x8b, [@generic="19159a59902fd6c15bf3fcccbba01146522b236a24bc9fcaf2f3e105b827fe0a159fbef8430d9974d4696c5865b2962e5f8fb5680fef488f24d1efbd477bbf6086ebcd3939aa0b203cc9f6913054faf4b6ddee73dcb8b37d57af66064eec5675d6f95aeebc802dfa2dc8bf", @generic="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"]}]}, 0x21a4}, {&(0x7f0000002600)={0x10c, 0x31, 0x8, 0x70bd29, 0x25dfdbfd, "", [@generic="880ec476d060cc9a69d50525cb4bdce6c9093537d5a34ce9ebd22f1509350cce7b152ea96ecb5a9320ac0b71f9082991659f64e3b142b33aa21cdc7e64a31835e9ca80585064512b87b087aba7c5c130c5b712c9f2c962e5efa64f8f2b4f7e6f5507fe99f9801ba3b6ff16bbfef6e57fff83d29750166fd3a53e917cd497079159b1a2b1a10e9a0a66697732451dda376179c5a46236ca6d77845431b7977e360645b5fa058471934cb4219d16e63812d25bca1acc33ddb991d44336e4702acd3eb107ae8da31bf961a470c4a8cca466509f933f733f72cf3999bc279c955e972924fe9cc79647931620280a845c1ff2", @nested={0xc, 0x37, [@typed={0x8, 0x20, @uid=r2}]}]}, 0x10c}, {&(0x7f0000002740)={0x2750, 0x3b, 0x0, 0x9, 0x25dfdbfd, "", [@generic="4d1a1a11cef8e3db9bddf3023d23b5c86a0aae9f145464de32b2e848789b7a9b6a1c927627d4e8bedef0bd5924df5c4c", @generic, @nested={0x238, 0x10, [@generic="04a72f77ff02538df5a745d011ce366ff4155a74e3b52a36d4d5ad8d4232d6f81178d51068068e456a89950e8ec11a956128395571fcf2c0bc8015a88c9dc6742aef31f5ba4add866303b31e29903249c2da72c0ae0c", @typed={0x1c, 0x15, @str='security!!^}vmnet0%-\x00'}, @typed={0x4, 0x3}, @generic="ed7f3d52e637fed8dbc6e9f4781950ce63de4910c5f77b3f1a920eb8634288d63ffa78a92aa8b7504bc535fa5706122a16b0efc21e3cbc1576c21f94ba6f8339577f0581449cb29f4dca63d401cb2f070c5b697513d74de6fa43a271563c114afb36b7fc4b2cf9b309bbd68762591631f0217f551485314be16d41c895f7b1cb215f3a50240a744c951f38aa6f75b1e7b1a750fc91bf348fdaec0a9757c28b265d62a35cc1efb2350b2cba5bc6a08b0d5ec30d29fbc08b1d103aef6aaf8b36c0f44692e8f4d105db7d4883b3a1fc28836031ad18fe3f89d7a0705b75c9019d00d20d8a0fb9a56a0cd8a3", @generic="add170d7d7a5ccc0bb66b0243b80536e8b05689e97859f1bb63340836bb881c892fbcd1eca39ce26296de348069327a57fc8dd727fd7aab535bc240bbff95e57f682fc15b2c9b143e7cf54e6a95c5e1f55a3dac05d4306e24646417295b46daaa4c4fa23e7befdbd4add75a4662a9038bcb52d72f8667cee6d3fe3e75c3b69664eee73bb0b2db7adc194497c9aee4cb47220668e4984058b65dc6089a6d177f89828fee63c70094807e50f2a892176ce253e1cf260476450f59d6741c2358332d15ef543efd8ca30aaad9026c885de3a22ed5f"]}, @nested={0xc0, 0x15, [@generic="b9720ce13a6723bd91ea485efb83c2189481d86b1c99baa690ce29765dad4dfd9ea7a0faae78a71ef31548ebd5956db2aaebee433298102c16c8b27c233039e30df035ff3058cf8c40e9f83d96443689e211fbdcbda7918ae7db2931d7ad651ef21304443b5e1bcf05e37cf08409d419e18a66968f346aee30e63c738d9e32d3326a826ec9cc14c4d89c0ce379e721037c4daa8eb1796039a434bc22b83c8d5aa2a9888b180cbb092b736aac5975f5159eacee242e6d33b4586064"]}, @nested={0x20c0, 0x7, [@typed={0xc, 0x21, @u64=0x2}, @typed={0x8, 0x19, @uid=r3}, @generic="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", @typed={0x1c, 0x3a, @str='*bdevbdev!{{GPLwlan0:\x00'}, @generic="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", @generic="ff69d4b95f1277cc34fa181e52de38d0bb0726b9b71dfea7728a72238c6bf6879af6e99dce9de149a04127262332d28ffb4c1dd83aab7e949588e2386e6599d47a16720e36f8f4c541c8b888df41f4b2e4f8fa132150657c0148f33c1ffeb559eebf2c7d1be35ea252af191b6232e6e8b939185a57b2ac46c435fa655e22af21da94d94d3a0c079239973a7d"]}, @generic="13f050c27f", @nested={0x350, 0x15, [@generic="f807b71f88d5d39966c4ea30e4a12cd20ba33c65e9a6a3d779493c6df622cb5bc972de21df0e2af89c93ac9be85196619e5706607231e366756feffacabb05327fd0cf81fa99bf31605ebc", @typed={0x4c, 0x7d, @binary="d4bf0e78e980bf05fa3fc2e7ac09f092cd2417437d0d82522850a6cc954098ced4cea3da89ab7a6d49065709ce03864ca5c57b9e29b10641ed58e6da3cd0700ecfc118e222"}, @generic="36b930434fdc795d872c6bab10f1874522234dc8540d21eae717d942b5bf75d0d2a212bdbbc260f3a8686355d9410063e1bc7e6abef43fda", @typed={0x8, 0x66, @uid=r4}, @typed={0x8, 0x1, @str='\x00'}, @typed={0x8, 0x5e, @u32=0x1}, @typed={0xc, 0x8c, @u64=0x80}, @generic="a0d826018cc54df2d390708488eb937ad624c1304cf3a55ffd1a2f59347adf55fd6ff0c4dbc178dbcf1cf549b4aef1fe3bb056f54e829a4fcdf830e844cb5579650adab0a2ed1dd7ebe96e0cc3cf795e05783de05e4f6e8a16c08277e2dbf20914b3d56f71b6b1effd48f0f54abb1a1ded11f564246f06d41912471c0d61cd5470f95f02a9cf5e3c794884f9cf0e689b8bf3a21a832188eb226afe567eb059719f4fb731", @generic="b9d2e2bc6729d1228d2282b31f99b71c11f161089daea18daa397672e05e9b1bf3d67966adf6ea7cb267078d912124631090f92ae462770885ee7c897abbea78eed6149a91d44d4c6d34ec41c9109b1a309e3b7d32da5d80f38eee4afd71a105c39920ad8466b09108d01df40a602e17fc0beef3a36b70a5cc93307b74dc92b8db59627852085655732f4baafdcc6dfa0f164d836e4ec89e42c0ba82483bafe80a14dcd377333dd30c98eddfad4a08b20707d08b9bdece72b5c3ef1fe0b8d899abf80de24ed3ab4dd12af3c200670d4a5e8be5998756e812207d", @generic="cb99dff6cfe4cd4c4e8d319cd66a931f33092e1ae458c017a2a1d316cbcb6ae8ee422f01d4a22a0450be72401ea93f4aff79991d37df640e907a77ef22621a82f4675af79b9ddb76e7b5f996783dfdbf862317b91d877fa89b4ed157ef37779b60e23d453338b6621b1ba84bd4caf6e602e75623fec79bdfb4f89b14c2420e2cb027755de65db14e057d703dae514e3da5da055a9ddb201165222efbc6c55dcecd2f97eb02be7edbafa440491b626dd25742869406869df1236018337e006681d63452adad07332e0a495c796a6dc7a84cb654cc999a8d2a"]}]}, 0x2750}, {&(0x7f0000004ec0)={0x1e4, 0x2c, 0x8, 0x70bd25, 0x25dfdbfb, "", [@nested={0x1d4, 0x3d, [@typed={0x8, 0x83, @u32=0xffffffff}, @generic="56915a65e8aceeffcc1218a40697a6b01b350d51e11a04526484e71bffd98e09abc8385dcd46c1571a0cdf43c786f4f318b000b168966628d4afcaab97650018c73ef2fb3c7309e2b9e9d7b4096990d83fa68fe45f9102a1814fb603ea5c4a9151fbbde9ce5fb0318e3512758d479a8bfc4b68dda12905ba2fc5b1d685bd967662a7e3cd3967beeefa5fef9327a9b32131acd9c0cddbd4038817fce1d5950353577ef3314027e52da3e052b8292ec6a4dd29bdcf305ca8a018723f6fce4d20c0c9761df164f0e92b3a0e8b8a3cea68b46a384951", @generic="471ef3daaa84b291d9ca4f9a8b9406748b1bbf842b3fdc7956f9fcfe8d3991f93d796f6d1e263095eb17840abcf0ff67feef7d16d38aa709541c92404370fd89c176ff4febb09f85855e663ebf59e8ea8fee43535ad0c3c8aeea63a1d108c553a3a5eeb82c14f179b6f47fbe4a0ff37b00af2b98ddcb15c643f192d7d1f10b58d72f07770950dfd424f872afbefe44e9c3b823f08a1ab627b47a403dedeaa302da36dff484b5abf1dad6fcc401fbd9086ac9bf4029c5a820b0f8570f3dc4d4049a65e214e82aa0e6b0e1b8d0f17aeb6354ab2365cd38c4cd7aefb8613077745f9c8fbefbfa04fdf9bc8ae011", @typed={0x8, 0x94, @str='\x00'}]}]}, 0x1e4}, {&(0x7f00000050c0)={0x237c, 0x1f, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@generic="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", @generic="c7e5b87ca720239bc2dd71c19561418c3e57745ebd7ef7f66ba52a495f81e36977b38cf28b02b581006b9731e7329def8c17f1841fde23fa4422db56e3a107d24b94f9d2f3104ce37aa9be5aa5eceb49e2a537d0c53c8abef4984e89f0ac5cfd87d44bff9c4d7b8fbea30c41a325fccf260b24891eee20e7240b25b7a770c14a19671eaa5c699140937ecae6006ea208a82f42954df98c0d3299", @typed={0x4, 0x24}, @generic="77c80a0c9e61dee4b84fe0ca8dbe0539275b82231eb72bc5bd", @nested={0x1208, 0x41, [@typed={0x14, 0x68, @ipv6}, @generic="3833a6", @generic="0c5f61d27d32d1342bb2c25873dbae64a65c9099d383ad466ab8ef20003c76a61fdafeab1ee774d3beeb75e8d5ea11b0f06ed46e0a2f4e0a9b5181415ab668ee099b7ee19c19beaf0fdcebae59e0cb7c7d5e713d3180c8bf009ffa6ca1f62075f2e2ee7bcec7a96b2808f4b2bbefaa", @generic="f576f8cb7325b6688399b0409072ef9cc782691b9cf798fd96d4ae4ae191874c74e7f8834b55342387c2a3e9d450ae135000da9320348c88be175278481bddf5f25a52ebef5602c99dd30dbe5dc0d34bc070b01da5a298e84b2a32b9d406b42de08662513c6c0ff6b3489297c506ff2b46f20deb94f45aa2452e9537dbc7ec7f6070fc40d11e5cf2cf41aaaa5bd66fd61def2b6df4f8894713afa6cb4ee0de994b47837e", @generic="07cc27bea7880793035e21421d8b8856f4efb48bfb501fe7320d2c30264c8f1ee778646e7cb49290e89f032aff4a7cc99f", @typed={0x1004, 0x0, @binary="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"}, @typed={0x8, 0x4f, @str='\x00'}, @typed={0x8, 0xa, @pid=r5}, @typed={0x8, 0x80, @str='$\x00'}, @generic="06a597d405fcf69757830112ae2582dd551cefe2d1064faa25f7416ee4735c41fa2ca351209e154d854e46b5a000aafcb83c00dbb133000c7c1d960ee743b62e1a40e240537eee6715af63f4531b63a96a0528832385a136909e5eb52dc5f3f0f1f9cff3b955d3802edc23df0201ef21f4c0b2bcd9c0d3b37892813a4d174647d5b4a7b1145b9e3cbdb7"]}, @typed={0x8, 0x6e, @pid=r6}, @generic="36ec818d69d6ce8d0fe534f0850ab56537441ce6c62d4a80c2490a6b6b30020d0808e84b901369b69faf4df1ce0c04ac634bd144dc4e8c0d3920870228c35cf9dc4336aba80034b07e048ee0b3ed233c8b8cc14e25c6c00c1006ed08f23a5c9e762601609ec852d7f5903132cd598e5d74421f396dd08499fc80c1d38df737796294feb2bd2bf9e8b5349fd7bc90e0fc6bd903d68c6a6453058d2b026fb751c409ea"]}, 0x237c}, {&(0x7f0000007580)={0x3c4, 0x40, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@typed={0xc, 0x51, @u64=0x9}, @typed={0x8, 0x60, @uid=r7}, @generic="63db6a2a37a97537a51b6a9f87545908577d2fdf52414682bf0755a1ba49b2ebbcaecbdaae91828495bc430c2204cf7001b02ffe86393893a20dbcea1b1715a387680a8e1d3fe6ea31a0b3a5fbbfd2901c3abe26447a49d232352d1f45c0964d2411198215", @generic="8c55f742601a989f063dc36d37c4c0c63b377d49e06ba9d2a412509f9ae09450941a60b57bc78fc12d87c4417003536307416801971c70b3896b7f96e5a63aa66714d6c64163eaa7a1fa76edc9dc749eac83898b75b434fe61ef1eb68f93bf7c66168ea28cc73987b8abbc12fc570d5220cc5fc1b8d18b1a035b391e43ff4f124e8abc3536fe4cea07b8b08551a6", @typed={0x14, 0x74, @ipv6=@ipv4}, @typed={0x34, 0x63, @binary="861ea0dc45dc6baa81b4c3b17986ca0b882298606f33d030ad986f6a4af5d5ac5c56c1d74ffe3433b915341af9"}, @nested={0x170, 0x4d, [@generic="7f319bec1d063697471bc767de129a63c321eef212051966d0e26f3aa0198690ea593c3e9d00aee7154101669993e283788d4b680350842093a69a3bc5d3a6fa2bbd88fe46a2edee8bd87dea1aa3de5bff8690b889d097a97917d8aa27a203b0f90f7405447fbc85ce47ce23f3df5a2d6a3c9a223b402dde4da27721795b782d8c3776afb140c1bfb014e4779ca4c66a6e08c9ff2b3e5f8918498464d34c9e835399b8501645ce393dc80aa2dcfcd0d42218b46caf61e1e9ba76dc7e395b8928f8", @generic="910f1c49dde2e6872e6714a52e970073eb81182164e7129bb8fb207982bf9ab916c7c12a6bd664c8aec83768baf643140288491e", @generic="55dd2f6003fae44bdf3ef4209833b44394e482e7bb2e06a91e75836a1202725271dc15b8b6cd63a9434c1a5d9795b035b18022d98de68c1386f089bd5cb3f0ef93e81d299ec784af4f3774523550922dd3735876b4b615d89f13e92a56f919f6bdd105d47e0fa481508a1aecd1689f5c52f4fad538de"]}, @typed={0x8, 0x10, @uid=r8}, @generic="bada466ba2bada3be23f97b0aad517e25883e5d30f50afc50bec38e1cb2484908eec6ce74d5aba88b83754e0ec5431d4c0cace39b9d3aeb0dc8364e4abe95917565603db5fa73fb9f2d8080cb28355d16990710b6794717947aacd2b33d124c8ad7339c4dd76e36aa90a1cedd844786b4430cb1d648a1a6418c017c224f02d4261ed8f01ce7d921cab664f848f4e79ef2283fb7614568ea51c5ead0f04512d204cfca10aee484ebe1b5ec97c6746ea734ed53df6f8", @typed={0x38, 0x66, @binary="4ddf7e3302ee23c7a2335db8c0be9746f7d74cb5734b09e02c1af5e55202f5a64a807271c081d5cf6b6898a0fd979355a380"}]}, 0x3c4}, {&(0x7f0000007980)={0x10, 0x2c, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}], 0x7, &(0x7f000000d100)=[@rights={0x18, 0x1, 0x1, [r9]}, @rights={0x38, 0x1, 0x1, [r10, r11, r12, r13, r14, r15, r16, r17, r18]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r25, r26, r27]}], 0xb0, 0x800}, 0x20000000) r28 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r28, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r28, &(0x7f0000000440), 0x0}, 0x20) 07:12:19 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 183.679374] binder: BINDER_SET_CONTEXT_MGR already set [ 183.684787] binder: 7951:7953 ioctl 40046207 0 returned -16 [ 183.691253] binder: 7951:7953 tried to acquire reference to desc 0, got 1 instead [ 183.699158] binder: 7951:8013 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 183.708264] binder: 7951:8012 unknown command 0 [ 183.708840] binder: 7951:8013 ioctl 406855c9 20000140 returned -22 [ 183.719346] binder: 7951:8012 ioctl c0306201 20000040 returned -22 [ 183.764500] audit: type=1400 audit(1542870739.185:27): avc: denied { write } for pid=8018 comm="syz-executor5" name="net" dev="proc" ino=21850 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 183.794401] binder: BINDER_SET_CONTEXT_MGR already set [ 183.800839] binder: 8019:8022 ioctl 40046207 0 returned -16 [ 183.808125] binder: 8019:8022 unknown command -1936807749 07:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @empty, 0x400}, 0x1c) listen(r1, 0x9e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 183.815167] binder: 8019:8022 ioctl c0306201 2000dfd0 returned -22 [ 183.821758] audit: type=1400 audit(1542870739.215:28): avc: denied { add_name } for pid=8018 comm="syz-executor5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 07:12:19 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000000c0)="33e7c0e652e6dbbb666c7da671017e3a5651c70332a2ab357cbbf2c28086dda4618f9d248d39d7ec9a29afbc741a1b4acb33824dbcb405897de7bc90b9eba9331b51ef6b8ada8d00a1cd8fd4955b71da2f9822fb414852db8c28850544eda52abfb849f0", &(0x7f0000000040), 0x3}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 183.873273] audit: type=1400 audit(1542870739.215:29): avc: denied { create } for pid=8018 comm="syz-executor5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 07:12:19 executing program 5: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff}) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x501000, 0x2) getdents64(r2, &(0x7f0000000040)=""/56, 0x38) renameat2(r2, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x1) 07:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @rand_addr}, &(0x7f00000005c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a80)={&(0x7f0000000080), 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1ec, r2, 0x21, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x90, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x5, 0x8, 0x7, 0x16ef}, {0xcb, 0x7, 0x8, 0x8c}, {0x10001, 0xd, 0x9d0f, 0x6}, {0x3, 0x2, 0x3f, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6facdca4}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4800}, 0x20000040) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 183.917345] binder: 8019:8035 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 184.031946] binder: BINDER_SET_CONTEXT_MGR already set [ 184.041634] binder: 7998:8052 ioctl 40046207 0 returned -16 [ 184.047838] binder: 7998:8052 tried to acquire reference to desc 0, got 1 instead [ 184.055986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8046 comm=syz-executor2 [ 184.072149] binder: 7998:8052 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 184.082053] binder: 7998:8007 unknown command 29452 [ 184.087971] binder: 7998:8007 ioctl c0306201 2000dfd0 returned -22 [ 184.095898] binder: 7998:8052 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 184.097229] binder: 7998:8059 unknown command 0 [ 184.097238] binder: 7998:8059 ioctl c0306201 200005c0 returned -22 [ 184.114355] binder: undelivered death notification, 0000000000000000 [ 184.146699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=8063 comm=syz-executor2 [ 184.558673] binder: BINDER_SET_CONTEXT_MGR already set [ 184.559715] binder: 8019:8068 unknown command 536872576 [ 184.559724] binder: 8019:8068 ioctl c0306201 20008fd0 returned -22 [ 184.559774] binder: 8019:8069 unknown command -1936807749 [ 184.559782] binder: 8019:8069 ioctl c0306201 2000dfd0 returned -22 [ 184.559852] binder: 8019:8069 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 184.596347] binder: 8019:8035 ioctl 40046207 0 returned -16 [ 184.605096] binder: 8019:8067 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 184.651470] binder: undelivered death notification, 0000000000000000 07:12:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = dup2(r0, r0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x7fff, @empty, 0x3}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:21 executing program 5: setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100)="ba6f7a15856affc28e17eb936a817ad992337c169033311bd37f892c385c588d21d49e45b04226431d", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) flock(r0, 0x1) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:21 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) bind$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050000800000000000000000008000f0fffeffff09000000fff5dd00000010000100000cde00fcff0000040e05a5", 0x58}], 0x1) 07:12:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6cff927d72b777c020"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000680)=0x0) waitid(0x1, r2, &(0x7f00000006c0), 0x0, &(0x7f0000000700)) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x82000, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000400)=0x100000000) r4 = dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000140)=0x3) r5 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="46fb422b7b273064e54fc211b95a44eee7e6bd05dd49e1acce4a8c42f1f181c670b9fc6f3e0ed9818865d594746166a30d3df88986a690f2984e5939722502e41a67", 0x42, 0xfffffffffffffffd) ioctl$RTC_AIE_ON(r3, 0x7001) request_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)='syz', 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000540)='syzkaller\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000600)='/dev/binder#\x00', 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$negate(0xd, r5, 0x2, r7) ioctl$KDENABIO(r3, 0x4b36) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0xa, 0xfffffdfd, &(0x7f00000001c0)="9eb6e68b4069ebd40770"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={r3, 0x6, 0x1, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) 07:12:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = dup3(r0, r0, 0x80000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'irlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0xa10, 0x7e, "f15f42512191200d4bae3a3c8a9501418b7de8f89fb995768fe8e3be852050cc3be65100500133308487637522e77695df2c24106cd5f8a622c7e8d5b87d5c76b1b353b58a8f4b07d25d6a62a2996fd35295582bb545be77955fbb79297bd80d2c8107b4bde4ad5c59c342ea8041f64a1506dd76597ab6e6422269f0a672"}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:21 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14, 0x0) fcntl$notify(r0, 0x402, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace(0x10, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TCGETS(r4, 0x5401, &(0x7f00000000c0)) listen(r3, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 186.196336] binder: 8072:8080 unknown command 2106785644 [ 186.216374] binder: 8072:8080 ioctl c0306201 20008fd0 returned -22 07:12:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {r3, r4/1000+30000}}) listen(r2, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 186.245114] binder: 8071:8089 tried to acquire reference to desc 0, got 1 instead [ 186.274680] binder: 8071:8089 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:12:21 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40200, 0x0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000a80)={0x5, 0x7, 0x0, 0xb30, 0x21}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x368, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000380), {[{{@uncond, 0x0, 0x98, 0xd8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x400, 0x401, 0x9, 0x9, 0x2, 0x1ff, 0x2]}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xffffff00, 'veth0_to_team\x00', 'erspan0\x00', {}, {0xff}, 0x62, 0x2}, 0x0, 0x98, 0xc0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x100000001, 0x6, 0x9}, {0x800, 0x5, 0x2}}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x5, [0x100, 0x22f, 0x5, 0x1d3, 0x3, 0x4], 0x28000000000, 0x4, 0xd2}, {0x1, [0x9, 0xffffffffffffff00, 0xcb4, 0xffffffff, 0x7f, 0x4], 0x1, 0x3, 0x7}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x22008}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x18c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6000000000000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe83}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x61}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa28}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1c000000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x18c}, 0x1, 0x0, 0x0, 0x5}, 0x40811) r5 = memfd_create(&(0x7f0000000080)='\\\x00', 0x4) execveat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='vmnet1selinux\x00'], &(0x7f0000000300)=[&(0x7f00000001c0)=',\x00', &(0x7f0000000200)='[md5sum\x00', &(0x7f0000000240)='%\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='wlan0\x00'], 0x400) [ 186.297281] binder: 8071:8077 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 186.305667] binder: 8071:8089 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) 07:12:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240000, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x400, 0x914, 0x4000000005, 0x2, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x81, @mcast1}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) socketpair(0x1, 0x80005, 0x7, &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000)="ec7c2dfc180968a77c9c9ca3beeca7f2695ae69c2743eb83777cc7067c3cad4a41c1c17a02b6cb5ded62634a82ce021364b285b1c7c34abed1cf2c4a8b9de2b63a4b13b34592", &(0x7f00000000c0)=""/194}, 0x18) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) [ 186.446846] binder: 8112:8116 tried to acquire reference to desc 0, got 1 instead [ 186.456869] binder: 8112:8126 unknown command 536872576 [ 186.466588] binder: 8112:8129 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 186.488210] binder: 8112:8126 ioctl c0306201 20008fd0 returned -22 [ 186.515852] binder: 8112:8116 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:22 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:22 executing program 3: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x4, 0x6}, {0x1, 0xc11}, {0x1ff}]}) r1 = socket$netlink(0x10, 0x3, 0x40080000000000d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d65000)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x8, [@typed={0x4}]}]}, 0x1c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readahead(r0, 0x571f, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000100)={0x101, 0xffffffffffff7fff, 0x4}, 0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote}, &(0x7f0000000180)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) clock_settime(0x7, &(0x7f0000000040)={0x0, 0x989680}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000000c0)={0x3, 0x2, 0x0, [{0xe9, 0x25, 0x20, 0x101, 0x3ff, 0x6, 0x3}, {0x7, 0xc2, 0x32c6, 0x10000, 0x5, 0x7fffffff, 0x3}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180)="5102ec3f9b9b96003abe9b065c4aedbf37b4d40d9415757a98b40eb061299e674589ac5b3b538615f32596", &(0x7f00000001c0)="b87169c0dfa2ab867b8aad72b4cbafe4bfa289f71dc49b6ad6ff6db58dec044ef6b40348dba5982f9b41fb41669250595983e7f670d80eea586488b93a1519b50fdff128", 0x3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:22 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 186.987596] binder: 8072:8098 tried to acquire reference to desc 0, got 1 instead [ 186.995599] binder: 8072:8149 unknown command 2106785644 [ 187.001582] binder: 8072:8149 ioctl c0306201 20008fd0 returned -22 07:12:22 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) flock(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x4e21, 0x1b, 0x4e24, 0x9, 0xa, 0x20, 0x80, 0xff, r2, r3}, {0x2, 0x8, 0x9, 0x9, 0x2, 0x400, 0xb470db7, 0x7}, {0x10001, 0x101, 0x200, 0x4}, 0x0, 0x6e6bbe, 0x0, 0x1, 0x3, 0x1}, {{@in=@multicast1, 0x4d2, 0x32}, 0xa, @in6, 0x3504, 0x2, 0x3, 0x0, 0x5, 0x6c, 0x1}}, 0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 187.036833] binder: BINDER_SET_CONTEXT_MGR already set [ 187.048494] binder: 8155:8167 unknown command 536872576 [ 187.048993] binder: 8152:8163 ioctl 40046207 0 returned -16 [ 187.074138] binder: 8155:8167 ioctl c0306201 20008fd0 returned -22 07:12:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) setpriority(0x2, r2, 0xc000000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) getpriority(0x0, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:22 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000000c0)="bc19e9ad6ba306c5ccacd508c2ac425066a484b7602cbba69e445f436458f1e16aa968fcaf97ab79f75da5c73e8760cc7b5f98471978c1b6e9156b4df26828f3ca1262c58337e7a0f452bdbe05f82205884af93463c19875ce7bd865517e83dc755a466d746bdde50ebedfd0eee59c46c9b3df0c6e6e3edef97cb82e3335727eef47736337cc146ddac01cd32d3a4fd48a8b362f67ecb2d823c196a85d85eb11c257e0e240da711999fdef96daaf8dbb8c1389bd1dbdd8c42e32842ee3ec050b0262cd2f35d6b1bd74fb87e39297583b450902f3f1ffa27b8689", 0x0}, 0xfffffffffffffe2a) [ 187.114992] binder: 8152:8179 tried to acquire reference to desc 0, got 1 instead [ 187.154800] binder: 8152:8179 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:12:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x982, @empty, 0xfffffffffffffff7}, 0x894ae9be125e2881) rt_sigtimedwait(&(0x7f0000000000)={0x3f}, 0x0, &(0x7f0000000040), 0x8) listen(r1, 0x1aa9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5b9a3b136bec785fc14a1687a68ef842412a5190f8fffcdcd4d151fcdf95e26045eb2e2ad89226ac57b6774384e60d233bfd096510989e13281aa1bfc", 0x41e}], 0x292) 07:12:22 executing program 2: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002740)={&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000002680)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/63, 0x3f}, {&(0x7f0000001200)=""/165, 0xa5}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/208, 0xd0}, {&(0x7f00000023c0)=""/212, 0xd4}, {&(0x7f00000024c0)=""/136, 0x88}, {&(0x7f0000002580)=""/132, 0x84}, {&(0x7f0000002640)=""/63, 0x3f}], 0x9, 0x0, 0x0, 0x50}, 0x2000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 187.175697] binder: 8152:8163 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 187.183109] binder: 8152:8179 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c630c4200000000d8da6100d9b6ea5f31b022d3ca872bce6b278abaf5178d804c285e53360436d899b26fb7f2c7"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x7f, 0x3ff}, {0x8, 0xff}]}) 07:12:22 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0xcbb3e8e4e57f9a94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000440), 0x0}, 0x20) 07:12:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x5e, 0x5, 0x1000, 0x200, 0x8}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x202, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 187.288917] binder: 8187:8192 tried to acquire reference to desc 0, got 1 instead [ 187.297031] binder: BINDER_SET_CONTEXT_MGR already set [ 187.313486] binder: 8203:8208 ioctl 40046207 0 returned -16 [ 187.321365] binder: 8187:8192 unknown command 536872576 [ 187.324704] binder: 8203:8208 Acquire 1 refcount change on invalid ref 0 ret -22 07:12:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x800, @empty, 0xfffffffffffffffc}, 0xffffffffffffffcd) listen(r1, 0x5) r2 = getpgrp(0xffffffffffffffff) rt_sigqueueinfo(r2, 0x32, &(0x7f0000000080)={0xd, 0x1, 0x2, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:22 executing program 5: add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="5bbe71edefbd74d9cee18ff0ee09af869bb9ce9e3d43c371b7db872afd6f5ce55638a88940915cc32ca7a39d90409bed001cd4a949fefe6e2c8643d13e76af1442bf", 0x42, 0xfffffffffffffffa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 187.325021] binder: 8203:8208 unknown command 1108108044 [ 187.325029] binder: 8203:8208 ioctl c0306201 20008fd0 returned -22 [ 187.360608] binder: 8187:8212 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 187.360724] binder: 8187:8217 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 187.362598] binder: 8187:8192 ioctl c0306201 20008fd0 returned -22 07:12:23 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000280)='lo\x00', 0x5) sendmsg$unix(r2, &(0x7f0000000880)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000340)="40ec897c899ad2ab85f557185c19991f7fd38eb27b2ecb1da8c2abf6d6c13188ec947586583eeb7a22bb0fa76c53ebf7213d19a4c8c3c16e07672b049e8e25ab7b3e6887501970ce42ad9829626d0ef657f4b5e24215b08332ab771854ae70437549ddb2ec84a90808afaf576e3e0329129cb0f4c58ccf5cc8b9573d50b30ada95146adfe97d266b4ecf28b34d17756e734d0f04", 0x94}, {&(0x7f0000000400)="8364bc7f8a179ea6876d9de9a1556bdeb478d2d2c1eea403b71a58f2314cec0a5206148c89b8d721279414101c5455d28ca578ddabcd369808793e8e9fa6cdcb323b090fa684059179a47713b85c8cdac817eb91cf44b90f3bd29f3a32636c48502bdd0c8b8bb8f8ce03b4185ebd50d6ae3908d7283979213e9dcacebbfd33b6ced3bf54c2dd0616671b8e4b5ee93aec5119bc641495766676323b2ec2e2dbafa6ac2ff02a6b1e625f13c142b73d5b21f2304174bde56d8c09c05c075504326f5e47fd09e16ba8727b21d8343ea013", 0xcf}, {&(0x7f0000000500)}, {&(0x7f0000000540)="a9902608afc5ff6d2658acf6bffb78ec80cb273685c373ffc19abdec166820dda23f29b16d0f77c7efc118bf8a056cd013a7033a43c6f59277a701c1b30951201696d2eae35663b9ed3c17bc2a3811", 0x4f}, {&(0x7f00000005c0)="70da35d3e6a7dfb428acad1851aec89de329aef03f0c74213d3f26e44b689b578c8fc019696f945f8bcd98765373655c837d8393d3af3b1ba3621127a41d7f0e6aec53be43cbcc59806fe9a2a0e33310823aac7b4a39c02de520b3ce9bc89a05332ebe7c96b8b3c29b64324a0d5b116edb72407831348637e8e85ec5ef780ac0ba06e3975085eb650c2e8b325cf53f8b98f40dac022a19b345c9f625bb1e47d201cdf649d990f0d6def5539f1566fa04c7f14faf8bb06c6c31e5f78ff06811db18139d25", 0xc4}, {&(0x7f00000006c0)="12d2cfb2cfa2e43f6bc349739f673cc28309c453426cbf6cc7eaa5efd596c7e1608f5b6c232ecf3e219e5a2ef8a837a7272b336d2b22a6cf87da4734c0094f3e96451f6bd9907fea5cee8377e5c7ac33af10f0660455a261d278793e18cf28899a8c8b0e4e98988010c5ffddcf1e724963e2ef8a18016a120be3f11b6c35291b19cf1b34e4e992c283c5854546f090b8d7ab8683752b58bb5438174fbc979e8f93ba8b98907a69fe320ead", 0xab}, {&(0x7f0000000780)="3d867ff4d76e42f09160a2e880e954318ec161ff00d4ef9434321afb", 0x1c}], 0x7, &(0x7f0000000840)=[@rights={0x18, 0x1, 0x1, [r0, r1]}], 0x18, 0x4}, 0x20000000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0xff800000000000, 0x9, 0x27bb27b9}) r3 = memfd_create(&(0x7f0000000200)='security.evm\x00', 0x1) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "a882739f26f230a594a18c7f33445ce9c5d04be6"}, 0x15, 0x2) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) listen(r0, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000000240)={0xa, 0x4e22}, 0xffffffffffffff61) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl$void(r1, 0x5450) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = accept$unix(0xffffffffffffff9c, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x7) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={'irlan0\x00', {0x2, 0x4e20, @remote}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x8000, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000140)="a4b1b4a761f36c106be2809a0d74ea58bd4ba25ba385de77514b4fcce82f335bb87efea2f90d03a1cbd70bb556a597e4753906c8ff522cf8d1aa01f72b9af951bed75876049978b09dbf336336494be35b0f2cff7bcb36f6908a0d332e30a8ea8d051ae4c5104b12927446eae48946f19b275887e2f8e18b83e588b5e0bfe9a25a17917b1fab40834a08c6d261951a4b2596f9db391801e4f6c7477e26226532d6fa53459042") writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x10001, 0x3f, 0x80, 0x19, r0, 0x81}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 187.670351] audit: type=1400 audit(1542870743.085:30): avc: denied { map } for pid=8230 comm="syz-executor3" path=2F6D656D66643A73656375726974792E65766D202864656C6574656429 dev="tmpfs" ino=21206 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 07:12:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setns(r2, 0x20000) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000ac810000431a064ee748b4122c56586a0a09e0bc9f14aead914ee40c0ddc510de95d53ce1c400fb81a7f32114c3041c54464fa7a327fa08197f4ec5ca08d7031c8cc156f581fd6e6698b38ade79cd1383455e8e96a7b744f33f32d94ef7f32"], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) sendto(r3, &(0x7f0000000100)="a535784ab355d7a402473d4af65a630f94623ba41460a374fb35b2ffc3cf4dd1d5e49a581f630b5d73c6060cc68982314c6413cd5df9889c16352e0f55e99189c14f167d884116dc69b2f96f420cd8abadcca99bd2569e29c00c0e793d5b2e222d2b98c20bb91b4af065", 0x6a, 0x40000, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x3, 0x1, 0x1, {0xa, 0x4e21, 0x2, @loopback, 0xb7a}}}, 0x80) 07:12:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x608001, 0x0) listen(r0, 0xffffffffffffffff) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0, 0x1}, 0x181) 07:12:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 07:12:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x4d, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) r4 = dup3(r2, r0, 0x80000) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x10000, 0x80, 0x8, 0x3, 0x0, 0x5, 0xe888, 0x2, 0x200, 0x8001, 0x8001, 0x10000, 0x8001, 0x2, 0x2, 0x3, 0x7, 0x3, 0x7, 0xffffffffffffff93, 0x1f, 0x479d, 0x9, 0x6, 0x9, 0x8, 0xee6, 0xffff, 0x7f, 0x0, 0x6da, 0x2, 0x6, 0x80000000, 0x54529557, 0x8, 0x0, 0xb42e, 0x0, @perf_config_ext={0x10000, 0x1000}, 0x0, 0x7fffffff, 0x7, 0x0, 0x81, 0x462, 0x6}, r3, 0x10, r4, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:23 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 188.078740] binder: 8203:8219 unknown command 1108108044 [ 188.084533] binder: 8203:8219 ioctl c0306201 20008fd0 returned -22 07:12:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x9, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000280400000000000000000000200100002001000020010000580300005803000058030000580300005803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80020010000000000000000000000000000000000000000000000003000667261670000000000000000000000000000000000000000000000000000ff0f000010000000070000000501000028004155444954000000000000000000000000000000000000000000000000000200000000000000ff020000000000000000000000000001fe800000000000000000000000000010ffffffffff0000ffff000000000000ff000000ffffffffffffffffffffffff0076657468305f746f5f626f6e640000007663616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000af00010008000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000800000000000000fe80000000000000000000000000000cff020000000000000000000000000001ffffff00ffffff00ffffffff000000ffffffff00ffffffff000000ffffffff007663616e30000000000000000000000062726964676530000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00990500000000000000000000000000000000200148010000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000d60100000000000030006672616700000000000000000000000000000000000000000000000000008100000006000000040000001c030000280053594e50524f5859000000000000000000000000000000000000000000001d093ec8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x488) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20080, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f00000000c0)=0x8001, 0x4) lookup_dcookie(0x1, &(0x7f0000000100)=""/112, 0x70) inotify_init() [ 188.119006] audit: type=1400 audit(1542870743.535:31): avc: denied { create } for pid=8265 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 188.154516] binder: 8265:8269 ioctl c0306201 20012000 returned -14 07:12:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200)="c273afbfaf24f00491ccaa877339018b844bae69f2bb3e6c739940d4ab0565bf063b7fd9ab1f1bb7fec1e4bedf0fa0651228238e6781ad469d3f8a46e59d9b9df846b21fd9f697ea78a261b2377c8a40d44634837e7ce636a0d7349cdc8a919b924b3717d732cea1b357d26187146756f7c6", 0x0, 0x2}, 0x20) rt_sigreturn() writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="d634c5cc60456d26f732393182", 0xd}, {&(0x7f0000000040)="50fd9013389580ac8e3066346f265414d8b620102686e6f56f949ea385074bd675574a", 0x23}, {&(0x7f0000000440)="fe88d90bd96b81fbe0f0f674dbbc799ab015199b984c3289f4d434a89717eae3494253c7e7733c4adb512adf934eba5ba66f5d1e0d44f2efe455b13ed69ad96cab2393d3f45f93e7365505dfe1fda991989516d7cad2d95cbe364e47e6c9ff421ba9f2385be8e4375ce4f2ebd4caabc6c88081749644e15ed763fcef3f5962b1b02cd975172e96c21e24067e2e2660cb91287774230aeaf18f02975a90e0f1f5b62a9c68c3a33507621f1edbf06716966ddf14febf758db3c2b10f55bd71efa41dc5464376bb87e9522446f04c4d177b8123641ccdfda8aff21304017f76b5021b7fce552f5c1526d7e22a73b149f14bb04a3a0a4f10e381de5276f49430f934e438e50e5226ea028d870fe13a45fca03718363a2694067468e5d7076e9aec81bd1d5bcf673e137278d454c752fedfcc4d3ce219ffc6e38804a3f72ca7499e4c3e0643d8e36818be2bdcd3c1e49c8ab7476872993935f810c8385524e8b17dbffe6a7b8dc90864b4862ed3bbb1ad5ffc8a540cd7a312350526f7eeef483c0516907a4c184c2a0d9d8e0650a6ac753139ebfe85cd4823f6d61d2a8f15f5399d51c73426a76212cd5da14fb2bc4a9572be9f3e9dd66a4e2781b5cc11da195cdab0d6428a19637e7bc8339c5d2f717470b189dca455e4dcceaf0de08bc79e93eb5706c80901b86bf5ef6111edfa986aef5863cdb74be070305c5a5a61a75ae8e9c8804d26c49ceaa32fb8f529a9c236e4510745c0fa75a81db0678aefbb0a4fcb82d47f52da23a5e026823f199dd4cee05aa8b4509500eaa47c96c9d1e4db8a935f79db6d494d6eed379ddc5a173dcecf8541ad9ae17c69706494a0331e559118893f21734c04bb31d901bfac30e1614b2ed4180614d9fc925988bbd66bd39c91a93ede1bf44ae05c105650d7823d0398ac86ed995a5c3f1af2f34045264086e2dc5c7fd1792ddc0a2c2b230971139fca35e6de0bf17a3c6e8b94ef97988549d88d679276f9be4f858465a8b7e5a5c523a33057b7215d45dd532c308c9c89d32620de6251bc837b9eedd4135fbaeeff5e7d807d3c2c0ca25c85f1f86c7edb8a5fa68200367aee1677937b7936510f707e57a7944be53a299e66e1c74be71bb1db01164e8937b5fd9270d5ae7a3c0922cb4ca6389b20d7cb54d23a864099138ad1fbd9760a7ff116117b5ec13c832dccd644a9b3e6bc5a30efcb8913d0ee483603b4bd27bced08666bfeeba4816e6452314fa1765b99e00a2f99bed9c71acbcee3094b30e86e53ed6f0a2ddc832969b268dee521f71bba2d6861b34d7d7fcbdb50d6b2c9c67dc275fd45cec60129c3cb3d2945ce180bae26edd3658048f123905ec9a0626bd5f9def0f5b967ab4946e54563e273691a0bf354ab7b54970022aadbb31e7c70044c6be36b5a7cd63812ba0c121f64309adf7951bc17642955f38b5026b2a7259f3ed900fed4a4b4b7134d48fee420d6a1c916972c5f8d5350aeea20559a32adaf64b5f2d2023ef7bc5b8b6364debba36d1383ad9f50617519cff57ad115af3a538bccbab6e42881d80302e334c991c2ebf022726cd5bf69966b16945691d07882a7fd5fa7c1b3bd93252c880bfa7e2131952517d388db5f8cbd2fd406cff3507e3ec031b2d8d8769be9ab288bbe9bc5e859f86905d3ffc15eb3fc11e2ba526a4489a765053e0d65ba4e9b6092844daa42e633d992e501e557bbdb547c4ab81b1dc6dfffee9311b129536ebf33e2a67645d18b3779b090d27ee5d78e8441fe68b4fa6804aafc53d7d504bb5662a1b7d6cd43665dd6ab9fa317bef5976991f1dd5e76eaa67ce021d63cf4bec03605bd989fdbad6494ed6c3d3a00ecdbb0905a1995f04f9bfcd51773f815d28d50ad51540bf442081f038fdb809082ac41c72f7827e8b17182b3b01b64182e72fa4f52db46f6e852acaf50a65c6262a86634000bb10167b5eee50c117807ea6e3cebdcb6b2ac4663406f0d9ad844002e9f5984b5d72f2895ec81021769ae897c7a3e6a13274993936c3819718926baa70202c91bb7ff6a73c7c61082ef2a8941bb95a00fc4757973ee190ffcadf151501eb9403ab3a95131c536676f49a9ec2bf5f2a552fb28f679bec75a2c7cf836780a64ca15ca324095645633b93c304eb673a5391923e262cab7f87ad2a3b05491092b6834994240ac2b9dadc866e2fc1edc38aafc8c8464be0cfd2813f9cc538760987192917dcca21efb99b5831f464fbd24fa75258944fb16516c1895a2f185abcd1d56a077d8ad639cd9c7ee3a9d94cca5f7c957a13a6e88e6dc050eef685424a274f11a20f6e626506407baaaab618c860ba1d5c89894157b395cc062273f086e998b1b679f18667f66caf664a7650c5afdf2c85bdcc8e64df71ce65e285a912a78be9ff403497795b9f1758c09ef7093c4b40bd972d649872fa7ee06bfe0d28c0d22b7c2d52035a2d6a221da795d4b9cda72d0d8c024b9a096f32d797ef3fae9432491bc5aa852963ef6152820c137a629b36ec29b45696318916d39423070c6107ea3cb476808c55e34213f11e61556d6ab1acd1cd3912d830483423678699553c8c36c8352511daf5266688b876a070fb6641cb44553aece179b5badcb91bb8cae6f8e8deff76a28411c51f9532763a4eb9907d4ae59023ff086e3d20626bd8355404248b64ea9bc18facdb09f59e23b13cdc7848bd4938d9e08a7855bf2e7a0a092246395692cee317192f078ed59c2a4805d70be1bf55be65b7810e92c3cd324db7acc5e7b96695b3414d023a9e305bfb48746aff8c83b1654d8347024709f75b6738e60bc5599a8aed874fbcbae43c0cffd261690423daee7220818b6cf52b2a1f86eada6bcb8ffa1b6f6f93165fd6b6d254fc6e16b08c81dd0cf22c300c2e0b2d836630c7ae607bcf77afec610d6d5f31c3e368117c20b25728f2fa0569089546cffe109f99dcdae706d2c6b0fe84ef0b9e6421aab492c4a9ce096eb341dd9e9a4b2199c86680a48e9112171cad5af90d25845e7713dccf271e2027f8f973e2edab4004c07cba6d38202ae3fd1b90fdaa40054b476bcb6e54d551137cb75cc90996aa2876d4911be4ff6437fec5cc52ad61f79e6d64584d463189b450baf631c580bd35af5bd4921f80ddc8e24052ac615e95545579c784a9d69f5c51dd51fdfab6e6d005cd0f6c0ff39c1f62f12743d4e07a3dcf5b25a0bd5187c6a65395f286e158c96f60c34128e871473b3c11a0d7ec155fa9dd89f5dca108723aa249c5f716ec75c9b5c7e5426bf3fb588b4ceba24af80eb3c21d40d7cd74c8bd3338d97c93d74d957b9e4e69ecfdacc7bc861621591b9829fedca462c636816af33790b4a6238d858a15f546a5e183d15e88c9c85ea1c7db418d5438b1a82e88248787ad83a600b45a65e0b0458f858553ab20c4aad462dcf0c4fe80afb6b4492997c7c5ef7517263c9231e71d4bf194781d9e945dfbd515585e46c6c1b87fe0c9bcb53b7c616e40f1862d5cdb740ffeaf6496bf00665d69ae6442df3ff34991179466d0ecc37fe02709645fb3cc3d70030a2e7643642018dfbd99e455b2ca896d0a498a1e470d0ca2623edfb4d05d62d0ababc982d3182f1dd67ac2377b45146d89c95d9dc3ceb64f80db32eedba6b2869d824a621679098b1b1568896e3b054fe6b4148856bd684e5cfad8177a3face94038abddfcdb61606a006eeb786aa1e2d6959d1c237763b9e8e813c2695ce131aa19e5b1143a3e120be2f238d221800f59a65d3e8f79663bbd5ccbd8ae092be573b94b90ebc78cd51cbd09a34f84ee9df8f1f0b2bb73fcb9cbabf5536677a2de18a3662a011fcbc8f13c0ff07bff436216b7e9c5e7b44b960cdce7e8e8d51d4bb2c9eabfcae8821db0ad3b8d036d09628242320f1536ca140b9c72fa23e05532154eb6d6280aebbb855e39a0c748e4dcdc13b5207bdb04a9eba289488da19045cfa7bb71bcb46154ffb870597931085912612c86c88273f3bfe60ba0006d856719eb17e2f229488dc42aa1d23b2d740484984921321c4608e71b090498d13c2c93cb949ec616088def0a5c5fde108342ebc71a04a76c3c34a192f8e032a3a6b393ae71a26bdd44edafc5991c4493ff2af79120d226dde005f75e5ef6342aacdceb0bf1453d334b838c851a40a15b4c64bef05d12de71431b1386aa0750073174a42a4b0c5ae562c95e3e723be4d17ada6ecd5989b796a9e1be47e1e1745d4dcc2bef069b8db2f5c8ea459e800760f9a4c3504d80b08f42e7fe70e2bb1298c0a49356ed1661f2278f028c3c39ae7d19fd09eb2e2bed5e477dfd6c6b85925bb1026b6061a0f5813352e0b27441c87e6b5d0afb141ceffda5e7725c93e45967e07cffc16182d42230d8468f260ee9918529ddeac7eb62d24051e213de7e0fbb308e230adbad414afc0392cb70bbdf224e36661dd9ebabd2c87accbebf3cad30f13eeea559fd2cc67a02bf73da74254701208cf14c4571221cc5c8e2a464b2f72a9cbd4203475b30590b1b6fd7cd21497a83810f8448029581988e54ac94804e448c9d6ace59fe3fe1ad2b82621271f1fa180a41367e83be9f5bb161f0db98c60314e4547e7dc3e5a8b5d4b080b402f45ca772791d8614f3feb325b62e3c8933466d5e1ee139583d545fa5082432400126b9a69409a88a5eabf33af7efa2a1414b22a060053f4bb91748b9fd6ce784e5cdc7ba553659654117303fd8ab5d16e5ca2e16e5aaeef5720b6694bde9974162da72cf21c086b9ae363c74b98949ef4ed39a6884b0fff65e9dd5a02bb4a5b6e4880ca1e83b478855f4e7b62c140e6d6f680dde119f86900d37b8333d18386db59a03900b3c227f90ca39f8bb23dae1aabe1b1ba4e43e6ec9afd0f07ab4df9236fbaf34f6633563a1394026246470ae6d660e4f259e5a5e0b237092dab47aa513912043b77f75b62a7483402462a4b618b59dc68bf3924bd8ac3f114a8e456f97e10ab61536a54bb3fba00433a6c4eebfd137a363ce4ac950878b383ff6cf97c598055dbb31cfba9b5867d64f1f74497175dad3f190548dfd17fa21bd33d4842c2bb9f009f9bcc5f5aad590abded134c2a1f9b6c0f0b41c5b0a0175ce58b2be008a8d8e64766b6e386a09e78778fc3002076dc9ac483278e13d48c8b0e327c6f94bdd7596b0ae4e3ddc8b421ba1570177f6e37d138920d8bba8d5aa2a6dec8cd8bc62f8f23e7f7445f4aa14c72171905e3289c5019e0044b07900c91eba1d7c66c48c05e3805710bf1b81e4dee8c48ad2c52eba0093b4806fa4dc1b96d03392ec93dc2c19013a2d1685e03f520761bba6428fd59da49c3c303d24071aa887fbc749429f02d174b4689e6511c5bf413c9a249e4cb96c81e5a4bf170fec00d80e6933524737bbc0e04ae905efd4c4870ddc4235702c052fff9c4883fa485181764399802c0a6024031d58d96c2288cc9a8731101e7e77bda27eab8f86115fe1d5817a1472c45705b81b0e2fb7940ad1f5f47de8ac7fadcea8c2980f020bb9b90d66cbbdf1d354d28114d47830b8639479022bfc4d8ac5fc6765868688af03263ccf4fb148a36cee71ffebe8be557774c246f6d358a3e123f18fbc9967fe6e62d46ac0f1bb958857be8aecedba4268a96c4ff12d10b6d376a5be84cbada984afb902df6706e5581c0a75475b083fa54da30aea71fdbbaf914754deb91d478a751755a9d28b01b0243d066a25ef2ae58a22a9d254e77341403e54399eefd695518838395984bffec0331ef4e53b746caf3574778287d59209dc03bb8bd0945f799aaf0", 0x1000}, {&(0x7f0000000080)="f91bb5a742f88b85cfd07aa3bd1501c1facbbfcaf5c7a23fa67f8547b91e7254513b361ae2ebfc33cd64ea1a6c92d88311f10563f96466fbe53a2a79e09db93de3f586a013a7e5e218ff33a7331afaf9227d2cfa91f0625748ce7b0a4cc1bf637479be2123b1732678037f8eeb8f672396789497bf161b7070825854cd48537df1f5f6c5b899420d0fa9e74ebd88aadf3c7f148ebc3b59e9d7a2fa2a82d76b3c16521b47249c6d75f008617aff65c7a901630d7b35ae185661c22266f7de3742c3b13e74c0ef3803ec92ac359df7", 0xce}, {&(0x7f0000000340)="204d4a6072344a93851e0f735e83877da620f49e62e7dc89b20244d66f36a28648f2fe7fb007c1bb80f9bd95093ab891fbf2061e3faedd7f61b1fed2ed233918bddeb879826a350d4e8cee37e7052fd8451149b147e3fd33ba4828919eea091d6f96820c53eabc414e4b7e509006534020f6b4f35762b2445617ef9c379f7990e3ee4a29524c6afb2f646c3f35dba1fc63", 0x91}, {&(0x7f0000000180)}, {&(0x7f0000001440)="e41177ee1b4da8a6df4fa1a9d91c128825955c973033bbac93f1f9457abb905b1e8fe29f33570f4d59db812046a9b9fea99f7f540a9da6df2d659062d54047e0221f331cea46b0189cddc873b08c265ea754d4567513effd78e8820b39c0936fceade691d32c69765503c9393d576e1fea1ad95944b9b145c80c09fc183c175ad52a4a1e21456af1bee7", 0x8a}], 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:23 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000040)}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0xe53) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000440), 0x0}, 0x20) 07:12:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setown(r1, 0x8, r2) listen(r1, 0x5) time(&(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x67, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 188.176440] binder: 8268:8274 tried to acquire reference to desc 0, got 1 instead [ 188.184822] binder: 8268:8280 unknown command 536872576 [ 188.184989] binder: 8265:8269 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 188.195830] audit: type=1400 audit(1542870743.605:32): avc: denied { ioctl } for pid=8265 comm="syz-executor0" path="socket:[22201]" dev="sockfs" ino=22201 ioctlcmd=0x8904 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 07:12:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000001c0)=0x3, 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x3, 0xfffffffffffffff8, 0xffffffffffffff42}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='>c\x00\x00'], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) write$P9_RSYMLINK(r3, &(0x7f0000000140)={0x14, 0x11, 0x2, {0xb4, 0x2, 0x2}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 188.243861] binder: 8265:8294 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 188.260491] binder: 8265:8294 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 188.282035] binder: 8268:8280 ioctl c0306201 20008fd0 returned -22 07:12:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair(0x5, 0xa, 0x5, &(0x7f00000040c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000004100)=""/82, &(0x7f0000004180)=0x52) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x110, r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x40) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100)="855f3a43db2b54e39f454d524c3eccbe2ae9e9f620a185d05f0b308735a592f6780e5f74dde0326d43b4d71b3b75d22181418ea1fae2156a8495d54fe0ed0fb0c92908b6cd9d9955f3a9e1b775954809c23cec95f243df7c95c72b8bd1fddc", 0x0, 0x4}, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000000), 0x0}, 0x20) [ 188.350584] binder: 8308:8311 unknown command 25406 [ 188.364943] binder: 8308:8311 ioctl c0306201 2000dfd0 returned -22 [ 188.436929] binder: 8308:8327 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 188.911715] binder: 8265:8332 ioctl c0306201 20012000 returned -14 [ 188.918219] binder: 8265:8332 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:12:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x5) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0xe}, 0x1, 0x2, 0x3, 0x7, 0x101, 0xb2, 0x4}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@mcast2, r3}, 0x14) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x3, 0x914, 0x7, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socketpair$inet(0x2, 0xf, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000140)="9404bb2a2240f9f405e71ef9317f9c71bb6a2b17858d7705f1af313d9f77d104924728db21c239a76f2b7bec8f52867091624647737515cd65ef527ccdc2adc348213e688ba8c71126e6282df19e9ba4c71912317fdb1e4ef93204660dab765bad341fe52a9f53c21a9d82d641d0c0319a78e0de6924f753e0ccca90b9377adb58377881129e1dabac06582eebbd5b40d2617eddb0e02a79b843266a9feb06dffcf4c6a1325c93702587d5b3625939c8c1fec5ec74f21fa2842dd78c0db04ca3bf2d27287d", 0xc5) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:24 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) [ 188.971266] binder: 8265:8333 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 188.978150] binder: 8265:8331 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:24 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) ioctl$KDADDIO(r0, 0x4b34, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000000c0)=0xc) 07:12:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x4, 0x9, 0x5, 0x20, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800)='/proc/self/net/pfkey\x00', 0x20800, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000001940)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001980)={@mcast1, r2}, 0x14) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) 07:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @mcast2, 0xd87f}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 189.071208] binder: 8338:8343 tried to acquire reference to desc 0, got 1 instead [ 189.092057] binder: 8338:8352 unknown command 536872576 [ 189.102307] binder: 8338:8352 ioctl c0306201 20008fd0 returned -22 [ 189.106457] binder: 8338:8360 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 189.144282] binder: 8308:8327 tried to acquire reference to desc 0, got 1 instead [ 189.159643] binder: 8308:8366 unknown command 25406 [ 189.179820] binder: 8308:8366 ioctl c0306201 2000dfd0 returned -22 07:12:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) write$P9_RREMOVE(r2, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) 07:12:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) socketpair(0x9, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @loopback}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', r3}) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) listen(r1, 0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r2, &(0x7f0000000140)="03388e367919ec53631649c86c008d3f91f5abd3150ca4c606c841252252ad5444094b7896dc6f424771f4373efe8dce5b5ebb5c7e3bacb77eb034cd5d8cf9b14cc11589fbbad9624910092222877d33fefb73c86bad43a24503f89a59fa9889bf35fafab8e2cdcbcda647", 0x6b, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {{0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ptr={0x70742a85, 0x1, &(0x7f0000000400), 0x0, 0x2, 0x40}], &(0x7f0000000480)=[0x0, 0x78, 0x20, 0x30, 0x28]}, 0x8}}, @request_death={0x400c630e, 0x4, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000000140)=""/243, &(0x7f0000000240)=0xf3) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) write$P9_RCLUNK(r2, &(0x7f0000000580)={0x7, 0x79, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000280)={'raw\x00'}, &(0x7f0000000300)=0x54) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) [ 189.197152] binder: undelivered death notification, 0000000000000000 [ 189.209073] binder: undelivered death notification, 0000000000000000 07:12:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0x2, 0x914, 0x3, 0x2}, 0xffffffa8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0, 0x3}, 0xfffffffffffffe28) 07:12:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 189.249483] binder: 8375:8381 ioctl c0306201 20000380 returned -14 [ 189.257677] binder: 8375:8381 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x12c3e237f078b77) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f00000002c0)={0xa, 0x4e1e, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0xfffffffffffffffe}, 0xfffffd00) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 189.316556] binder: 8375:8393 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 189.316597] binder: 8376:8380 tried to acquire reference to desc 0, got 1 instead [ 189.317633] binder: 8376:8380 unknown command 536872576 [ 189.317642] binder: 8376:8380 ioctl c0306201 20008fd0 returned -22 [ 189.372031] binder: 8376:8401 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 189.381757] binder: 8375:8402 BC_DEAD_BINDER_DONE 0000000000000000 not found 07:12:24 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0xff7f) syncfs(r0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0x2, 0x914, 0x4000000005, 0x2, r1, 0x101}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000440), 0x0}, 0x20) prctl$PR_GET_NO_NEW_PRIVS(0x27) 07:12:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000140)="a53b453d8d7951d97341a5f2edee95a8ece8bd825d1779f3517a4eac8ea0c260f30bbda6b497ae94e6edbd48ed6af927bd35ab048a4a1c6b13bd4db1c2f77846a0e92082edba3302f7606b00f6e9f7d5b0ff1d96ca5905bf01b5e878e20ea6ea6ddab509f6faafe446ad7177fe4c9d68c923", 0x72) 07:12:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x18f, 0x0, &(0x7f0000000380)="3ece60ce5a44df476c7eb76e1316c2e529e5984383b496340cd1c4ddbf5c430475dfbfc8e5f52a679e7f99ebdf9d7230c898aa62f51a71b8f4351d707de064980eec26499ea62b3c8d0c79dcedb5ce85ffd04b47f1d2489d5b52d25049d39b9bebaa926fb184fc4778e015c19776acb9a7dd5adfc18d437f28c43e1d09691f0132e62badc5f0c58f231493a3474ac62afd860248d3f7f55a5458fec9f3aace58b52c0d01f59d0203ae00fd0b99476dd44a9fcd56ee028672c48dcd9535077c43b4adb2aac94751ddcf68729c6cf6c97070839f3fed3de7490c8f13dc9d1e9dd18b85097f665d73a8f3783148495c37c0434936d4fb7ffe0041293885caef2b7e3800067e19beeacdd857b3518c7aa1f57c27162c119d7fa9c443dac3d2dc6dd4f54f2318b8ecb4129fc4ddfb4e3fba90526e7e29a8b4dea47ba84aa61d5f154a2c84edf13ea460090d76fa9bef79a8c3b239106f5fcead84fcad18ab4d4788ba7b80b42114781392406cdf221eba608192013f9a9a2bde23419f97887644d1f53143f07d3d8b5b7cf9b02c0f4d2be0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\f\b{aE\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) recvfrom(r1, &(0x7f0000000000)=""/41, 0x29, 0x2, &(0x7f0000000300)=@l2={0x1f, 0x636, {0x101, 0x8001, 0x48000000000000, 0x7, 0x4, 0x7fffffff}, 0x3ff, 0x2}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="51563d3e59c20e6b9f12dd38b856ec1855ab923de7b8ff3066385eb781774f46b06d2699f40f8e31bafcbfc3aa1e121a7c28713fec590f4a53a072e097a1f40163ea5c4fb4bdfd708f5172ff7b63513916fbb3de672dac58991dbafe6c4b525c73d53c85546303f4017b77820bbe81f21298fe38f9fbd6c31750518cba51bc31885c8b9fdd9621ddd741dcd7e80814851b843ccf42414836b4dc2904f9e9f6b9bcfc8d19b908a4cf90710c3b4461b7adeb524358603a78e4fb4e315e59bbbc6ed0aaebd294b24a4803e98b09b24aacccec86bcbd4cc39193b47dd45612", 0xdd}, {&(0x7f0000000080)="8fd8fd81f1e8de812c7df94b6d1e00bf3eab137b0665693c2068759dd8ac9c38efe87e9eb03ca20d596b0cf3012a4f5befc8c5193ef602b0580ed1f1db", 0x3d}, {&(0x7f0000000240)="6bf4c8f9ca8e07095e1692ea91c4f20986842bef9d711eea38cdabe66bb76ec809e5edb88dac2640bd0ebfefa2b61bf2c89da9a7ad819cdcea90c07d0838a9d0ccd81735e70609d883226e896325f6a49e47b9010d5a01f3a9b9c9e19c4fa48b1352dc6f8c76bdc069ef7f162809df619d1512b8650718031cac7d762725ddfc88165cc1d46898a4131e728d26f223806377e95010c71a26ac86ddb31bb0d500584890a56bc1a6befcc34db863a8167672c168af0000", 0xb6}], 0x3) 07:12:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/81) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) listen(r2, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r1, &(0x7f0000000100), 0x0) 07:12:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xb3, 0x4) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0x3, "6abbec"}, &(0x7f00000001c0)=0x27) pipe2(&(0x7f00000000c0), 0x800) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 189.504565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49753 sclass=netlink_tcpdiag_socket pig=8423 comm=syz-executor3 [ 189.535925] binder: 8414:8426 unknown command 1635452940 07:12:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7b6f}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 189.570630] binder: 8414:8426 ioctl c0306201 2000dfd0 returned -22 [ 189.588794] binder: 8414:8437 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 190.046861] binder: 8375:8393 ioctl c0306201 20000380 returned -14 [ 190.053578] binder: 8375:8402 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 07:12:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="634d3c00000000000000000000000039ff0f37be0700c4bf03fb780eb85484bd055625e84d5776f44095d4ace9374018a1ec77700f85ef21c2985c49695c80b5701484d40c1b2d7bef44eed74e903dc0251d44258e66d0461ae4234acf58d0cd2162415a41c30e3568e52aac1cfe69c9c33c8755d958342ac2f7c3cb857602e2fc8346243509f840f5feae74157966aeda41eb3cc8c9de176f7eb519e4319c727f0f0c33e7dfd14d15d1cea59388a55b6c913dba88249717f7f30079612ec59f982893b1305a4f18216aaf920028a119ae7e4a53"], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x1000000000b, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) 07:12:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000001280)={0xe, 0x9, 0x7, 0x7f, 0xd7, "4cec3662fbed45124292a8b8445fa52d48d339524367688211f84bb71409e9ec05a1154f578a8d930629f50aff216ff46782d5b5516999c23729b904fddec147a0e0b537cb2c89ba74b0ba6faf472355cb99737a903b5b54efac7d50ffb4a539a2a3fd2ae768a97459f7ef1708eb8f2b5f1367eeeaf5e2b4a2a7369ee5c0146f751e9b2a531d4fb31e5ba41c3aaa87fd98d5e4585c2580d96cc7920fab412f2ae0025ffe41cee296097e1bf6a2b61284350d1e1af96c6b444ac0b9a3e5a8abbdf34558e08df5ef9586a2cb6ab4f2bcf22b3eb47e1e2f79"}, 0xe3) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r0, r0) write$UHID_CREATE(r4, &(0x7f0000001140)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x10000, 0x1f, 0x5, 0x1}, 0x120) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x9, 0x6, 0x3, 0xff, 0x2, 0xcb8, 0x9, 0x400}, &(0x7f00000000c0)={0x5, 0x100000000, 0xdc1, 0xcb20, 0x0, 0x81, 0x400, 0x400}, &(0x7f0000000140)={0x29, 0x1, 0x400000000, 0x4, 0x0, 0xffffffff7fffffff, 0x101, 0x654e}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={0x2}, 0x8}) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:25 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ftruncate(r0, 0x2008200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[]}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000600)=""/113) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x20, 0x0, 0x10000) 07:12:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="970222a0dbb8e3b282333ab75e7bea65fc9478cb512a20b37890a89f0e01e737b1cae9bdca39795cf97302676b6e9d651cc4528e0c747649b35f50178eed7b455fa4f67e4a7e9775f1fdd7ee1c127183296d39c6a195e2d630be3252bde7c788b6bf6fb473cda6f20a12bff122d12c53851bcc4bfa70237a47261fd7fe9f705809b0f4e52ccbd45effd5ff6585fb46b85469020cc37cfa21d370e8ff33", &(0x7f0000000000)="d07b0f9c45a3187c118ab2fc00facf77665b46e1281376ff2d3441f8a9619ab80e67b5a907eb36b7cd37d6888cbd99b6a0accdd61ecc6e6864161b44a4999960de8d5139b03a90543c9ed3384c73207ae524916a2eea"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 190.126472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31091 sclass=netlink_tcpdiag_socket pig=8455 comm=syz-executor3 [ 190.139410] binder: 8449:8456 unknown command 3951971 [ 190.145044] binder: 8449:8456 ioctl c0306201 20000040 returned -22 07:12:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0xfffffffffffffffe}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000200)=0xfff, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000440)="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", &(0x7f00000000c0)="5d7af0d99392e795cc1c2ca8b063cfa95b1eaac7342b41bb3e236af8dea4fa6ed624c366dd1cd7ac79b25adaf5556b4d898476ee4d8a6ab51886487e13df390042f1cb8a579259ab57583194029ee5da37f61a23e37043f51347bd7543d4db687d5af0779df6dcb23e78072a92ad1c77bdd0c1f477acc526a17f39fd4c43335b79179d36d76599658ca6ea9cd244a9e7b1f2f0e25e337051def073", 0x2}, 0x13) signalfd(r1, &(0x7f00000001c0)={0x95}, 0x8) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001440)={0x0, 0x0, 0x2, 0x0, [], [{0xd6a, 0xe5e, 0x3, 0x1, 0xffffffff, 0x3f}, {0x5, 0x5, 0x2, 0x0, 0x9, 0x3}], [[], []]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 190.176195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31091 sclass=netlink_tcpdiag_socket pig=8464 comm=syz-executor3 07:12:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x202000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x1, 0x0, &(0x7f0000000340)="de"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 07:12:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0xfffffffffffffffa, 0x9, 0x7, 0x1}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 07:12:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000400)=0x11b, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x1b, 0x4, @thr={&(0x7f0000000140)="3756a4a70ef3dfe14d4357b1829dd54af612ac56e7993a012a19b21efba46aa92e5274370a092d4fd2078837ccb53beb6e5a65870b4f5e38dd85615571f8ae789f87dcf3a4e021369822caf8f95623e20420fcfc0213ec6fca08635dbbaf156466d9a22cf7927beefc01e1ced631d1238850f74fe36aadbb1ea67065660bf3e224e47d21f33249a93492a422dd19b22ba7d0b5c6fbf9630a8a46143ae75576377c5fb23e4d7c6e3c5bb9e28f682ed6348169f9913e24d6c5a87ac544cdd72bb097ae149751ed35be753273df7e5b7d3570c2d732cb536760150738d4026ec36d331163947ff1c0c848500a330e30", &(0x7f0000000240)="70889ce126043541742d307b628e27336d790f2d62a89ab6a325f72d40ffb3ffc77b085d9798254f03e9e62cd04c4e1ac41c69e6d98ff9acfe7cb31e69ac846e44c62034fb7fd0d7013d2749dc557781b35713c338dbf192546238a15e2e11748cccee363789da7af7c8f840cd8f75256b887e0efa5fa384d3f150625dc564"}}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000380)) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000500)) 07:12:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70030000110001032bbd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0000020000000000612a6419996fac0908008500", @ANYRES32=r0, @ANYBLOB="b402400008008500", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x370}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) [ 190.281740] binder: 8414:8426 tried to acquire reference to desc 0, got 1 instead [ 190.289932] binder: 8414:8475 unknown command 536872576 [ 190.295512] binder: 8414:8475 ioctl c0306201 20008fd0 returned -22 [ 190.295706] binder: 8414:8476 unknown command 1635452940 [ 190.295714] binder: 8414:8476 ioctl c0306201 2000dfd0 returned -22 [ 190.314584] binder: undelivered death notification, 0000000000000000 07:12:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x200, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000440), 0x0}, 0x20) getuid() [ 190.386099] ------------[ cut here ]------------ [ 190.390905] WARNING: CPU: 0 PID: 8479 at net/ipv4/tcp.c:2229 tcp_close+0xcaa/0x1030 [ 190.398675] Kernel panic - not syncing: panic_on_warn set ... [ 190.398675] [ 190.406013] CPU: 0 PID: 8479 Comm: syz-executor3 Not tainted 4.14.82+ #8 [ 190.412910] Call Trace: [ 190.415477] dump_stack+0xb9/0x11b [ 190.418995] ? tcp_close+0xbf0/0x1030 [ 190.422775] panic+0x1bf/0x3a4 [ 190.425963] ? add_taint.cold.4+0x16/0x16 [ 190.430092] ? __probe_kernel_read+0x163/0x1c0 [ 190.434658] ? tcp_close+0xcaa/0x1030 [ 190.438519] __warn.cold.7+0x2f/0x35 [ 190.442212] ? retint_kernel+0x2d/0x2d [ 190.446076] ? tcp_close+0xcaa/0x1030 [ 190.449854] report_bug+0x1f7/0x26c [ 190.453465] do_error_trap+0x1ba/0x2c0 [ 190.457333] ? math_error+0x2d0/0x2d0 [ 190.461112] ? perf_trace_lock_acquire+0x126/0x4d0 [ 190.466020] ? HARDIRQ_verbose+0x10/0x10 [ 190.470056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 190.474900] invalid_op+0x18/0x40 [ 190.478330] RIP: 0010:tcp_close+0xcaa/0x1030 [ 190.482720] RSP: 0018:ffff8801c6b07d50 EFLAGS: 00010297 [ 190.488061] RAX: ffff8801c5f45e00 RBX: ffff88019f0f4200 RCX: 1ffff10038be8cc5 [ 190.495309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88019f0f42c0 [ 190.502552] RBP: ffff88019f0f4228 R08: 0000000000004d44 R09: ffffffffb12ed140 [ 190.509800] R10: ffff8801c5f46658 R11: 0000000000000001 R12: ffff88019f0f4288 [ 190.517045] R13: ffff88019f0f4212 R14: ffff88019f0f4280 R15: 0000000000000004 [ 190.524396] ? lock_acquire+0x10f/0x380 [ 190.528361] ? ip_mc_drop_socket+0x16/0x220 [ 190.532666] ? __sock_release+0x250/0x250 [ 190.536787] inet_release+0xf7/0x1c0 [ 190.540476] inet6_release+0x4b/0x70 [ 190.544161] __sock_release+0xce/0x250 [ 190.548025] sock_close+0x15/0x20 [ 190.551540] __fput+0x25e/0x6f0 [ 190.554916] task_work_run+0x116/0x190 [ 190.558786] exit_to_usermode_loop+0x12e/0x150 [ 190.563345] do_syscall_64+0x35d/0x4b0 [ 190.567216] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 190.572399] RIP: 0033:0x411021 [ 190.575567] RSP: 002b:00007ffd60ebeff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 190.583247] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000411021 [ 190.590500] RDX: 0000000000000000 RSI: 00000000007311c8 RDI: 0000000000000005 [ 190.597742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.605004] R10: 00007ffd60ebef20 R11: 0000000000000293 R12: 0000000000000000 [ 190.612250] R13: 0000000000000001 R14: 00000000000000c6 R15: 0000000000000003 [ 190.620104] Kernel Offset: 0x2ce00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 190.631099] Rebooting in 86400 seconds..