ported
[ 1263.867275] SS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1263.883247] binder: 16787:16820 ioctl c0306201 20008fd0 returned -22
[ 1263.920059] ES:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1263.927331] binder: BINDER_SET_CONTEXT_MGR already set
[ 1263.954717] binder: 16787:16839 ioctl 40046207 0 returned -16
[ 1263.964395] binder: BC_ACQUIRE_RESULT not supported
[ 1263.970872] FS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1263.993960] binder: 16787:16820 ioctl c0306201 20008fd0 returned -22
[ 1264.001640] GS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1264.021288] GDTR:                           limit=0x00000000, base=0x0000000000000000
[ 1264.050343] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1264.067268] IDTR:                           limit=0x00000000, base=0x0000000000000000
[ 1264.085076] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1264.096406] EFER =     0x0000000000006000  PAT = 0x0007040600070406
[ 1264.103868] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[ 1264.113995] Interruptibility = 00000008  ActivityState = 00000000
[ 1264.121068] *** Host State ***
[ 1264.124808] RIP = 0xffffffff811b3230  RSP = 0xffff88804bb1f8b8
[ 1264.132610] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[ 1264.139744] FSBase=00007f9d5d6be700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000
[ 1264.147977] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000
[ 1264.154354] CR0=0000000080050033 CR3=00000000a871e000 CR4=00000000001426e0
[ 1264.164916] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360
[ 1264.182445] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[ 1264.191472] *** Control State ***
[ 1264.195340] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[ 1264.204150] EntryControls=0000d1ff ExitControls=002fefff
[ 1264.210287] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[ 1264.217532] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[ 1264.225206] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
07:35:30 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x4000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:30 executing program 1:
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x0, 0xfffffffe, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

07:35:30 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})

07:35:30 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x10000, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SMI(r3, 0xaeb7)
pipe(0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000640)={0x3, 0x0, [{0x1, 0x0, 0x0, 0x0, 0xffff}, {0x80000001, 0x0, 0x6, 0x7, 0x9931}, {}]})
r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x408)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000000c0)={0xfffffffffffff192, 0x1f, 0x0, 'queue0\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500})
ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:35:30 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
getsockopt$inet6_dccp_int(r2, 0x21, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="b9800000c00f3235000100000f300f01c83e0ff382610000008f68e4a20f0cf3abf044804304f4450f01cab900010040b8245cb3bcba08bfe5370f300f986706b9800000c00f3235000100000f30", 0x4e}], 0x1, 0x20, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff77, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x101000, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x9c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x13}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xab3b}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @window={0x3, 0x9}], 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x2, 0x0, "08929237a116f6e65fb1051657264e641fc27e47887798a8bc90ffec2e0c1ed08ad73ce19d5f4cd829ac2723c84f91a2c3aa37780359fcb94b38907e7f9bbdd3671083d7526e3f3dcd27eaa6f963b02c"}, 0xd8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
socket(0xd, 0x0, 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000480)=ANY=[])

[ 1264.232640]         reason=80000021 qualification=0000000000000000
[ 1264.251206] IDTVectoring: info=00000000 errcode=00000000
[ 1264.257376] TSC Offset = 0xfffffd59cd3f7e6e
[ 1264.269358] EPT pointer = 0x000000009f12001e
[ 1264.346911] binder: BINDER_SET_CONTEXT_MGR already set
07:35:30 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x8000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1264.391207] binder: 16850:16857 ioctl 40046207 0 returned -16
07:35:31 executing program 1:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x901)
r2 = dup2(r1, r0)
write$FUSE_BMAP(r2, 0x0, 0x1d9)
syz_open_dev$dspn(0x0, 0x0, 0x0)
r3 = getpgrp(0xffffffffffffffff)
process_vm_writev(r3, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000240)=""/240, 0xf0}], 0x2, &(0x7f0000000380)=[{&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/234, 0x41}], 0x2, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x41395527)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(r6, 0x5452, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={0x0, <r7=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000040)=""/59)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac9b}], 0x1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)

07:35:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0})

[ 1264.557783] *** Guest State ***
07:35:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1264.601349] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7
07:35:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xa000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1264.666386] binder: 16977 invalid dec weak, ref 278 desc 0 s 1 w 0
[ 1264.709555] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[ 1264.738317] binder: BINDER_SET_CONTEXT_MGR already set
[ 1264.751122] binder: 16977:16985 ioctl 40046207 0 returned -16
[ 1264.764642] CR3 = 0x0000000000000000
[ 1264.768923] RSP = 0x0000000000000000  RIP = 0x0000000000008000
[ 1264.789491] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[ 1264.806287] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
07:35:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1264.825033] CS:   sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000
07:35:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0})

07:35:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xe000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1264.965039] DS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1264.977205] binder: 16992:16993 BC_FREE_BUFFER u0000000000000000 no match
[ 1265.026893] binder: BINDER_SET_CONTEXT_MGR already set
07:35:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xf000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1265.050576] binder: 16992:17000 ioctl 40046207 0 returned -16
[ 1265.063437] SS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1265.077014] binder: 16992:16993 BC_FREE_BUFFER u0000000000000000 no match
[ 1265.156236] ES:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1265.192277] FS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1265.243635] GS:   sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000
[ 1265.276734] GDTR:                           limit=0x00000000, base=0x0000000000000000
[ 1265.317195] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1265.343732] IDTR:                           limit=0x00000000, base=0x0000000000000000
[ 1265.368751] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[ 1265.384248] EFER =     0x0000000000006000  PAT = 0x0007040600070406
[ 1265.392288] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[ 1265.405797] Interruptibility = 00000008  ActivityState = 00000000
[ 1265.414046] *** Host State ***
[ 1265.426308] RIP = 0xffffffff811b3230  RSP = 0xffff8880933f78b8
[ 1265.434249] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[ 1265.447799] FSBase=00007f9d5d6be700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000
[ 1265.457266] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[ 1265.470298] CR0=0000000080050033 CR3=000000008d3ec000 CR4=00000000001426e0
[ 1265.477737] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360
[ 1265.494439] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[ 1265.501028] *** Control State ***
[ 1265.504627] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[ 1265.511710] EntryControls=0000d1ff ExitControls=002fefff
[ 1265.517534] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
07:35:32 executing program 5:
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000700)=""/143)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000840)={0x0, 0x0, 0x2080, {0x5000, 0x13000, 0x2}, [], "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", "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"})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0}, 0x10)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000e, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x10300})

07:35:32 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:32 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0})

[ 1265.524687] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[ 1265.531564] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
[ 1265.538163]         reason=80000021 qualification=0000000000000000
[ 1265.544545] IDTVectoring: info=00000000 errcode=00000000
[ 1265.550193] TSC Offset = 0xfffffd59420ded6e
[ 1265.554531] EPT pointer = 0x000000008f78501e
07:35:32 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14e2000000000000000000000000000000000000b763033344b708bfbae904ee0ef0995038896af17004a6553f3e855aaed40ccf6b4d1465388e9f924a0d093abc5a2a202414aeb2787b5beb0aa2731408a6fdc3a55b5d1ad9b997f7e3f32f106e127299e73363851913b7cae8c124e2d8eb353c16b19fc5113be3b8397749ffb034f74fece6a588d0606121d63ae9e5cb4291312fa1e9b26ca9a7bb6adc8806b841b11491cd75d59cbd193f77fb6352f92f516e2a6c8f2713eeca5bdc49e8edb5b724276aa09c575678270e"], 0x14}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getpolicy={0x50, 0x15, 0x11, 0x0, 0x0, {{@in6=@loopback, @in6=@mcast1}, 0x6e6bb7}}, 0x50}, 0x8}, 0x0)

07:35:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x10000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:32 executing program 1:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x901)
r2 = dup2(r1, r0)
write$FUSE_BMAP(r2, 0x0, 0x1d9)
syz_open_dev$dspn(0x0, 0x0, 0x0)
r3 = getpgrp(0xffffffffffffffff)
process_vm_writev(r3, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000240)=""/240, 0xf0}], 0x2, &(0x7f0000000380)=[{&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/234, 0x41}], 0x2, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000340), 0x41395527)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(r6, 0x5452, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={0x0, <r7=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000040)=""/59)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac9b}], 0x1, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)

[ 1265.634773] binder: BC_ATTEMPT_ACQUIRE not supported
[ 1265.649480] binder: 17018:17024 ioctl c0306201 20008fd0 returned -22
07:35:32 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1265.680440] binder: BINDER_SET_CONTEXT_MGR already set
[ 1265.685782] binder: 17018:17086 ioctl 40046207 0 returned -16
07:35:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x3f000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000340)=0xbdb, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000037c0), 0xfffffdef)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x240000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x0, &(0x7f0000000180), 0x0)
clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280))
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000240)={0xa, 0xa, 0x0, 0x425}, 0xa)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000380)=""/189)
pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
getpgid(0xffffffffffffffff)
r6 = getpid()
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x1c, 0x80800)
r7 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8001, 0x1)
ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000540)=0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='security\x00'}, 0x10)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0)
waitid(0x0, r6, 0x0, 0x80000008, &(0x7f0000000480))

07:35:32 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58)
ioctl$int_out(r0, 0x2, &(0x7f00000000c0))
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r1, r2, 0x0, 0x10000000000443)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

07:35:32 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x60000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:32 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10630840"], 0x0, 0x0, 0x0})

07:35:32 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1266.069599] binder: 17184:17185 BC_DEAD_BINDER_DONE 0000000000000000 not found
07:35:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x9effffff, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1266.158903] binder: BINDER_SET_CONTEXT_MGR already set
[ 1266.217460] binder: 17184:17185 BC_DEAD_BINDER_DONE 0000000000000000 not found
07:35:32 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xc0000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1266.292138] binder: 17184:17245 ioctl 40046207 0 returned -16
07:35:33 executing program 1:
r0 = timerfd_create(0x8, 0x7fffd)
r1 = dup3(r0, r0, 0x80000)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x80, 0x4})

07:35:33 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:33 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0})

07:35:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xc00e0000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:33 executing program 5:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r0 = syz_open_dev$usb(&(0x7f0000001b80)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x400000)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x0, 0x80000001}, 0x14)
r1 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000)
clock_gettime(0x0, &(0x7f0000001ac0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000001c0)=""/58, 0x3a}], 0x4}, 0xbe4a}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f00000006c0)=""/61, 0x3d}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x6, &(0x7f00000019c0)=""/100, 0x64}, 0x82}], 0x2, 0x40, &(0x7f0000001b00)={r2, r3+30000000})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x48)
r4 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='eth1$selinuxuser-},\x00', 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r4)

07:35:33 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000b57ff8)={<r1=>0xffffffffffffffff}, 0x0)
ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000b34000/0x1000)=nil, 0x1000, 0xf)
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x71)
ioctl$FICLONE(r0, 0x40049409, r1)
bind$alg(r0, &(0x7f0000000900)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x20000549}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0), 0x8}, 0x0)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

[ 1266.824481] binder: 17284:17285 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[ 1266.900951] binder: BINDER_SET_CONTEXT_MGR already set
07:35:33 executing program 1:
r0 = socket$inet6(0x10, 0x800000000000803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc76, &(0x7f0000000480), 0x1d5, 0x0, 0xfffffffffffffdc5}, 0x5)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00\x00\xf7\xfdp1SJg\xf1\xe4\x9bv\x00\x00\x00\x00loN\b\xeer\xac\xf4h\x0f\x02\x06aLZD\xf3\x9f\r\x17S\xf06\xea\x95\x1c\xff\xdc\x97\xfcfI\xa2\xc7\x90\vn\x82\f\xae\xf4uE\xcc;\xad}\xe4\xdd\xd6\x8acL\xb1i\xc2\x9c\x89\xf6\x88K\x03p\x8b*\xa8[\xbd\xc0T\xc3~\xd99@\b)l\xc4\xbd&\x10T\x8c3Q\xcf\xdb\xc0;{\xb6\xf9\xaf$\xd9y\xe8\xa2b}K\xe5\f\x1a\xf6')
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=<r4=>0x0, &(0x7f0000000240)=0x4)
ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000440)=0x5)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000680)={r4, 0x1000000000000}, 0x41c)
getdents(r3, &(0x7f0000000040)=""/46, 0x2e)
ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000004c0)={0x7, <r5=>0x0, 0x0, 0xd4d0})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000540)={<r6=>r4, 0x4}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000005c0)={r6, 0x3ff}, &(0x7f0000000600)=0x8)
ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000500)={0xca4, r5})
getdents64(r3, 0x0, 0xb7f056441464840)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000480)={@ipv4={[], [], @remote}, <r7=>0x0}, &(0x7f00000006c0)=0x14)
bind$xdp(r3, &(0x7f0000000700)={0x2c, 0x551eed29542b56c4, r7, 0x4}, 0x10)
fanotify_mark(r3, 0x7, 0x0, r0, &(0x7f0000000300)='./file0\x00')
ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/173)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, &(0x7f0000000080)="5cd276847e94ab6143e211fc8ac5a541a66a78115012b76c371ca4f1f30b2b6713c871c35f90617afc493795a25501f099aef56bd274ba90e1421119723c6613e8b59daf267502deb276e6955b60365c35168b652accadb74af6691490273d5b9087d722aca8790ba7ddea4a2b2ee621eb38a0662baed098e3013a91d58d8079e64cc9a00c7de21e4551bf63e126cc09da276e5448f3611bb80ea2205bdd3bf8ec5928c71fa54a4c11be35e16472798a566215a70bf64c783d697ae4344eb10abf3dfa27fd6a6f0f32b8", &(0x7f0000000180)=""/84}, 0x18)

07:35:33 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xf0ffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1266.922301] binder: 17284:17299 ioctl 40046207 0 returned -16
[ 1266.952227] binder: 17284:17285 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
07:35:33 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12630c40"], 0x0, 0x0, 0x0})

07:35:33 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:33 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0})

[ 1267.188746] binder: 17353:17362 unknown command 1074553618
07:35:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xfffff000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1267.262471] binder: 17353:17362 ioctl c0306201 20008fd0 returned -22
[ 1267.308584] binder: BINDER_SET_CONTEXT_MGR already set
[ 1267.318960] binder: 17413:17416 ioctl 40046207 0 returned -16
[ 1267.337617] binder: BINDER_SET_CONTEXT_MGR already set
07:35:33 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xffffff7f, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1267.434525] binder: 17353:17430 ioctl 40046207 0 returned -16
07:35:34 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0})

[ 1267.689270] binder: 17443:17444 BC_CLEAR_DEATH_NOTIFICATION death notification not active
07:35:34 executing program 5:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x59b, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r0 = syz_open_dev$usb(&(0x7f0000001b80)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x400000)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x0, 0x80000001}, 0x14)
r1 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000)
clock_gettime(0x0, &(0x7f0000001ac0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000001c0)=""/58, 0x3a}], 0x4}, 0xbe4a}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f00000006c0)=""/61, 0x3d}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x6, &(0x7f00000019c0)=""/100, 0x64}, 0x82}], 0x2, 0x40, &(0x7f0000001b00)={r2, r3+30000000})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x48)
r4 = request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='eth1$selinuxuser-},\x00', 0xfffffffffffffffc)
keyctl$assume_authority(0x10, r4)

07:35:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000f060701ff0080800000000040150000e97deff9010c000b00ce09563a6f9e758400000000000000"], 0x2c}}, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={<r2=>0x0, @in6={{0xa, 0x4e20, 0xffffffffffffff81, @empty, 0x9}}, 0x3}, &(0x7f0000000100)=0x90)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x8}, 0x8)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000026bd7000f00600001200000064000500080001006574680014000200080004007f000000080000010069620000240002000800020000000100080003000600005f9364bcfcddfc4f00080001001a0000000800010069620000080001006962000058664f7ea60b3bc58052ceb3c72b79bc552fc1479c195c550ea825658bbd4fb4ad6b0ae00e2750677280b102940cb124f9ff9d1ae5e8833bb2af35db9d9afee852f9222b24b3005f83bf6ea97f4560eb9adcbe325c020ecbf30c693bb7b29e7874ab4a8a94f4432e5937efa604ee07b11aa2add9c1fc"], 0x78}}, 0x20000080)
write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x1, 0x4, 0x10000, 0x20}, 0xa, [0xfff, 0x5, 0x0, 0x8e, 0x1000, 0x200, 0x1f, 0x5c, 0x7f, 0x3, 0x200, 0x8, 0x80000000, 0x1, 0x4, 0x9, 0x9, 0x3, 0xffff, 0x8, 0x3, 0x9, 0x10001, 0x100, 0x4a, 0x40, 0x0, 0x1ff, 0x101, 0x7, 0x20, 0x8, 0xe5ab, 0x903, 0x3, 0x8, 0x20, 0x400, 0x8, 0x1, 0x3ff, 0x4, 0x3f, 0x800, 0x8, 0x1f, 0x9, 0xca, 0x8, 0x1771, 0x2, 0x4f9, 0x1, 0xbb03, 0xc24e, 0x29f, 0xffffffffffff7fff, 0xbf, 0x200, 0xff, 0x9, 0xfa71, 0xfffffffffffffff9, 0xff], [0xffffffffffffff9c, 0x0, 0x0, 0x1f, 0x4, 0x4054, 0x7ff, 0x7, 0x80000000, 0x5, 0x3, 0xffff, 0x1, 0xabd, 0x3f, 0x1ff, 0x7, 0x0, 0x4, 0x7, 0x3, 0x1f, 0x8000, 0x8f2a, 0x1000, 0x1, 0x5, 0x8001, 0xfff, 0x6, 0x800000000, 0x20, 0x6, 0x8, 0xffffffffffff9688, 0x7, 0x1, 0x80000000, 0x4, 0x4, 0x9, 0x7fffffff, 0x9, 0x4, 0xfffffffffffffff7, 0x2, 0x8e, 0x1, 0x5, 0x5, 0x3a, 0x2, 0x20, 0x6, 0x5d2b000, 0x1, 0x7ff, 0x390b, 0x7, 0x100000000, 0x1000, 0x1ff, 0x80], [0x80, 0xfffffffffffffff9, 0x0, 0x1, 0x4, 0xaed, 0x3, 0x9, 0x9, 0x69, 0x8afe, 0x2, 0x5, 0x7ff, 0x3, 0x2, 0x1, 0x1, 0x80000000, 0x4, 0x3, 0x1, 0x20, 0xe, 0x8, 0x2, 0xfffffffffffffff8, 0x3f, 0x3, 0xf22, 0x4, 0x8000, 0xfa9e, 0x3, 0xffff, 0x6, 0xa9eb, 0xcac, 0x5, 0x8, 0xf4, 0x8, 0x4, 0x8000, 0x4, 0x8, 0x3, 0x7, 0x1, 0x1, 0x8, 0x8, 0x3, 0xc4, 0x8c9, 0xfffffffffffffffd, 0x3f, 0x2, 0x6, 0x81, 0x6, 0x7f, 0x2, 0x4], [0x8, 0x7, 0x2, 0x3f, 0x7, 0x1, 0x40, 0x80000000, 0x6, 0x6, 0x1000, 0x40, 0x1748, 0x7fffffff, 0x6, 0x7, 0x400, 0x1, 0x401, 0x10000, 0x4, 0xffffffffffffffe1, 0xeae8, 0x1, 0x0, 0x48, 0x81, 0xffffffff7fffffff, 0x6c9, 0x10000, 0x1, 0x2b, 0x2, 0x85, 0x380000000000000, 0x3, 0x800, 0x1, 0x101, 0x8, 0x7, 0x1ff, 0x7c2, 0x3ff, 0xb417, 0x7fff, 0xaa2, 0x100000001, 0x6, 0x6, 0x1, 0xfe, 0xe48, 0x8, 0xe182, 0x0, 0x6, 0x4, 0x1400000000000000, 0x5, 0x1ff, 0x7, 0xf7, 0x5]}, 0x45c)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0xb00, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffffffffa9b, @remote, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x43d}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9624}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67a}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mount(&(0x7f0000000840)=@filename='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000a40)='ocfs2_dlmfs\x00', 0x800000, 0x0)

07:35:34 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0})

07:35:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xffffff9e, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:34 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:34 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40, 0x0)
r1 = dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x3, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5)
getpgrp(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_pts(r0, 0x5)
r3 = dup3(r2, r0, 0x0)
uname(0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
ioctl$TCSETSW(r1, 0x5403, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000001c0)={0x1, 0xb8f})
write$UHID_INPUT(r3, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006)

07:35:34 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1267.931945] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1267.942465] binder: 17458:17459 BC_INCREFS_DONE u0000000000000000 no match
07:35:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xfffffff0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1267.991338] binder: BINDER_SET_CONTEXT_MGR already set
[ 1267.996780] binder: 17458:17476 ioctl 40046207 0 returned -16
07:35:34 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28021)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x0, 0x0, 0x10000})
write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e)

07:35:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@bridge_newneigh={0x30, 0x1c, 0x129, 0x0, 0x0, {}, [@NDA_DST_IPV6={0x14, 0x1, @dev}]}, 0x30}}, 0x0)

07:35:34 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x40030000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:34 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0})

07:35:34 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0})

[ 1268.308623] binder: BINDER_SET_CONTEXT_MGR already set
07:35:34 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:34 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x100)
sendto$inet(r0, &(0x7f00000002c0)="6b5e6626bcb4b54b7f2b949553c23a836c27043098d4a3", 0x17, 0x80, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00(\xab2\xe0\xa6\x02\xa4\x114{6\xe7H!\x9f\xdc^\xdb\'Rv2\f>\xc9\xc0@\xe8\xae\xa1\x03UU\x87\xb0r\x06\xc6@\x82\xdbPt\xa3\x85\xf0\xafqQ\xee\x90?\xe2\x811\x00\x1e\x91B\x19@\xb5\xf4\f\x8e1\xcd\x91\x94\xa97', 0x2, 0x0)
r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000040)=0xf00, 0x10a000d04)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x40001, 0x0, [0x0, 0x0, 0x80, 0x200, 0x2, 0x2, 0x3, 0x6]})
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=<r4=>0x0)
perf_event_open(&(0x7f00000000c0)={0xabd74d400e236e1f, 0x70, 0xffff, 0xffffffffffff8000, 0xde, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2286, 0x8, 0x7fffffff, 0x200, 0x2, 0x5, 0x7fffffff, 0x2d117a97, 0x0, 0x4, 0x80000000, 0x7, 0x6, 0x10001, 0x9eaa, 0x10001, 0x862, 0x3, 0x6, 0xffff, 0x9, 0x6852, 0x81, 0xefb50000, 0x1, 0x1000, 0x7d3f, 0x3f, 0x0, 0x8, 0x0, @perf_config_ext={0x5, 0x1}, 0x20080, 0xffffffff, 0x0, 0x6, 0x1, 0x3, 0x43}, r4, 0x6, 0xffffffffffffffff, 0x2)
r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
r6 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r5)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000480))
keyctl$instantiate(0xc, r5, &(0x7f0000000600)=ANY=[@ANYBLOB="6c6f61642072002f6465762f76636323003030303bbb69f1de8d47480c4e67b51d9a325cde2ad96c7b3030300000004faa30b59b1d055950c8ec30bd4e093c401a7040ce4b31af2a52ca24041c7eef32405edf13feb4bb9505ea4129d4c6cc5eed729141d8796bddcb025db560cc041cd8c40ddba0974696c4bb3990a1929d4cb99105129d026a94dc81f010938af2036afe9e524dd5e09cd09b373d9200dad50f9996c42cb82421e2ad907352c64a647788bedde60c3e870567b985e45de8f9c1e1f54d727cd34cc0cf967b5a71a5a0657aaacbc61b8ccb6db865175d0c0b9c288b9ac2cbd432f46ec36de1"], 0x35, r6)
ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000080)={0x7, 0x1})

[ 1268.340913] binder: 17594:17596 ioctl 40046207 0 returned -16
[ 1268.341498] binder: 17593:17595 BC_INCREFS_DONE u0000000000000000 no match
[ 1268.364635] binder: 17594:17596 BC_ACQUIRE_DONE u0000000000000000 no match
07:35:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xf0ffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1268.395613] binder: BINDER_SET_CONTEXT_MGR already set
[ 1268.417156] binder: 17594:17603 ioctl 40046207 0 returned -16
[ 1268.451274] binder: 17594:17596 BC_ACQUIRE_DONE u0000000000000000 no match
07:35:35 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:35 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:35 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0})

07:35:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x100000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:35 executing program 2:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2c, 0x6001)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18)

[ 1268.619028] binder_alloc: 17616: binder_alloc_buf, no vma
07:35:35 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x100)
sendto$inet(r0, &(0x7f00000002c0)="6b5e6626bcb4b54b7f2b949553c23a836c27043098d4a3", 0x17, 0x80, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00(\xab2\xe0\xa6\x02\xa4\x114{6\xe7H!\x9f\xdc^\xdb\'Rv2\f>\xc9\xc0@\xe8\xae\xa1\x03UU\x87\xb0r\x06\xc6@\x82\xdbPt\xa3\x85\xf0\xafqQ\xee\x90?\xe2\x811\x00\x1e\x91B\x19@\xb5\xf4\f\x8e1\xcd\x91\x94\xa97', 0x2, 0x0)
r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000040)=0xf00, 0x10a000d04)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x40001, 0x0, [0x0, 0x0, 0x80, 0x200, 0x2, 0x2, 0x3, 0x6]})
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=<r4=>0x0)
perf_event_open(&(0x7f00000000c0)={0xabd74d400e236e1f, 0x70, 0xffff, 0xffffffffffff8000, 0xde, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2286, 0x8, 0x7fffffff, 0x200, 0x2, 0x5, 0x7fffffff, 0x2d117a97, 0x0, 0x4, 0x80000000, 0x7, 0x6, 0x10001, 0x9eaa, 0x10001, 0x862, 0x3, 0x6, 0xffff, 0x9, 0x6852, 0x81, 0xefb50000, 0x1, 0x1000, 0x7d3f, 0x3f, 0x0, 0x8, 0x0, @perf_config_ext={0x5, 0x1}, 0x20080, 0xffffffff, 0x0, 0x6, 0x1, 0x3, 0x43}, r4, 0x6, 0xffffffffffffffff, 0x2)
r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
r6 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r5)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000480))
keyctl$instantiate(0xc, r5, &(0x7f0000000600)=ANY=[@ANYBLOB="6c6f61642072002f6465762f76636323003030303bbb69f1de8d47480c4e67b51d9a325cde2ad96c7b3030300000004faa30b59b1d055950c8ec30bd4e093c401a7040ce4b31af2a52ca24041c7eef32405edf13feb4bb9505ea4129d4c6cc5eed729141d8796bddcb025db560cc041cd8c40ddba0974696c4bb3990a1929d4cb99105129d026a94dc81f010938af2036afe9e524dd5e09cd09b373d9200dad50f9996c42cb82421e2ad907352c64a647788bedde60c3e870567b985e45de8f9c1e1f54d727cd34cc0cf967b5a71a5a0657aaacbc61b8ccb6db865175d0c0b9c288b9ac2cbd432f46ec36de1"], 0x35, r6)
ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000080)={0x7, 0x1})

07:35:35 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1268.670965] binder: 17616:17617 transaction failed 29189/-3, size 0-0 line 3035
[ 1268.682323] binder: BINDER_SET_CONTEXT_MGR already set
[ 1268.739424] binder: 17622:17626 ioctl 40046207 0 returned -16
[ 1268.745429] binder: BINDER_SET_CONTEXT_MGR already set
[ 1268.768167] binder: 17616:17629 ioctl 40046207 0 returned -16
07:35:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x200000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1268.786387] binder_alloc: 17616: binder_alloc_buf, no vma
[ 1268.798479] binder: 17622:17626 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1268.821555] binder: 17616:17617 transaction failed 29189/-3, size 0-0 line 3035
07:35:35 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1268.869771] binder: undelivered TRANSACTION_ERROR: 29189
[ 1268.876089] binder: undelivered TRANSACTION_ERROR: 29189
07:35:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x400000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:35 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0})

07:35:35 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0})

07:35:35 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:35 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1269.038782] binder: 17647:17648 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1269.046600] binder: BINDER_SET_CONTEXT_MGR already set
[ 1269.071442] binder: 17652:17653 ioctl 40046207 0 returned -16
[ 1269.077470] binder: BINDER_SET_CONTEXT_MGR already set
07:35:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x800000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1269.098911] binder: 17658:17659 ioctl 40046207 0 returned -16
07:35:35 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1269.319865] binder_alloc: 17675: binder_alloc_buf, no vma
[ 1269.325626] binder: 17675:17676 transaction failed 29189/-3, size 0-0 line 3035
[ 1269.369043] binder: undelivered TRANSACTION_ERROR: 29189
[ 1269.990093] device bridge_slave_1 left promiscuous mode
[ 1269.995622] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.050192] device bridge_slave_0 left promiscuous mode
[ 1270.055788] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1270.270846] device hsr_slave_1 left promiscuous mode
[ 1270.332367] device hsr_slave_0 left promiscuous mode
[ 1270.393386] team0 (unregistering): Port device team_slave_1 removed
[ 1270.405980] team0 (unregistering): Port device team_slave_0 removed
[ 1270.416467] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1270.483093] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1270.565553] bond0 (unregistering): Released all slaves
[ 1271.253401] IPVS: ftp: loaded support on port[0] = 21
[ 1271.357411] chnl_net:caif_netlink_parms(): no params data found
[ 1271.398933] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1271.407100] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1271.414596] device bridge_slave_0 entered promiscuous mode
[ 1271.422264] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1271.428696] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1271.436437] device bridge_slave_1 entered promiscuous mode
[ 1271.457425] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1271.467874] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1271.492871] team0: Port device team_slave_0 added
[ 1271.499530] team0: Port device team_slave_1 added
[ 1271.572183] device hsr_slave_0 entered promiscuous mode
[ 1271.619582] device hsr_slave_1 entered promiscuous mode
[ 1271.678392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1271.684903] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1271.691592] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1271.697957] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1271.712669] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1271.733540] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1271.792819] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1271.812546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1271.824451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1271.834296] 8021q: adding VLAN 0 to HW filter on device team0
[ 1271.843978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1271.852254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1271.860412] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1271.866773] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1271.903234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1271.911172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1271.918897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1271.925300] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1271.933042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1271.940943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1271.948572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1271.956540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1271.966526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1271.973639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1271.981559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1271.994521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1272.004679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1272.015373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1272.023412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1272.031030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1272.038432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1272.046413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1272.065985] 8021q: adding VLAN 0 to HW filter on device batadv0
07:35:38 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
r1 = creat(0x0, 0x20)
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000006c0))
r2 = getpid()
ptrace(0x10, r2)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
openat$zero(0xffffffffffffff9c, &(0x7f0000000800)='/dev/zero\x00', 0x200040, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8)
getgid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r6 = syz_open_dev$vcsn(&(0x7f0000001a00)='/dev/vcs#\x00', 0x9ea, 0x0)
read$eventfd(r6, &(0x7f0000001ac0), 0xfffffffffffffd3a)
keyctl$chown(0x4, r5, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x8, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51)
ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381)
setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000001940)={{0x2c, @broadcast, 0x0, 0x1, 'rr\x00', 0x1, 0x7fff, 0x64}, {@multicast1, 0x0, 0x1, 0x5, 0x0, 0x1}}, 0x44)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0)
keyctl$setperm(0x5, r5, 0xa)

07:35:38 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070")
r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r1, &(0x7f0000000200)="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", 0xfc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup2(0xffffffffffffffff, r0)
write$cgroup_type(r3, 0x0, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000000)={<r4=>0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @remote}, 0x4}}, 0x1, 0x7ff, 0x6, 0x0, 0xffff}, &(0x7f00000000c0)=0x98)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0xffffffffffffff75, 0xffffffffffff8000}, &(0x7f0000000140)=0x10)

07:35:38 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})

07:35:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xa00000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:38 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1272.196997] binder: BINDER_SET_CONTEXT_MGR already set
[ 1272.233707] binder: 17697:17699 ioctl 40046207 0 returned -16
[ 1272.234101] binder_alloc: 17695: binder_alloc_buf, no vma
[ 1272.266299] binder: BINDER_SET_CONTEXT_MGR already set
[ 1272.274325] binder: 17697:17704 ioctl 40046207 0 returned -16
07:35:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xe00000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:38 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1272.284180] binder: 17695:17696 transaction failed 29189/-3, size 0-0 line 3035
[ 1272.306853] binder_alloc: 17695: binder_alloc_buf, no vma
07:35:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0af51f023c123f3188a070")
r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r1, &(0x7f0000000200)="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", 0xfc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup2(0xffffffffffffffff, r0)
write$cgroup_type(r3, 0x0, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000000)={<r4=>0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @remote}, 0x4}}, 0x1, 0x7ff, 0x6, 0x0, 0xffff}, &(0x7f00000000c0)=0x98)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0xffffffffffffff75, 0xffffffffffff8000}, &(0x7f0000000140)=0x10)

[ 1272.330854] binder: 17697:17699 transaction failed 29189/-3, size 0-0 line 3035
[ 1272.368946] binder: undelivered TRANSACTION_ERROR: 29189
07:35:38 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12634840"], 0x0, 0x0, 0x0})

07:35:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xf00000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:39 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1272.470083] binder: undelivered TRANSACTION_ERROR: 29189
[ 1272.572315] binder: 17722:17724 got reply transaction with no transaction stack
[ 1272.621693] binder: BINDER_SET_CONTEXT_MGR already set
[ 1272.628514] binder: 17722:17724 transaction failed 29201/-71, size 0-0 line 2801
[ 1272.647305] binder: 17723:17729 ioctl 40046207 0 returned -16
[ 1272.661631] binder: BINDER_SET_CONTEXT_MGR already set
07:35:39 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x868c, 0x240483)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x40000, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x4, 0x0, [{0xfdf, 0x0, 0x8001}, {0xbe3, 0x0, 0x4}, {0x40d, 0x0, 0x1}, {0x9ff, 0x0, 0x800}]})
syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x2)
r3 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x10000002f)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x269, &(0x7f0000000040)=[{&(0x7f0000000580)=""/190, 0x2f5}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000fc0)=""/214, 0xfffffd9b}], 0x4, 0x0, 0x230}}], 0x1, 0x0, 0x0)

07:35:39 executing program 5:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0xffffffffffffff7f, 0x4)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80840)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x1ffffd, 0xc)

07:35:39 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x1000000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:39 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1272.667074] binder: 17722:17732 ioctl 40046207 0 returned -16
[ 1272.673905] binder: 17722:17724 got reply transaction with no transaction stack
[ 1272.684538] binder: undelivered TRANSACTION_ERROR: 29201
[ 1272.690803] binder: 17722:17724 transaction failed 29201/-71, size 0-0 line 2801
07:35:39 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x3f00, 0x0, 0x0})

[ 1272.743508] binder: undelivered TRANSACTION_ERROR: 29201
07:35:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x3f00000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1272.813474] binder_alloc: 17741: binder_alloc_buf, no vma
[ 1272.820615] binder: 17741:17749 transaction failed 29189/-3, size 0-0 line 3035
07:35:39 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x6000000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1272.895491] binder: BINDER_SET_CONTEXT_MGR already set
[ 1272.926296] binder: 17751:17758 ioctl 40046207 0 returned -16
[ 1272.932495] binder: undelivered TRANSACTION_ERROR: 29189
07:35:39 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1272.950577] binder: BINDER_SET_CONTEXT_MGR already set
[ 1272.955910] binder: 17751:17752 ioctl 40046207 0 returned -16
07:35:39 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x9effffff00000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:39 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x1000000, 0x0, 0x0})

[ 1273.035087] binder_alloc: 17767: binder_alloc_buf, no vma
[ 1273.048437] binder: 17767:17768 transaction failed 29189/-3, size 0-0 line 3035
[ 1273.135456] binder: BINDER_SET_CONTEXT_MGR already set
[ 1273.146086] binder: 17774:17776 ioctl 40046207 0 returned -16
[ 1273.147485] binder: undelivered TRANSACTION_ERROR: 29189
[ 1273.153818] binder: 17774:17776 ioctl c0306201 20008fd0 returned -14
[ 1273.168181] binder: 17774:17777 tried to acquire reference to desc 0, got 1 instead
[ 1273.176735] binder: 17774:17776 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1273.206629] binder: 17774:17776 ioctl c0306201 20008fd0 returned -14
07:35:40 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:40 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xc000000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:40 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x3f000000, 0x0, 0x0})

07:35:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/126, &(0x7f0000000000)=0x7e)

07:35:40 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8102, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x7}, 0xf)
pwritev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="82cee8dcd81afe603c447360f43b1f8fc9e99ce2456db9867bd99a97c0009fcff5eda55aedeafefd19d03b0471b0307c4e59f911a0738d28d0ce8433f9235f323aabc5f2d3dd141ff4e57ec96d607c632e095a902f12f24b1c04af2438c58c3a6735bdc9fe403179ae7fb072dbc920a682739f1533bcedc4b8c35824bcf7db4549d276e2d016ed68e282fac01aa1e14f1d0892bd7fcf91a2c84cc1280f67a086726939732dd3cf4a7e11bffd7efc214872a938acaf6b2b6c7fe5a632e0a301018161a29852a892834865653b1a434521da0e60ee16ebfb91397e3c1804c17e6841d30ded2165d13cf78a9ae2f6b8b4af652ea2fabc95973a80", 0xf9}, {&(0x7f0000000180)="4812f780cf604e09c40c2b", 0xb}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="c9fa380ca68766fba3435e144cf7209cebb54d848959497c83611d21a0a7b8c8e4", 0x21}], 0x4, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001280)={{{@in6=@ipv4={[], [], @dev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000001380)=0xe8)
fsetxattr$security_capability(r0, &(0x7f0000001240)='security.capability\x00', &(0x7f00000013c0)=@v3={0x3000000, [{0x800, 0x80000000}, {0x3b, 0x101}], r2}, 0x18, 0x2)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000001440)='team\x00')
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001940)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000001900)={&(0x7f0000001480)={0x474, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x184, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xfffe000000, 0x7, 0x81, 0xfffffffffffeffff}, {0x5, 0x5, 0x7, 0xe00000}, {0x5, 0x3, 0xffffffffffffc1f5, 0x10000}, {0x8001, 0x2, 0x4, 0x10001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r1}, {0x128, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x745c}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x19c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x40}, 0x40)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001980)={0x47da, {{0xa, 0x4e22, 0x6, @mcast1, 0x4b2}}}, 0x88)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000001a80)={0x3, 0x70, 0x7fffffff, 0xfff, 0x6, 0x1, 0x0, 0x1, 0x0, 0x3, 0x8001, 0x6, 0x7, 0x0, 0x1, 0xaf1, 0xffffffff, 0x2, 0x80, 0xd4c, 0x6, 0x200, 0x1, 0x0, 0x2e2, 0xfffffffffffffffe, 0xc96, 0x3f, 0x8, 0x1b0d, 0x1, 0xfffffffffffffffd, 0x2, 0x400, 0x7fff, 0x1, 0xffffffff, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000001a40), 0x2}, 0x9, 0xf433, 0x80, 0x9, 0x50a, 0x8, 0xb15b})
syz_open_dev$binder(&(0x7f0000001b00)='/dev/binder#\x00', 0x0, 0x802)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001b40))
sendmsg$rds(r0, &(0x7f0000002380)={&(0x7f0000001b80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001bc0)=""/93, 0x5d}, {&(0x7f0000001c40)=""/148, 0x94}, {&(0x7f0000001d00)=""/193, 0xc1}, {&(0x7f0000001e00)=""/197, 0xc5}, {&(0x7f0000001f00)=""/140, 0x8c}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/232, 0xe8}, {&(0x7f0000002100)=""/208, 0xd0}], 0x8, &(0x7f0000002300)=[@cswp={0x58, 0x114, 0x7, {{0xfffffffffffffff8, 0x100000000}, &(0x7f0000002280), &(0x7f00000022c0)=0x6, 0x7f, 0x6, 0x10001, 0x100000001, 0x20, 0x50000000}}], 0x58, 0x1}, 0x840)
r4 = syz_open_dev$swradio(&(0x7f00000023c0)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000002400), &(0x7f0000002440)=0xc)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000002480)='/dev/null\x00', 0x44080, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002500)={r5, &(0x7f00000024c0)="d38989e054b73417fb52d62c4d5787e1a28d785a9aa9e36cdc466c1ce3891db6367ae0d5dba992727c0daa"}, 0x10)
write$P9_RRENAME(r0, &(0x7f0000002540)={0x7, 0x15, 0x1}, 0x7)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000002580)='/dev/audio\x00', 0x20000, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000025c0)=0x9a4, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000002600)=[@in6={0xa, 0x9, 0x2c3, @local, 0x40}], 0x1c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002640)={<r7=>0x0, 0x60b, 0x101}, &(0x7f0000002680)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000026c0)={r7, @in6={{0xa, 0x4e24, 0x80000001, @loopback, 0xf3}}}, &(0x7f0000002780)=0x84)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000027c0)={r1, 0x1, 0x6, @dev={[], 0x19}}, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000002840)={'filter\x00', 0x7, 0x4, 0x438, 0x120, 0x238, 0x238, 0x350, 0x350, 0x350, 0x4, &(0x7f0000002800), {[{{@arp={@local, @broadcast, 0xffffffff, 0x0, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0x0, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, 0x4, 0x8, 0x4, 0x0, 0x3, 0x0, 'sit0\x00', 'hwsim0\x00', {}, {0xff}, 0x0, 0x200}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffffffff, 0x5a7, 0x80000000}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x2, 0x0, 0xff, @empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}, @mac=@broadcast, {[0x0, 0xff, 0xf8cee97de7dd8207, 0x0, 0x0, 0xff]}, 0x9, 0x8, 0x4, 0x409, 0x100000001, 0xa2e8, 'caif0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x2}, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x488)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000002d00)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0x2, 0xff, 0x5, 0x10000, 0xffff}, 0x20)
r8 = syz_open_dev$cec(&(0x7f0000002d40)='/dev/cec#\x00', 0x3, 0x2)
clock_adjtime(0x7, &(0x7f0000002d80)={0x20, 0x1, 0x0, 0x0, 0x3d8, 0x5, 0x8, 0x8, 0xffffffffffffff81, 0x0, 0x1000, 0x3a62ea48, 0xfffffffffffffffd, 0x5, 0x7, 0x8, 0x724fd90f, 0x80000001, 0x9, 0x8000, 0x2, 0x20, 0x7f, 0x8, 0x8, 0x9})
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000002e80)={0x9, 0x758, 0x8, 0x401, 0x902, 0x1})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002f00)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x4000188}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x68, r9, 0x700, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

[ 1273.682172] IPVS: length: 126 != 8
07:35:40 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:40 executing program 5:
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080), 0xff32)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80040, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4)

07:35:40 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xc00e000000000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1273.725650] binder: 17785:17801 ioctl c0306201 20008fd0 returned -14
[ 1273.760520] binder: BINDER_SET_CONTEXT_MGR already set
[ 1273.819562] binder: 17785:17801 ioctl 40046207 0 returned -16
[ 1273.825747] binder: BINDER_SET_CONTEXT_MGR already set
[ 1273.846881] binder: 17805:17808 ioctl 40046207 0 returned -16
[ 1273.866533] binder: 17785:17795 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:40 executing program 2:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
r0 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc0045520, &(0x7f0000000000)=""/235)

07:35:40 executing program 5:
rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101040, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00')
ftruncate(r1, 0x100000000)

07:35:40 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1273.903283] binder: 17785:17795 ioctl c0306201 20008fd0 returned -14
07:35:40 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:40 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0xfdfdffff, 0x0, 0x0})

07:35:40 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x3, 0x0, 0x0, @sint={0x5, 0x9}}]})

07:35:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xf0ffffff00000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:40 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x400000000000003, 0x600000000000000, [0xc0000102, 0x0, 0x4d0], [0xc2]})

07:35:40 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:40 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1274.127152] binder: 17837:17838 ioctl c0306201 20008fd0 returned -14
[ 1274.207483] binder: BINDER_SET_CONTEXT_MGR already set
[ 1274.245724] binder: 17837:17850 ioctl 40046207 0 returned -16
[ 1274.263797] binder: 17837:17838 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1274.281290] binder_alloc: 17837: binder_alloc_buf, no vma
[ 1274.283761] kvm [17846]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0
07:35:40 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='gfs2meta\x00', 0x0, &(0x7f00000000c0)='-\x00')
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r0=>0xffffffffffffff9c})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0xa21, 0x70bd25, 0x25dfdbfe, {0x0, r1, {0x0, 0xfff6}, {0xb}, {0x8, 0xa}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3ff, 0x10000)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r2}, 0x10)

07:35:40 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xffffff7f00000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1274.293452] binder: 17837:17838 ioctl c0306201 20008fd0 returned -14
[ 1274.314203] binder: 17851:17856 transaction failed 29189/-3, size 0-0 line 3035
07:35:40 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0xfffffdfd, 0x0, 0x0})

07:35:40 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1274.430684] binder: undelivered TRANSACTION_ERROR: 29189
07:35:41 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80000, 0x0)
getdents64(r3, &(0x7f00000000c0)=""/240, 0xf0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0063403ffffffa000000000000020000000000000021120003000000001000000000000010000000000000000000000000000000000000000000000800eb000000000000"], 0x1, 0x800020, &(0x7f00000003c0)="8e"})

07:35:41 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x4f1, 0x0, 0x0, @tick=0x5, {}, {}, @time}], 0x2b6)
getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000100)={0x8, 0x8, 0x5, 0xff})

07:35:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xffffffff00000000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1274.517529] binder_alloc: 17871: binder_alloc_buf, no vma
[ 1274.524885] binder: 17871:17873 ioctl c0306201 20008fd0 returned -14
07:35:41 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1274.571296] binder: BINDER_SET_CONTEXT_MGR already set
[ 1274.576638] binder: 17871:17880 ioctl 40046207 0 returned -16
[ 1274.602288] binder: 17874:17875 transaction failed 29189/-3, size 0-0 line 3035
07:35:41 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x100000000000000, 0x0, 0x0})

07:35:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0xfffffffffffff000, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1274.661805] binder: 17884:17886 unknown command 1061184256
[ 1274.681241] binder: 17884:17886 ioctl c0306201 20008000 returned -22
07:35:41 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x80)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x27e, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x2}]}]}, 0x28}}, 0x0)
r3 = accept(r1, 0x0, &(0x7f0000000080))
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0)={0x2, "00ae"}, 0x3)
r4 = getpgrp(0xffffffffffffffff)
syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/net\x00')

[ 1274.711955] binder: undelivered TRANSACTION_ERROR: 29189
07:35:41 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1274.764975] binder_alloc: binder_alloc_mmap_handler: 17884 20001000-20003000 already mapped failed -16
[ 1274.786378] binder: BINDER_SET_CONTEXT_MGR already set
[ 1274.806998] binder: BINDER_SET_CONTEXT_MGR already set
07:35:41 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1274.812913] binder: 17884:17886 ioctl 40046207 0 returned -16
[ 1274.819895] bridge0: port 1(bridge_slave_0) entered learning state
[ 1274.824714] binder: 17895:17898 ioctl 40046207 0 returned -16
[ 1274.832260] bridge0: port 1(bridge_slave_0) entered learning state
[ 1274.843915] binder: 17884:17908 unknown command 1061184256
07:35:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1274.867671] binder: 17884:17908 ioctl c0306201 20008000 returned -22
[ 1274.876550] binder: BINDER_SET_CONTEXT_MGR already set
[ 1274.904328] binder: 17895:17910 ioctl 40046207 0 returned -16
07:35:41 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1274.939681] binder: 17895:17898 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000"]}}, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x100000001, 0x10000, 0x9, 0x0, 0x81, 0x3, 0x3, 0xe6f7, 0x143, 0x38, 0x332, 0x1, 0x4, 0x20, 0x1, 0x2, 0xe2, 0x6}, [{0x70000003, 0x7ff, 0x0, 0x7, 0x0, 0x2, 0x6, 0x40}, {0x6474e557, 0xfffffffffffffff8, 0x9, 0x7fffffff, 0x9, 0x501, 0x4, 0x100000001}], "660a78496ef307f69a54456d4183f0dbb1fc68569ba92043a2896c5563bd68bee0a2338e30cf2ec54bbf5c080988846c3ccbf6ec06d3e548184f0364913b6eb25febb59b891058ff9934ad49549dbce5b7330cfd3d07c16e22721f0d256ac7536f59028a9c18c37aeedeb89c0193b370e9f21e345f73c38e17e81f4e0a3597e4f976f397b9683b782b17408bad191537b8dfc9350c84c940d1d18f7b9e96aa1143606e1727d0d534023706a6741a5a4ca17261aa128137d8635fa15fa569fbccc89d4d056a83aa2adbd04502ef0a3539326c7e899f06758b40729a", [[], [], [], [], []]}, 0x653)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8001, 0x82)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'lapb0\x00', 0x3}, 0x18)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$inet_dccp_int(r1, 0x21, 0x15, &(0x7f0000000040)=0x9, 0x4)
sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0)

[ 1274.985760] binder: 17895:17898 ioctl c0306201 20008fd0 returned -14
07:35:41 executing program 2:
write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001)
socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000440)={0x0, 0x0, 0x0})
write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a)

07:35:41 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:41 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:41 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x3f00000000000000, 0x0, 0x0})

07:35:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:41 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:41 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="0a0775b47272487706e52f74bbc61ab00503e381e5b3b60ced5c54dbb7", 0x1d)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="cf206539432db1ca9fc8ffb0b1163dfeaf1574ff98dd08c5c9", 0x19}], 0x1, 0x0, 0x0, 0x40800}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0)

07:35:41 executing program 1:
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1275.251732] binder: BINDER_SET_CONTEXT_MGR already set
[ 1275.263927] binder: 17946:17956 ioctl 40046207 0 returned -16
07:35:41 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, 0x0}, 0x9c)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/31)
delete_module(&(0x7f0000000300)='vboxnet0vboxnet0\x00', 0x800)
io_destroy(0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0))
socket$inet_smc(0x2b, 0x1, 0x0)
chmod(&(0x7f00000002c0)='./file0\x00', 0x18)
ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x9, 0x1, 0x7})
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4000200000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x805, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
getpid()

[ 1275.325368] binder: 17946:17947 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1275.358188] binder: 17963:17965 transaction failed 29189/-22, size 0-0 line 2896
[ 1275.368055] binder: 17946:17947 ioctl c0306201 20008fd0 returned -14
07:35:41 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:42 executing program 1:
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1275.424454] binder: undelivered TRANSACTION_ERROR: 29189
07:35:42 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0xfdfdffff00000000, 0x0, 0x0})

07:35:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1275.533749] binder: 17984:17985 ioctl c0306201 20008fd0 returned -14
[ 1275.565705] binder_alloc: 17984: binder_alloc_buf, no vma
[ 1275.571820] binder: BINDER_SET_CONTEXT_MGR already set
[ 1275.577388] binder: 17984:17993 ioctl 40046207 0 returned -16
07:35:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1275.599845] binder: 17984:17985 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1275.621778] binder: 17988:17991 transaction failed 29189/-3, size 0-0 line 3035
[ 1275.642399] binder: 17984:17985 ioctl c0306201 20008fd0 returned -14
07:35:42 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x400000)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/admmidi#\x00')
setsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0xf4239e79b19593b9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x10f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000005c0))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f3600000000f0003800000000000000e8ff04000000200001c7442957990fa20e64157b4191946e44741bf2d737fb190d7c202382220a7437ccaeda2bc1ee8a3c5f0ee8fdf7950280f9a7b3a6cc6923113dc9a6c20077d1e91d065060d11ae4d1"], 0x2d)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x20, 0x3, 0x3}, 0x3}}, 0x18)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

07:35:42 executing program 1:
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:42 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x3f00, 0x0})

[ 1275.644862] binder: undelivered TRANSACTION_ERROR: 29189
07:35:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1275.878753] binder: 18011:18012 transaction failed 29189/-22, size 0-0 line 2896
[ 1275.928514] binder: undelivered TRANSACTION_ERROR: 29189
07:35:42 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, 0x0}, 0x9c)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/31)
delete_module(&(0x7f0000000300)='vboxnet0vboxnet0\x00', 0x800)
io_destroy(0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0))
socket$inet_smc(0x2b, 0x1, 0x0)
chmod(&(0x7f00000002c0)='./file0\x00', 0x18)
ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x9, 0x1, 0x7})
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4000200000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x805, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
getpid()

07:35:42 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:42 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00')
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
write$P9_RREADDIR(r0, 0x0, 0xffffffffffffff67)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x1000, 0x0, 0x8, "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"})

07:35:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:42 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000, 0x0})

[ 1276.156392] binder: 18030:18031 transaction failed 29189/-22, size 0-0 line 2896
07:35:42 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1276.239866] binder: undelivered TRANSACTION_ERROR: 29189
07:35:42 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002)
write(r0, &(0x7f0000000040)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1)
readv(r0, &(0x7f000085dff0), 0x10000000000000e8)

[ 1276.324991] binder: BINDER_SET_CONTEXT_MGR already set
07:35:42 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1276.378513] binder: 18046:18050 ioctl 40046207 0 returned -16
[ 1276.398034] binder_alloc: 18046: binder_alloc_buf, no vma
[ 1276.420148] binder: 18046:18047 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1276.443589] binder: 18061:18062 transaction failed 29189/-3, size 0-0 line 3035
07:35:43 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1276.492989] binder: undelivered TRANSACTION_ERROR: 29189
07:35:43 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1}, {0x0}, 0x0}, 0x9c)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/31)
delete_module(&(0x7f0000000300)='vboxnet0vboxnet0\x00', 0x800)
io_destroy(0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0))
socket$inet_smc(0x2b, 0x1, 0x0)
chmod(&(0x7f00000002c0)='./file0\x00', 0x18)
ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x9, 0x1, 0x7})
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4000200000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x805, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
getpid()

07:35:43 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:43 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x101)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={<r1=>0x0, 0xfffffffffffffff7}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x88, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xffff, @local}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e21, 0xffff, @rand_addr="5ab93819f7eff9203f54ead021e73a8b", 0x3}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10)

07:35:43 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x3f000000, 0x0})

07:35:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1276.633081] binder: 18078:18080 transaction failed 29189/-22, size 0-0 line 2896
07:35:43 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:43 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, [0x7fff]})
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x2010, r1, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

[ 1276.742582] binder: undelivered TRANSACTION_ERROR: 29189
[ 1276.746893] binder: BINDER_SET_CONTEXT_MGR already set
07:35:43 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:43 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1276.793733] binder: 18090:18096 ioctl 40046207 0 returned -16
[ 1276.804287] binder: 18090:18091 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:43 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0xfdfdffff, 0x0})

[ 1276.935603] binder: 18106:18111 transaction failed 29189/-22, size 0-0 line 2896
07:35:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1277.000586] binder: undelivered TRANSACTION_ERROR: 29189
07:35:43 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x840000000af01, 0x0)
clone(0x210007f4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001e80)=ANY=[@ANYPTR=&(0x7f0000001b40)=ANY=[@ANYRESOCT]])
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0)

07:35:43 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:43 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:43 executing program 2:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x30000, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x40040)
write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x17, 0x4, 0x9}, {{}, 0x17, 0x101, 0x1}, {{}, 0x469b882ff51c937, 0x100, 0x9}, {{0x0, 0x2710}, 0x15, 0x80000000, 0x5}, {{0x77359400}, 0x1, 0xf6c, 0x5}], 0x78)
r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002)
write$evdev(r0, &(0x7f0000000080)=[{{0x0, 0x7530}, 0x17, 0x5, 0x80000000}], 0x18)
write$evdev(r2, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x40000000000004f, 0x2}], 0x2298)

[ 1277.196578] binder: BINDER_SET_CONTEXT_MGR already set
[ 1277.213476] binder: 18124:18126 ioctl 40046207 0 returned -16
[ 1277.233681] binder: 18124:18125 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:43 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0xfffffdfd, 0x0})

[ 1277.307805] binder: 18130:18131 transaction failed 29189/-22, size 0-0 line 2896
[ 1277.343693] binder: undelivered TRANSACTION_ERROR: 29189
07:35:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:43 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:43 executing program 5:
r0 = socket(0x2, 0x3, 0x3)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='team_slave_1:\x03\x00'})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0xffffffff, 0x1, 0x4, 0x110802, {}, {0x5, 0x0, 0x1000, 0x1, 0x4, 0x9, "a0f387c6"}, 0x1ff, 0x4, @planes=&(0x7f0000000000)={0x3, 0x1, @mem_offset, 0x37c5}, 0x4})
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000100))

07:35:43 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1277.428039] binder: BINDER_SET_CONTEXT_MGR already set
07:35:44 executing program 2:
epoll_create1(0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x7fffffff}, 0xfffffffffffffd66, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000240)={0x0, 0x1f}, &(0x7f0000000080))
open(0x0, 0x0, 0x0)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5)
r0 = gettid()
sched_getparam(r0, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgget(0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00')
getdents64(r1, &(0x7f0000000380)=""/4096, 0x1000)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000280))

[ 1277.486334] binder: 18150:18153 ioctl 40046207 0 returned -16
[ 1277.523280] binder_alloc: 18150: binder_alloc_buf, no vma
[ 1277.526299] binder: 18150:18151 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:44 executing program 5:
r0 = dup(0xffffffffffffff9c)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8)
sendmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x3, 0x3, 0x94, 0x68}, 0x0, 0x2, 0x0, 0x0, "1edba57daf329f0d"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40)
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0)

07:35:44 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x100000000000000, 0x0})

07:35:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:44 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x0, 0x0, [0x9e, 0x800000, 0xfffffffffffffffe]})

[ 1277.733740] binder_alloc: 18179: binder_alloc_buf, no vma
[ 1277.744678] binder: BINDER_SET_CONTEXT_MGR already set
07:35:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:44 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:44 executing program 2:
unshare(0x44000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={0xffffffffffffffff, &(0x7f0000fcbfff), 0x0}, 0x20)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(0xffffffffffffffff)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080), 0x4)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
r3 = fcntl$getown(r0, 0x9)
capget(&(0x7f0000000140)={0x20080522, r3}, 0x0)
syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x8, 0x400000)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0x13, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x0, 0x584f844b, 0x5, 0x2, 0x0, 0x1, 0x7f, {0x0, @in6={{0xa, 0x4e20, 0x334, @mcast2, 0x8001}}, 0xd9b2, 0xac0, 0x7, 0xc468, 0xfffffffffffff351}}, &(0x7f00000003c0)=0xb0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000dc3000)={0xffffffffffffffff, &(0x7f0000f4d000), 0x0}, 0x18)
socket$pptp(0x18, 0x1, 0x2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={<r4=>0x0, 0x1}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r4, 0x6, 0x6, 0xc14}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x4a00, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

[ 1277.807864] binder: 18179:18188 ioctl 40046207 0 returned -16
07:35:44 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x3f00000000000000, 0x0})

07:35:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1277.924927] IPVS: ftp: loaded support on port[0] = 21
07:35:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:44 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1278.051718] binder: BINDER_SET_CONTEXT_MGR already set
07:35:44 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000008fc0)=[{0x0, 0x300}, {&(0x7f0000008cc0)=""/245, 0xf5}], 0x2}}], 0x400000000000122, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendto$inet6(r0, &(0x7f0000000380)="b4", 0x1, 0x0, 0x0, 0x0)

[ 1278.089033] binder_alloc: 18213: binder_alloc_buf, no vma
[ 1278.096460] binder: 18213:18217 ioctl 40046207 0 returned -16
07:35:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:44 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:44 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0xfdfdffff00000000, 0x0})

[ 1278.286791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
07:35:44 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1278.327558] binder: BINDER_SET_CONTEXT_MGR already set
[ 1278.407687] binder: 18243:18245 ioctl 40046207 0 returned -16
[ 1278.660828] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1278.713584] IPVS: ftp: loaded support on port[0] = 21
[ 1278.996184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1279.006167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1279.039427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
07:35:45 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x40002)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0xe7, 0x9, 0x4, 0x2}, 0x3e, [0x4, 0x5, 0x462, 0xfffffffffffff40f, 0x80000000, 0xfff, 0x3, 0x3f, 0x1, 0x9, 0x2, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x7fff, 0x3, 0x6, 0xf20, 0x401, 0xb8f3, 0x10001, 0x1, 0x5, 0xfffffffffffffffd, 0x795, 0x8000, 0x9, 0x3ff, 0x800, 0xc97, 0xfffffffffffffffc, 0x40, 0x80000001, 0x12, 0xb237, 0x2c6, 0x10001, 0x8000, 0x0, 0x6, 0x6, 0x7, 0x3ff, 0x401, 0x5ddc, 0x8001, 0x2, 0x7fffffff, 0x35cb, 0x7, 0x1000, 0x4, 0x6, 0xc715, 0x5, 0x1af, 0x1000, 0x0, 0x5, 0x101, 0x53, 0x100000001], [0x81, 0x7, 0x2, 0xb3, 0x3, 0x1ff, 0x8, 0x100000001, 0x8, 0x5, 0x7, 0xf3c3, 0x0, 0x4, 0x0, 0x6, 0x20, 0x8, 0x1, 0x2, 0x100, 0x4, 0x4cb3, 0x0, 0xa, 0xff, 0x80000000, 0x5, 0x5, 0x6, 0x4, 0x400, 0x2, 0x9, 0x8001, 0x6a2, 0x6, 0xfffffffffffffffb, 0x3ff, 0x3, 0x3, 0x0, 0x1, 0x7f, 0x48f, 0x8, 0x3, 0x8, 0x6, 0x3, 0x0, 0xed, 0x1ff, 0x7fffffff, 0x3, 0xffff, 0x67c, 0x2, 0x4, 0x7, 0x401, 0xffffffffffffff00, 0xffffffffffffff01, 0x722], [0x100000001, 0x81, 0x1f, 0x6, 0x2, 0x40, 0x2f22e1f2, 0x7, 0xffffffff, 0x2, 0x3, 0x3, 0x4, 0x9, 0x7d7, 0x3, 0x5, 0x7, 0x7f, 0x3, 0x7, 0x2, 0x294c000, 0x80, 0x5, 0x5, 0x9ba3, 0xc37, 0x46d, 0x3, 0x8001, 0x7, 0x1, 0x1000, 0x9, 0x0, 0x5, 0x7, 0x3ff, 0xc4, 0x1f, 0x100000000, 0x9, 0x9, 0x10000, 0x49, 0x40, 0x7, 0xe41c, 0x7, 0x1000, 0x7f, 0x9, 0x40, 0x8, 0x10000, 0x9, 0x30000000, 0x101, 0x3, 0x6, 0xbf03, 0x3, 0x3], [0x60, 0x8, 0x7, 0x101, 0xa859, 0x8001, 0x8, 0x0, 0x80, 0x9, 0x1000, 0x3, 0x7, 0x8, 0x7fff, 0x2, 0xfffffffffffffeff, 0x4, 0xff, 0x7, 0xfffffffffffffff7, 0x9, 0x6, 0x3ff, 0x401, 0x81, 0x7ff, 0x5, 0x1570, 0xe2, 0x8000, 0x5, 0x3, 0x7, 0x20, 0x400, 0xfff, 0x3, 0x81, 0x102, 0x1, 0x10000, 0x6, 0x2, 0xfffffffffffff124, 0x6, 0x14, 0xfffffffffffffff8, 0x1, 0x6, 0x2fd4, 0x3, 0x2, 0x2518, 0xb8, 0x782c, 0x4, 0x7f, 0x9, 0x8000, 0x3, 0x8, 0x8000, 0x6]}, 0x45c)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:45 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x343442, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000200)={0x13, 0x7, 0x1, {{0x6, '\\*bdev'}, 0x3b}}, 0x13)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070")
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a0189668bb3", 0xffffffffffffffc7}], 0x1)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="4600ff602fda4075"], 0x8)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, 0xff, 0x5, 0x4, &(0x7f0000fff000/0x1000)=nil, 0x5})
splice(r2, 0x0, r4, 0x0, 0x10005, 0x0)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000140)=""/75)

07:35:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:45 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:45 executing program 2:
unshare(0x44000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={0xffffffffffffffff, &(0x7f0000fcbfff), 0x0}, 0x20)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(0xffffffffffffffff)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c)
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080), 0x4)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
r3 = fcntl$getown(r0, 0x9)
capget(&(0x7f0000000140)={0x20080522, r3}, 0x0)
syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x8, 0x400000)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0x13, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x0, 0x584f844b, 0x5, 0x2, 0x0, 0x1, 0x7f, {0x0, @in6={{0xa, 0x4e20, 0x334, @mcast2, 0x8001}}, 0xd9b2, 0xac0, 0x7, 0xc468, 0xfffffffffffff351}}, &(0x7f00000003c0)=0xb0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000dc3000)={0xffffffffffffffff, &(0x7f0000f4d000), 0x0}, 0x18)
socket$pptp(0x18, 0x1, 0x2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={<r4=>0x0, 0x1}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r4, 0x6, 0x6, 0xc14}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x4a00, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

07:35:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:45 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:45 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1279.175336] binder: BINDER_SET_CONTEXT_MGR already set
[ 1279.191927] binder: 18269:18275 ioctl 40046207 0 returned -16
[ 1279.197550] IPVS: ftp: loaded support on port[0] = 21
[ 1279.198717] binder_thread_write: 1 callbacks suppressed
[ 1279.198729] binder: 18269:18272 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpid()
fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x3, 0x4, 0x3, 0x930f, r1})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x100, 0x4a7, 0x5, 0x5a})
r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:45 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:45 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1279.458657] binder: BINDER_SET_CONTEXT_MGR already set
[ 1279.490932] binder: 18295:18303 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:46 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1279.514624] binder: 18295:18296 ioctl 40046207 0 returned -16
[ 1279.959928] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
07:35:46 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/203, 0xcb}, {&(0x7f0000000040)=""/17, 0x11}], 0x3, &(0x7f0000000100)=""/34, 0x22}, 0x40000100)

07:35:46 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:46 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000005c0)=0x16c, 0x106)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000380)=""/144})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x200001000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xf, 0x0, 0x0, 0x0}, 0x48)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x40)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080))
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x380531a9)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={<r3=>0x0, 0x1}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r3, 0xfffffffffffffff8}, 0x8)

07:35:46 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006b43c80e51656b71f09b924d1dd816ae000000"], 0x0, 0x0, 0x0})

07:35:46 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:46 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1280.360268] binder: 18330:18342 unknown command -935105792
07:35:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:46 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1280.418176] binder: 18330:18342 ioctl c0306201 20008fd0 returned -22
07:35:47 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1280.471128] binder: BINDER_SET_CONTEXT_MGR already set
[ 1280.514377] binder: 18330:18342 ioctl 40046207 0 returned -16
07:35:47 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1280.559582] binder: 18330:18337 unknown command -935105792
[ 1280.591641] binder: 18330:18337 ioctl c0306201 20008fd0 returned -22
07:35:47 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/203, 0xcb}, {&(0x7f0000000040)=""/17, 0x11}], 0x3, &(0x7f0000000100)=""/34, 0x22}, 0x40000100)

07:35:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:47 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000080)={{0x4, @name="f2d0f66ea7d82aa98886b46b4894cad876b3ccc861333a60adc774882459c51f"}, 0x8, 0x101, 0xffffffffffff0000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = fcntl$getown(r3, 0x9)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r5=>0x0})
r6 = socket$unix(0x1, 0x3, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000140)={r3, r2, 0x80})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000001c0)=ANY=[@ANYBLOB="f20fc3f2379d4de1f017e5077e8c226354ff14d94e4a77f939dcb168a853ba227c4594c03791a00224f827165497f1db27efc01f6194a6d10aa841a40607fd0d52ad5acb66d432a0f4c2b364765bdef75f24c55a03781fa89766e5f8f70eb6ae13607724bceb51a6757d6ecc09fe3a1e0257a405e0b2eae3ac0faa34ebd4b2ae3ea8816b64ece8b3af304cbb66bc1c8c28668fee"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000280))
getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:35:48 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:48 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:35:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:48 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1281.563588] binder: BINDER_SET_CONTEXT_MGR already set
[ 1281.585018] binder: 18379:18392 ioctl 40046207 0 returned -16
07:35:48 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1281.620229] binder: 18379:18388 unknown command 0
07:35:48 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1281.659690] binder: 18379:18388 ioctl c0306201 20008fd0 returned -22
07:35:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1281.771895] binder: 18404:18405 ioctl c0306201 0 returned -14
07:35:48 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0xfffffffffffffcdc, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00\x00\x00\xf8\xff\xff\xff\x00', 0x10)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x73, @multicast1, 0x4e22, 0x0, 'dh\x00', 0x0, 0xffffffff, 0x4b}, 0x2c)
close(r0)

07:35:48 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7)
r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000200)={0x0, <r4=>0x0, 0x2})
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000240)={r3, r4, 0xe75})
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000f915826ef3e65ecabdefcae28c26b3e0296b49d10000167095a70000"], 0x6)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000180)=""/127)
openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)

07:35:48 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x48124aa7, 0x8000)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="054000b7b4000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:48 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1281.904111] binder: BINDER_SET_CONTEXT_MGR already set
07:35:48 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1281.933061] binder: 18413:18420 ioctl 40046207 0 returned -16
[ 1281.944001] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002
07:35:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:48 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1281.993727] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002
07:35:48 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
poll(&(0x7f0000000180)=[{r1, 0x1}, {r1, 0x104}, {r1, 0x4000}, {r1, 0x4000}, {r1, 0x100}, {r1, 0x2002}, {r1, 0x182}, {r1, 0x2060}, {r1, 0x4400}], 0x9, 0x1)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0)
ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000140))
write(r1, &(0x7f0000000600)="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", 0xfffffffffffffd6b)
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x9], 0x1, 0x3, 0x3f, 0xffff, 0x6, 0xfffffffffffffffb, {0x7ff, 0x80, 0x4, 0x8001, 0x5120, 0xfffffffffffffe00, 0x7, 0x8, 0x4, 0x55d2, 0x200, 0x100, 0x6, 0x8000, "c26b717053ea8a808aba3c4b9decf6338a65b16ca22b7c0609f1522868339c65"}})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, <r3=>0x0}, &(0x7f0000000240)=0xc)
sendfile(r0, r0, &(0x7f0000000440), 0xed4d)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f00000004c0)={0x0, 0xfb, 0x101, 0x5, 0x3, "63074c690d9e11f8a6e2f1816c5c4c4f", "64b4a9d8900ec9cf1527436d83f9946ed479bae54f45b6b52abc2464334ff0c3e350b11a710043f38300a4a19ebf748b2224abefea0bd95f2a89c6a1cff98c7b0072ed90786d0ac5eebe84eeee8948aef5371b6d708016b23aafe894ee285d3146be104cfe0861fb12e48a950d426773a567d64ad1570e817400c856475e131c99bd7c8b8f92076e11292ff36eddfd69f7932a7ea87231464ea5e4e554dfc88c3d87430e2b8653042a70294450b21327ee720ec1f0e9098fa4d088c0abb9416896f28293201163913e657a32aa6dbe705ec74bb70fcffdb6f792fbb8b760b2a2af260964ace95c592eb2513a"}, 0x101, 0x1)
fchdir(r0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r4=>0x0}, &(0x7f00000002c0)=0xc)
fchown(r2, r3, r4)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000003c0)=""/99)

07:35:48 executing program 0:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/binder#\x00'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1282.118500] binder: 18437:18438 ioctl c0306201 0 returned -14
07:35:48 executing program 5:
r0 = dup(0xffffffffffffff9c)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x8c, 0x0, 0x80000000, 0x4, 0x82})
r1 = socket$inet(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e)

07:35:48 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:48 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1282.264667] binder: 18444:18448 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1282.297516] binder: BINDER_SET_CONTEXT_MGR already set
07:35:48 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:48 executing program 2:
recvmsg(0xffffffffffffff9c, &(0x7f0000002a40)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f0000002940)=""/220, 0xdc, 0x6}, 0x0)
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000002a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003000), 0x0, &(0x7f0000003600), 0x0, 0x5}, 0x0)
unshare(0x8020000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000180))
restart_syscall()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20002, 0x0)
write$UHID_INPUT(r0, &(0x7f00000005c0)={0x8, "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", 0x1000}, 0x1006)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x4}, 0x0)
msgget$private(0x0, 0x40)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0)
setns(r2, 0x0)
write(r2, &(0x7f0000000280)="cf809a4d3835128549ae974a22a6814122ce65ce2fc34e56a42716835bf43870ec4ee179e2ad4bd9836c8974b9c6b9bbfa0c6d74db00a01906571061dc678ff957b5d29557013aa4fc48d7c3e86d7f5623f1892c86738e0c72cc7965cd24e3ec3fecf7d4254d764affd6c2d05f7df6fdb33fbb3852dfadbcd86e3b5b7e71ec2b5d3e01c2dcebe233e5b74533138dc57bc7585990d5f439f82e6f0d5764501c1763f040b2d353471d4b35e57284cdc9e445cd734b4bb8", 0xb6)
clone(0x10062101, &(0x7f00000036c0), 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x5)

07:35:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1282.309933] binder: 18444:18460 ioctl 40046207 0 returned -16
[ 1282.334792] binder: 18444:18460 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1282.355234] binder: 18461:18463 ioctl c0306201 0 returned -14
07:35:48 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x8000, 0x2, 0x136, <r1=>0x0}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1, 0x6}, &(0x7f0000000100)=0x8)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2200, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
listen(r0, 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @local}, 0xbb71}], 0x1c)

07:35:48 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000840)={0x7, 0x70, 0xad3, 0x6, 0x9, 0x8000, 0x0, 0x1ff, 0x8080, 0x2, 0x6, 0x8, 0x7, 0x5, 0xb4, 0x8, 0x133, 0x9, 0x1, 0x400, 0x3, 0x1ff, 0x9, 0x4, 0x9, 0x4, 0x8, 0x200, 0xfffffffffffff001, 0xbf5, 0x7, 0x1f, 0xe5, 0xe05, 0x7, 0x3, 0x9, 0x1ff, 0x0, 0x55d, 0x5, @perf_bp={&(0x7f0000000340), 0xa}, 0x2800, 0x9d7, 0x5, 0x5, 0x2, 0x73c, 0x100000000}, r1, 0xd, r0, 0x1)
r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
r4 = socket$inet(0x2, 0x0, 0x4)
sendmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="e165bcd71a25da16d33cda2600c28aa83b811529ef51da5732efefcd81a9dde2098d943a6c4db4a8fddc05733a47585ac23e05fa4372a82aa082415bea76185028406db3b537311946f4a8e735c36e31db5338b73a492bd0018ad5cf4e0c23ab8c65f38d6b7d9b2736e4524e759a4ac39dabc94f0a18eadfb8924af3173d5d48460ceb1cfeba83d29a16c40ecf2e5cfecb827ebdad2754ab19debb9006c0bf1b74b13c69aa", 0xa5}, {&(0x7f0000000200)="bd5ad00b96e45a7688c99b407ea5fcf33055a7bf5329b89c8c86fa161e5f86500a7ccf95fd8626738742d387ddc88e299096855a5385c75acb5bf259f56c58297043cbbaf88919f196d20b4cbbd0d5a044818570c831240d262d3df0346766da1953bfa50bb1c9485296d6ca81f419bbb164f096e3e7733d94aaa0581f9c2ae602a15132ae1a723070f22a8ab0298102f1546373c98edbd09d4e3c12b3d600640a748c86a10e81813de2965970dcb44f36981aa24200ffc4f56b4c4952f60338db3a45ed5f65b7d11fabc5b432ab9a92cba89f7f1f3a929efb03db283dc328af2e3c", 0xe2}], 0x2, &(0x7f0000000400)=[{0x100, 0x0, 0x7, "9d866a4d0999163981d2f58df437d937742f36d1ba166467d18412096ab9b7f552fddeb29d6fc78fc39fe1cb91a992e4106de4cce7f5dc2b406748e2c25f11da0e92d9e8533fae3ada0821d648ce099a1a0a9ddbee0edf65a90fb7a7a946bf6cef3bdcd4534c494dbe7325be85f7b10a9413f8d4cddccc31a180ac7c7ab804ca69b477eb7fbe4498459c0bf3786b00f661447e1a102bdc95177e3d5fa72f2733238fb69eee7157042c46dc4b263cdd2aa8ba633c80671cf9a3a74b2f0be94671607c0b4fad4b33f5b463e7f9bab07f4bf2888b11be1b64cda83a460a953b9a2d4e3527cb08c7973c48c05fb3e53202"}, {0x80, 0x1bf, 0x3ff80000000000, "98b9cb91be031b51879a364008e47b13343f5d846b5c252e452f80040875ba0ba1092388125dea0696d537531d89e13100130a1152614aab1a9cc27cc3c8002ebfff333a74867333ffc11995ada8a99ef6226d0a39a68a9f93f6f65d4534e9596cf4cf9e811ec1f31053fa454fac95"}, {0xd8, 0x103, 0x8000, "69a093210684ce2d06a69399178a1a733146817d446a0bccdedf7b56338f20f1db047563b0a3efe2da2fb99c9b805c93d38259e6fb70f5c218e797e10cb2cbec3ce9ac48984006c9d589203f50ac4c7acfcbf4b8fdfc3d06f9bec43ba59807a3ed7ba7a102d70a3de5e663b4d7c51350d679fdb6e2096cb9b28a3d965c84ea46ecd244e568a24832a21a14b0f59b4af83dbef639c74c13fbe6b2abf876ea903f7c95b5773f5c4860c772779725833de3b000f8006fdb593208afbbc981d2e6e93180b01f4e"}, {0x100, 0x10e, 0x2, "2bf205ce83386d0e15585a58320eb0b71c18f6b2370d5cefdc2f347fd76d2d6b8d7c06a46fd05ca12394282badc8494d422d5f331ca678f443a511cf6b90e8ac1ce2915096704d46eb1610c906a474251df45b84862fb81f722ca327ae84f04d9abdcdc91254c85ab2a78a837678098abb386726cea334b9e41b819dde49eca0c6c3c10ac678793ac0b2454f41240ab961c3664f893950429848fa7229c53206dc85befda783371a55489d8c168ae7fa55caefc4eb54ba0e4f4904d9c61ac0043f4d826c3a60df0b4a9462ae035a2256175647ea0a292e7baffaf5a0632a4469721b503bb01a45e8978e6b"}, {0xc8, 0x112, 0x8, "c78f3db79bb9e5eee2beb1d56955ba4d5a7797e3f08e5061456e3e4eb45d629e874eca2b1231aae2f2684fb89b972b2bf19591c74c025d79ae577235e14787a7ad93586ffe0d9abf00e51b67d6245f5f4627b8cb558d502c6c2d0dac751c105050c9abc1cd5f4a0f8b203a21cec69352a7f43af1c6fdcc361da4e23682841639bee2f34a79739a9bd770bd583750e64710ff46f8ff21dd7fa17bf8eb652f63542bccfd4867c759d8e958af242d930ae7cdcea35c0f762876"}], 0x420}, 0x1c7}], 0x1, 0x80)

[ 1282.444767] QAT: Invalid ioctl
07:35:49 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1282.563044] sctp: [Deprecated]: syz-executor.5 (pid 18481) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1282.563044] Use struct sctp_sack_info instead
07:35:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:49 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1282.623663] sctp: [Deprecated]: syz-executor.5 (pid 18488) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1282.623663] Use struct sctp_sack_info instead
07:35:49 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:35:49 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85352, &(0x7f0000000080)={{0x0, 0x80000001}, 0x0, 0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000]})

[ 1282.747584] binder: BINDER_SET_CONTEXT_MGR already set
[ 1282.765566] binder: 18477:18479 ioctl 40046207 0 returned -16
[ 1282.805774] binder: 18477:18479 BC_REQUEST_DEATH_NOTIFICATION death notification already set
07:35:49 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:49 executing program 5:
r0 = socket(0x40000000015, 0x805, 0x0)
sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000100)=@isdn={0x22, 0xffffffff, 0x5, 0x7, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="a640d37f44dee679cbda4c7e425f1c5ea9181165fad26d6f5b71283c5a847a6eddacfb5f6254d53fef2a5a66857a317f68669b09bcb16cc19763938c4b12456af8cd53c1db97a4d6c45f2b24f60f30efe48834c693c58249ede9d30eb641c3e4c4853bdb11e8a67e461f9947dbd8d68fd35ffd310d9115bba2a86225f8602f9107ac3f470944fefc4b799d45c8ea690decbb7fd03d6ed3e3c8f1", 0x9a}, {&(0x7f0000000080)="353ab7a5143c91b9b7a1238b8a4226ddd7e334cf0924ce687e965ec947be9cf57e4e3b781a24286fe51e4cad02", 0x2d}], 0x2, &(0x7f0000000280)=[{0x20, 0x88, 0xfffffffffffff11d, "9ddbbdbca097bf991c6690cdc07e"}, {0xa8, 0x19f, 0xffffffff, "352a70fb7e175130809a30d52d080cbf39ee70cbfcdd06d52a93d55b663f2920df2b68c4d83fd9dcba45d2c20eb5da50a09f4258b43963790d5e3640f894d7e7596c512a04c7acc2c5699fc92839e3d6add18d4b0f1bc4f478b7a4ed58dfa0afbe696dff79ee2213530be7b9568674759886117a6c0330986cceccc0a355446f0fb6565c4f18a4096c165a130ddc5ecc97ed"}, {0xc0, 0x102, 0x20, "f5d063b8fa812eb427d87efcaa25a577f54e579c4c25fa2b4a2d70c1c5a1720bf0eca6bd1f7bdc6483a278f8f920ad60d604ee7d8f8b6f5b5c3c745e054d2fe2088a72129b51e2de1d86188c5d7242a9c75c02cb40e7c94460e10683bbe1cbb7244da8d169f574940aebbc7320c3b9da5f07b756e40203a8e993ef52e8595cd2d71a28849b18048d89fa1267d07f1df9f3de6e0441f42bcde995f59cc27558574914446c7c2f3fa906aa7098d5fe"}, {0x60, 0x13f, 0x2, "fce3f29d6b09c3fffec6b928f150ee4338579e1db8322c1ff11d86cca991ff870e26785615c7afb0cf1c007f5819ff8ffbc0a40bafceb0aaf58ae7d5c4b5b4aec51e831caa7070eb18aa32bff7"}, {0xd8, 0x13f, 0x4e5e, "2d6e9361c85c0dde0f0abeb0860881a96c20b92a8a348195f50bb0c381d385890fdc5008392ae6debe1c77089c837da3044a7b5ca5cf3afc055fce999d5756fb31550b9b265530017b9e6e589d72c03b5d045641667385a94c2a449e2eba24f1b72182211da4add5333e7cc20ebc5e3807a609d5e33d00b73506202884decfcba88d340790ba2cc1e18beb6705fb856a82f325c5cdd4ee647ad208a77cbe431115ad70f45588f7396d8322cf35e6e72cb920a578c9fced6e91b605f72618d70eb204"}], 0x2c0}, 0x800)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0000000000000], [], @remote}}, 0x1c, 0x0}, 0x0)

07:35:49 executing program 2:
recvmsg(0xffffffffffffff9c, &(0x7f0000002a40)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0, 0x0, &(0x7f0000002940)=""/220, 0xdc, 0x6}, 0x0)
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000002a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003000), 0x0, &(0x7f0000003600), 0x0, 0x5}, 0x0)
unshare(0x8020000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000180))
restart_syscall()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20002, 0x0)
write$UHID_INPUT(r0, &(0x7f00000005c0)={0x8, "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", 0x1000}, 0x1006)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x4}, 0x0)
msgget$private(0x0, 0x40)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0)
setns(r2, 0x0)
write(r2, &(0x7f0000000280)="cf809a4d3835128549ae974a22a6814122ce65ce2fc34e56a42716835bf43870ec4ee179e2ad4bd9836c8974b9c6b9bbfa0c6d74db00a01906571061dc678ff957b5d29557013aa4fc48d7c3e86d7f5623f1892c86738e0c72cc7965cd24e3ec3fecf7d4254d764affd6c2d05f7df6fdb33fbb3852dfadbcd86e3b5b7e71ec2b5d3e01c2dcebe233e5b74533138dc57bc7585990d5f439f82e6f0d5764501c1763f040b2d353471d4b35e57284cdc9e445cd734b4bb8", 0xb6)
clone(0x10062101, &(0x7f00000036c0), 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x5)

07:35:49 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

07:35:49 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
r2 = creat(&(0x7f0000000040)='./file1\x00', 0x5)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000340)={0x0, 0x0, {0x4, 0x2, 0x301f, 0xb, 0x5, 0x3, 0x0, 0x7}})
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000300)=0x2, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xff03, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="ca002ab7e8f374280a3d454481e99ec2635e12ce64737841acbf339121df8fdc258106cb4ad81c9847801fd2c5fb4853defce8198868937121e8d5489415c84a0e10e5d3096b87f6a0133a5721570a56008616", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES16=r1], @ANYRESDEC=r0, @ANYRESDEC, @ANYRES32], 0x0, 0x0, 0x0})
r3 = creat(&(0x7f0000000000)='./file1\x00', 0x1e)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000000c0)=""/167)

07:35:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:49 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$vsock(0xffffffffffffff9c, 0x0, 0x410000, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
wait4(0x0, 0x0, 0x80000008, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r0 = gettid()
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/12)
tgkill(r0, r0, 0xf)

[ 1283.221433] binder: 18528:18534 unknown command 0
[ 1283.226323] binder: 18528:18534 ioctl c0306201 20012000 returned -22
07:35:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1283.266732] QAT: Invalid ioctl
[ 1283.267039] binder: 18528:18538 unknown command 536871424
[ 1283.294009] binder: 18528:18538 ioctl c0306201 200002c0 returned -22
07:35:49 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0})

07:35:49 executing program 2:
openat$mixer(0xffffffffffffff9c, &(0x7f0000000700)='/dev/mixer\x00', 0x80200, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x1003}}, 0x20)
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = semget(0x3, 0x3, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'eql\x00', 'ifb0\x00', 'eql\x00', @link_local, [], @remote, [], 0x108, 0x108, 0x138, [@physdev={'physdev\x00', 0x70, {{'eql\x00', {}, 'vlan0\x00'}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x240)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000240)=""/147)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = dup2(r5, r5)
recvfrom$inet6(r1, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002000, &(0x7f0000000180)={0xa, 0x4e23, 0xad, @local}, 0x1c)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000080)=<r7=>0x0)
sendfile(r0, r0, 0x0, 0x101)
setpriority(0x3, r7, 0x70b80000)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=<r8=>0x0)
setpgid(r7, r8)
r9 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18')
write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffffffffb51, @remote, 0xfffffffffffffbff}, 0x1c)
sendfile(r9, r10, &(0x7f00000000c0)=0x209, 0x5a)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000001a40)=ANY=[@ANYBLOB="09000000000000000a004e2200020000fe880000000000070000000000000101070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e2009000000ff01000000005b7d37382b4de353000162080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240800000000000000000000000000000000000001070000000000000000000000000000000000000000000000727d0000000000000000000000a1eb5c9941ecb42501813aba8f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec90599ea34d0311a53585519dbaa1a42536806bedfbf33466ed3e989ee5cb6d4bbd3c3a642c99fa1fd004a6442ab09f467dcb2977d167d36959e745edb71704e9693a02a2a7fecc04049333edf17391d99d3f85ada957845d459d26a13d8d0429dcb08d8b8e252cc39c29d3820382fe868b2ef39b60fe5eecb3ba5157703510a46327037f758ce4ff75cfa40eb91cce784f17b6722991cf759b0d0e96c1a000000000000000000004e49966efe7cdc9e3d6f1e4a3f9f528f49bc1f4ca77dec3f1ea4f54cebf4a4ec347d32c30ab6e6b4a3bb83e7f6591c6cf7e352e2ae"], 0x1)

07:35:49 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1283.417502] binder: BINDER_SET_CONTEXT_MGR already set
[ 1283.501737] binder: 18528:18538 unknown command 0
07:35:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$vsock(0xffffffffffffff9c, 0x0, 0x410000, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
wait4(0x0, 0x0, 0x80000008, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r0 = gettid()
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/12)
tgkill(r0, r0, 0xf)

07:35:50 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0})

07:35:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1283.538177] binder: 18528:18529 ioctl 40046207 0 returned -16
[ 1283.571674] x_tables: eb_tables: physdev.0 match: invalid size 72 (kernel) != (user) 112
07:35:50 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1283.590324] binder: 18528:18538 ioctl c0306201 20012000 returned -22
[ 1283.635768] binder: 18528:18568 unknown command 536871424
[ 1283.675553] binder: 18528:18568 ioctl c0306201 200002c0 returned -22
[ 1283.774635] x_tables: eb_tables: physdev.0 match: invalid size 72 (kernel) != (user) 112
07:35:50 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x9, 0x9, 0x6a0, 0x7}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0})

07:35:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$vsock(0xffffffffffffff9c, 0x0, 0x410000, 0x0)
clock_gettime(0x0, &(0x7f0000000080))
wait4(0x0, 0x0, 0x80000008, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r0 = gettid()
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/12)
tgkill(r0, r0, 0xf)

07:35:50 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0})

07:35:50 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x32, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0x4, 0x1}]}, 0x1c}}, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7ff, 0x1)
ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000100))

07:35:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1283.936030] binder: BINDER_SET_CONTEXT_MGR already set
07:35:50 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:35:50 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0xd, 0x800000000004)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={<r2=>0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f00000004c0)='addrtype\x00', 0xffffffffffffffff}, 0x30)
r3 = getpgrp(r2)
setpriority(0x0, r2, 0x10000)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000f40)={<r5=>0x0, @in={{0x2, 0x0, @loopback}}}, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f00000008c0)='cpu.stat\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000680)=""/249)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={r5, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000240)=0xe1aae2ba)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0xfffffffffffffe5f, 0x1)
add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
execveat(r6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000040)='syz', &(0x7f0000000140)='@wlan1{-\x00', &(0x7f0000000380)='%selinux\x00', &(0x7f0000000400)='syz', &(0x7f0000000440)='syz'], &(0x7f0000000880)=[&(0x7f0000000500)='ppp1^proc(posix_acl_access!\x00', &(0x7f0000000640)='-\x00', &(0x7f0000000780)='vboxnet1mime_type\x00', &(0x7f00000007c0)='/dev/kvm\x00', &(0x7f0000000840)='addrtype\x00'], 0x800)
keyctl$update(0x2, 0x0, 0x0, 0x0)
ioprio_set$pid(0x1, r3, 0x101)

07:35:50 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1283.996304] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1284.002187] binder: 18599:18603 ioctl 40046207 0 returned -16
[ 1284.065856] openvswitch: netlink: Either Ethernet header or EtherType is required.
07:35:50 executing program 2:
syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x0, 0x0, 0x80, 0x46}, 0x0, 0x20000160, 0x9, 0x0, 0x0, 0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', 0x0, 0x0, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0x0)
r2 = socket$nl_generic(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]})
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote, <r3=>0x0}, 0x0)
dup2(r0, r0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r3, @loopback, @rand_addr=0x1cb}, 0xc)
r4 = timerfd_create(0x7, 0x80080000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000), 0x10)
ioctl$int_in(r6, 0x800000c0045002, &(0x7f0000000140)=0xe135)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_UNLOCK(r7, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x520de277, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9)
r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c)
timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$FICLONE(r4, 0x40049409, r2)
fcntl$getown(r8, 0x9)

07:35:50 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:50 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = dup3(r1, r1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={<r3=>0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f00000005c0)='/dev/media#\x00'}, 0x30)
getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=<r4=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000740)=0xc)
r6 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000018c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000019c0)=0xe8)
getgroups(0x6, &(0x7f0000001a00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, <r8=>r5, 0x0, 0xee01])
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000002d80)=<r9=>0x0)
getresuid(&(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000002e40)=<r10=>0x0)
fstat(r1, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000002f00)=<r12=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002f40)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000003040)=0xe8)
fstat(r0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003140)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000003240)=0xe8)
lstat(&(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000003340)=<r17=>0x0)
getresuid(&(0x7f0000003380), &(0x7f00000033c0), &(0x7f0000003400)=<r18=>0x0)
r19 = getgid()
r20 = gettid()
r21 = getuid()
r22 = getegid()
sendmmsg$unix(r2, &(0x7f0000004b40)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000400)="ca6596f39159d5dfdeb11967953588fa00b84e550227c62cbc1b05826adcbb9a02ef6ede70c622da750e8b31b3f2df10e83956fc09548fd1d987c5744d0aea305efb6039fbed7c58ec7c8d1c8264e8a8a94cf842d1a51da0312453d1548669fb33fabf426039571866931129f880e00d6aa7bbcf6c25fc0398bd654c81140e969a1cafc0850e4d7cea77c57fe2ac5d9f76b043f8573f6a42b2e7a20d70bac7d6a61d2e2938ef", 0xa6}, {&(0x7f0000000200)}, {&(0x7f00000004c0)="ef97ccd32d8397b81832cbd340d6767795af45b620f8647a01fef9dd866fef33d62ba2f743903272c981f9a480be5ec4a6f2a743d32401df1d7e103ddfefcb918aa0dc6db8ac959ceb5036168b3429b2d9867cd9e000a3204a773cea4aa354c2ac66d43bdac2f2e692b14158fc52575dc825f47beba2e15e84d7c105d9fd8f7ce792a7cc0e5771cec1ab73a4ab3152eb6684f3ed79a3b67dea5a1406904f6b3506cfc36be947bc8311baffb63b54191f22eb6a70f539adbd00fd96b8780c", 0xbe}], 0x3, &(0x7f0000000780)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20, 0x80}, {&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="4d7ae3728d403d5cbbad133503fd2311b36379fccc86c2b7ca70321850d58ebb5ccf54a14e368ed8fbc1bb444249b9be7e4e", 0x32}], 0x2, &(0x7f0000001a40)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r0]}], 0x60, 0x10}, {&(0x7f0000001ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="191ea6ad0cf6911ef3fe27e9c61d4775df7876893038494006e8c35a1c55d054d76eb520a381931121fcd5036accb31e4f840732425813feb7d2275f02fb743b63ea5302ce7050952c23821ee8a9b3014892789fba0fa4b85834160523026124c1bf66f925be86f0b3a8fd20849b54a039f3d16d2a3ddb86141532d40d8d09c910707a63f223e570b138ad355664ef20593062bf0abdeeb8882152407a1048470746f36268de8864f644c43f6a1e4ae6213b894a90716d12181982ab4bd4e27c717c3baf9714cf28c2717483f20e", 0xce}, {&(0x7f0000002c40)="efd12a8073b25bb047e8f41063ea31d6907a297e3d0b146a682ebee36be1c1cf97fcca5b0a1a61228848ec1deb72df765a51d8aa8fa40e0f1ec5ca44bec50be1292726dd771f1c3912efae0aed2d1bee2a77398fbfbbd76b1ea5e3e49a22abafc6869fc04a74ab99b03ae8005274b2728abf830ca770f2a1342fe5158c97c166b778097e8dfa2a0d2c069e8e4118ec121cc8fc5eeeff2a1c8e8ded1819b6aa933b9ce5f8e2e19ddaceaa1e45c3eacadde5c27d36a1a4acd4edd32864c2d48be822fdd6ddd20ccb9f2fdeed6c09f9a52153cf77849340e708c2", 0xd9}], 0x3, &(0x7f0000003440)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, 0x0, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x80, 0x20044800}, {&(0x7f00000034c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000003540)="c64a0bb87159ae8a98a8cfc411c4095bb1df0d6485000facee283515cdbcd5b6f86588a5f834a82e05", 0x29}, {&(0x7f0000003580)="a943e86e8e19485b40668cf3029ab0d115eaf8e1394ee41704d6499f5b7ffb4cd623d9fd38753c24cb472d6739ef214ec697200a42389af38a87294b981c1ec85b9a52a6e06e47c9df6af197b55446a1cca1d31c4a0ee621ba3457cd9583f6e1eacc4af2d8f744e15d12392b877f877a52c225eefc5e7efadbe72619856e9cf8a6023345f0ffda30a370aa9bae3019014073395d36ccda3ace1f0b6190f904c67dc65841313f0cebe7264628c8978380e7a6d7fb37ad8d300eebb8fc94d7633ce9c82391df80857a5ee157ea243081a962e4e9a373217590aa8004968fc5db4979aa36a89f219ce4", 0xe8}, {&(0x7f0000003680)="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", 0xfd}, {&(0x7f0000003780)="e519aaf7cdbf3f69f97adb71ae5b620624cc96aa05ad492e48d043687f3ae3e1afa62dd97d1c80c3d9fcf602800d0b72b8d384a331caafe8f00ce3a216d351f717cae90f925d9b9125f65e7c7fc1d337dee41055c0a56bbf6c7a71547446b2053081a97bc37cb2bfa872a403f9cafaa68c67470f544fc9e4de1582774b934db54f292254134fdf70c4ecde47d53aa1fb34849dcf2d421faad94b181fc163ed9759f4ed05240c0765fe03aa43b87da9bac02a3f1102ce3ace03506d899af18de226aa2ad044c053d9cf61580b16060ee335fd1c7ec010519a66d85091070e77ce840d8a88e5a3dba44564956e599f8e886c73e244a9595c2b", 0xf8}, {&(0x7f0000003880)="dd5f87462f487458e74749d2382f46cf9d2c42395b88df1e71759318809b3886c759d5a28bcfbc4f1791ac854466f55e73766af2e075870a6ac2453f11a25a8270606165f697e8552d0516b4525b118173", 0x51}, {&(0x7f0000003900)="e886dca633883c934431469343de7fbf90d19552aa5f902f80fc4782a5967166deea30998c9b7e66a364ca506638b1ba7940b0200bdd98b55d0232b56b94d56e854102fdbc267bad8ac388fa476b8280dc3cc5337e3291feba0ec83a5ec11aa5450bbeeaade22cbc15825d0341953104fd22e7d44bf2771e37081f5b994b5c3d1c54a9a88fb7d34cf0d3ff32bc6272df1385b8543bc46db2277561cd6c50372e7c9a3b6bff70405fa6b495938bedc7c79ca9b419172dd17b3e516195d879aaf89c1377ec776704ce26aa19a2a15442e2b38125b562791d21", 0xd8}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="240fba2e72764443f9adf17af825da5168f8a3dcabd72824c849dcad679b067323891ecc66696c18d0590d8f568ffa508ba98415b7c2b5be2946f5510c4978d4fb4de641f4be86d75149dac755f911c7ea8936eb4370768d290a19bc170f7fa9111d94d8cc889b8f865d7378d611ada0ae8ccad08e68fd214cf2a0e3c6f9", 0x7e}], 0x8, &(0x7f0000004b00)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}], 0x20, 0x4}], 0x4, 0x24000000)
r23 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f00000000c0)={0xffffffa4, 0x0, &(0x7f0000000080)=[@decrefs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r23, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r24 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x80)
openat$cgroup_int(r24, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0)

07:35:50 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:35:50 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0xd, 0x800000000004)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r0 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0)
ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, 0x0)
syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={<r2=>0xffffffffffffffff, r1, 0x0, 0x9, &(0x7f00000004c0)='addrtype\x00', 0xffffffffffffffff}, 0x30)
r3 = getpgrp(r2)
setpriority(0x0, r2, 0x10000)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000f40)={<r5=>0x0, @in={{0x2, 0x0, @loopback}}}, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f00000008c0)='cpu.stat\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1)
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000680)=""/249)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={r5, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000240)=0xe1aae2ba)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0xfffffffffffffe5f, 0x1)
add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
execveat(r6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000040)='syz', &(0x7f0000000140)='@wlan1{-\x00', &(0x7f0000000380)='%selinux\x00', &(0x7f0000000400)='syz', &(0x7f0000000440)='syz'], &(0x7f0000000880)=[&(0x7f0000000500)='ppp1^proc(posix_acl_access!\x00', &(0x7f0000000640)='-\x00', &(0x7f0000000780)='vboxnet1mime_type\x00', &(0x7f00000007c0)='/dev/kvm\x00', &(0x7f0000000840)='addrtype\x00'], 0x800)
keyctl$update(0x2, 0x0, 0x0, 0x0)
ioprio_set$pid(0x1, r3, 0x101)

[ 1284.338986] binder: 18640:18642 DecRefs 0 refcount change on invalid ref 0 ret -22
07:35:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1284.396398] binder: 18640:18642 unknown command 0
07:35:50 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:51 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

[ 1284.420821] binder: 18640:18648 unknown command -942145551
[ 1284.447571] binder: 18640:18642 ioctl c0306201 200000c0 returned -22
[ 1284.459813] binder: 18640:18648 ioctl c0306201 20008fd0 returned -22
07:35:51 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000000)=0x9f3365c4)

[ 1284.526511] binder: BINDER_SET_CONTEXT_MGR already set
07:35:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1284.587078] binder: 18640:18656 DecRefs 0 refcount change on invalid ref 0 ret -22
07:35:51 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1284.665830] binder: 18640:18656 unknown command 0
[ 1284.706918] binder: 18640:18648 ioctl 40046207 0 returned -16
[ 1284.767339] binder: 18640:18656 ioctl c0306201 200000c0 returned -22
07:35:52 executing program 2:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@remote, @random="5faa6e7b9372", [], {@generic={0x8864}}}, 0x0)

07:35:52 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0})

07:35:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:52 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x3f, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)

07:35:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:52 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:52 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1285.714701] binder: 18684:18693 ioctl c0306201 20000100 returned -14
[ 1285.723403] binder: 18682:18689 unknown command 25344
[ 1285.748266] binder: BINDER_SET_CONTEXT_MGR already set
[ 1285.779491] binder: 18682:18689 ioctl c0306201 20008fd0 returned -22
[ 1285.786168] binder: 18684:18697 ioctl 40046207 0 returned -16
[ 1285.793204] binder: 18684:18693 ioctl c0306201 20000100 returned -14
07:35:52 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0})

07:35:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:52 executing program 5:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x80000000000000, "f102bd745e0a0153b5198d45e475cee693c9ff328ffcdcf5411e10aefde49371", 0x1, 0x1})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={<r2=>0x0, 0x9, 0x9, 0xa07f, 0x800, 0x3}, &(0x7f0000000100)=0x14)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280)=0xff, 0x4)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x7ff}, &(0x7f0000000240)=0x8)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0xc040564b, &(0x7f0000000140)={0x0, @reserved})
sendmsg$nl_crypto(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@del={0xe8, 0x11, 0x8, 0x70bd2b, 0x25dfdbfb, {{'rfc4106(aegis256-aesni)\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0xed3e}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

07:35:52 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
r2 = socket$netlink(0x10, 0x3, 0x1f)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0xa00, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x7a2cc5d081c67981}, 0x20008004)

07:35:52 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x2f)
sendto$inet6(r0, &(0x7f0000000040)="df56a0171be2e8c42409a592239ac26e1c7d5f6c8fa094424515f7b5100ee93314aa59f6f2b13bf95cfb4c9e7905ea6be0902342166a94f9778fb946182d00ca09b8731f84dc01cd91a6c0bd3c0f313c7c12b55aaebce44062b455779048dde172469732634a6c1b0392ddce7aabe5a1675e838e4a820f784825f4d4fa635d505e3905b77a03110c2236dbc63777d8057d2f662d1b73ff73f49f4ec94f25", 0x9e, 0x50, &(0x7f0000000100)={0xa, 0x4e22, 0x40f, @dev={0xfe, 0x80, [], 0x21}, 0x3}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x8000000000000, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x3, 0x80000008}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000001}, 0xc)
connect$inet6(r0, &(0x7f0000000000), 0x1c)

[ 1285.950898] binder: 18710:18711 unknown command 25344
[ 1285.969084] binder: 18710:18711 ioctl c0306201 20008fd0 returned -22
07:35:52 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="0fc70ff30f225f0f01df66ba4300b800000000ef640f0f40d9aec4a3d97b9f0010000026f2470f38f03d84000000440f30450f3565673e673ef341af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1286.029230] binder: BINDER_SET_CONTEXT_MGR already set
[ 1286.034565] binder: 18714:18718 ioctl 40046207 0 returned -16
[ 1286.053929] binder: 18714:18718 BC_REQUEST_DEATH_NOTIFICATION death notification already set
07:35:52 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0})

[ 1286.201280] binder: 18733:18735 unknown command 25344
07:35:52 executing program 2:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
write$binfmt_script(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x713)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={<r4=>0x0, 0x2c52}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001980)={0x3f, 0x2, 0x8000, 0x6f, 0x0, 0xffffffffffffff12, 0x4, 0x0, r4}, &(0x7f00000019c0)=0x20)
write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "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", 0x1000}, 0x1006)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

07:35:52 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x80)
ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040))
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x11)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:52 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1286.224947] binder: 18733:18735 ioctl c0306201 20008fd0 returned -22
07:35:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:52 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0})

07:35:52 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x541d, &(0x7f0000000000)={'bcsh0\x00', @ifru_mtu})
r1 = accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x80)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x30, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000804)

[ 1286.403289] binder: BINDER_SET_CONTEXT_MGR already set
[ 1286.408659] binder: 18748:18750 ioctl 40046207 0 returned -16
07:35:53 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1286.527478] binder: 18757:18760 unknown command 4219648
[ 1286.538861] binder: 18757:18760 ioctl c0306201 20008fd0 returned -22
07:35:53 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x10000, 0x8, @value=0x748})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:53 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0})

07:35:53 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={<r4=>0x0, 0x1}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4, 0x2}, 0x8)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={<r6=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000340)={r6})
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc02, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$RTC_UIE_ON(r7, 0x7003)
keyctl$invalidate(0x15, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000040)=""/63, &(0x7f00000000c0)=0x3f)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x80700000000000, 0x4000, &(0x7f0000000200), 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, 0x0)

[ 1286.661671] binder: BINDER_SET_CONTEXT_MGR already set
[ 1286.687246] binder: 18771:18775 ioctl 40046207 0 returned -16
07:35:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:53 executing program 2:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x3}, 0x8, 0x80000)
flock(r0, 0x1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0)

[ 1286.817278] binder: 18781:18788 unknown command 4219648
[ 1286.859338] binder: 18781:18788 ioctl c0306201 20008fd0 returned -22
07:35:53 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x20480, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000500)="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", 0xfc)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="50a5cb1296036f49dc085764f499391b68b0806ec8bf6da1fdd3f68d6eff6ed6ea2697"], 0x0, 0x0, 0x0})
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1)
ioctl$KDDISABIO(r3, 0x4b37)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
accept$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000006c0)={@rand_addr, <r6=>0x0}, &(0x7f0000000700)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000008c0)=0xe8)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000a80)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14)
add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000400)="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", 0xff, 0xfffffffffffffffd)
accept4$packet(0xffffffffffffff9c, &(0x7f0000007f80)={0x11, 0x0, <r9=>0x0}, &(0x7f0000007fc0)=0x14, 0x800)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000008000)={@broadcast, @initdev, <r10=>0x0}, &(0x7f0000008040)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008080)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000008180)=0xe8)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000081c0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000082c0)=0xe8)
accept$packet(r2, &(0x7f0000008300)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008340)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000008740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000008700)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4c030000", @ANYRES16=r4, @ANYBLOB="000125bd7000fcdbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="f800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="300202003c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000080003000600000004066287a9dea5759270bd74356c8942cc00040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004003400000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000004400040008008004644a000040000000ff0000000900ff03ec000000855cff0547000000ff010707010000000800dd080900000005000105f6000000fbff09ff0200000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004003a00000008000600", @ANYRES32=r13, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400ff0f000600100000030000e3090000005cff080200000000"], 0x34c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000804)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x100, 0x0)

07:35:53 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:53 executing program 2:
socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100677265000c00020008000f0000000000"], 0x38}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0xf}], 0x492492492492805, 0x0)

07:35:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1287.031701] binder: 18798:18802 unknown command 315336016
[ 1287.037294] binder: 18798:18802 ioctl c0306201 20012000 returned -22
07:35:53 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0})

[ 1287.105011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1287.140574] binder: 18798:18799 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1287.159751] binder: 18814:18815 unknown command 4219648
07:35:53 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1287.193582] binder: BINDER_SET_CONTEXT_MGR already set
[ 1287.200944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1287.202676] binder: 18814:18815 ioctl c0306201 20008fd0 returned -22
07:35:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1287.240669] binder: 18798:18802 unknown command 315336016
[ 1287.274594] binder: 18798:18802 ioctl c0306201 20012000 returned -22
07:35:53 executing program 1 (fault-call:3 fault-nth:0):
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1287.305429] binder: 18798:18816 ioctl 40046207 0 returned -16
[ 1287.337580] binder: 18798:18821 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={<r4=>0x0, 0x1}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4, 0x2}, 0x8)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={<r6=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000340)={r6})
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc02, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$RTC_UIE_ON(r7, 0x7003)
keyctl$invalidate(0x15, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000040)=""/63, &(0x7f00000000c0)=0x3f)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x80700000000000, 0x4000, &(0x7f0000000200), 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, 0x0)

07:35:53 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x424002, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000800))
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0)
fcntl$getown(r0, 0x9)
preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000780)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xe8}], 0x100000000000035c, 0x0)

07:35:53 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x280, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c407c039b85035a51edabb0d357e97370127b54d5bfa86c1995d59725ba5b5cc4b0b1c513707fa6692703cd9fce7fc6fc5b9e6d502656a1d866092bdc4448241f02e0d0c386f3b994b073e226577f205fe1a32c0d78bd1ea00d1e690dba7805148e5d3e9dc633fd769057d97d380827e2a9bc16d049df088c78cb83ee520177948cbf6123c9f420ede9c855d0f95cf2b06ba87b162ec05b9399f6a228da1925b42e2b5d9510329ffde34dce5c89628cf0dd602d978c9211251de4a25a9b1faa874b75e454bd979ed1e1da6ced5cb3821c557cfe"], 0x0, 0x0, 0x0})

[ 1287.475303] FAULT_INJECTION: forcing a failure.
[ 1287.475303] name failslab, interval 1, probability 0, space 0, times 0
[ 1287.566025] CPU: 0 PID: 18832 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #74
[ 1287.573356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1287.582737] Call Trace:
[ 1287.585364]  dump_stack+0x172/0x1f0
[ 1287.589047]  should_fail.cold+0xa/0x1b
[ 1287.592979]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1287.598107]  ? lock_downgrade+0x810/0x810
[ 1287.602295]  ? ___might_sleep+0x163/0x280
[ 1287.606478]  __should_failslab+0x121/0x190
[ 1287.610761]  should_failslab+0x9/0x14
[ 1287.614605]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1287.619303]  ? kasan_check_read+0x11/0x20
[ 1287.623477]  ? do_raw_spin_unlock+0x57/0x270
[ 1287.627907]  ? _raw_spin_unlock+0x2d/0x50
[ 1287.632160]  binder_get_thread+0x1db/0x7c0
[ 1287.636430]  ? __might_sleep+0x95/0x190
[ 1287.640438]  binder_ioctl+0x1e2/0x1b79
[ 1287.644350]  ? kasan_check_read+0x11/0x20
[ 1287.648536]  ? binder_thread_write+0x2820/0x2820
[ 1287.653319]  ? mark_held_locks+0x100/0x100
[ 1287.657592]  ? debug_smp_processor_id+0x1c/0x20
[ 1287.662281]  ? perf_trace_lock_acquire+0xf5/0x580
[ 1287.667164]  ? __fget+0x340/0x540
[ 1287.670640]  ? find_held_lock+0x35/0x130
[ 1287.674722]  ? __fget+0x340/0x540
[ 1287.678214]  ? binder_thread_write+0x2820/0x2820
[ 1287.682996]  do_vfs_ioctl+0xd6e/0x1390
[ 1287.686920]  ? ioctl_preallocate+0x210/0x210
[ 1287.691355]  ? __fget+0x367/0x540
[ 1287.694852]  ? iterate_fd+0x360/0x360
[ 1287.698678]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1287.704245]  ? fput+0x128/0x1a0
[ 1287.707575]  ? security_file_ioctl+0x93/0xc0
[ 1287.712009]  ksys_ioctl+0xab/0xd0
[ 1287.713072] binder: 18849:18850 BC_REQUEST_DEATH_NOTIFICATION invalid ref -2053438596
[ 1287.715485]  __x64_sys_ioctl+0x73/0xb0
[ 1287.715513]  do_syscall_64+0x103/0x610
[ 1287.715540]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1287.736472] RIP: 0033:0x457e29
[ 1287.739679] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1287.758598] RSP: 002b:00007f1718d9bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
07:35:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:54 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x803, 0x0)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendto(r1, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400})
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@ax25={{0x3, @null, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000040)=""/7, 0x7}, &(0x7f00000000c0), 0x2}, 0xa0)
ioctl(r0, 0x4161, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0)

07:35:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1287.766337] RAX: ffffffffffffffda RBX: 00007f1718d9bc90 RCX: 0000000000457e29
[ 1287.773637] RDX: 0000000020008fd0 RSI: 00000000c0306201 RDI: 0000000000000005
[ 1287.780939] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1287.788229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1718d9c6d4
[ 1287.795509] R13: 00000000004bf15b R14: 00000000004d0a60 R15: 0000000000000006
07:35:54 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1287.853035] binder: BINDER_SET_CONTEXT_MGR already set
[ 1287.866143] binder: 18849:18850 ioctl 40046207 0 returned -16
07:35:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1287.912610] binder: 18849:18853 BC_REQUEST_DEATH_NOTIFICATION invalid ref -2053438596
07:35:54 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1288.199303] binder: 18828:18832 ioctl c0306201 20008fd0 returned -12
07:35:54 executing program 1 (fault-call:3 fault-nth:1):
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:54 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x1)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r2 = dup(r1)
ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={<r4=>0x0, 0x1}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r4, 0x2}, 0x8)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={<r6=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000340)={r6})
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc02, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$RTC_UIE_ON(r7, 0x7003)
keyctl$invalidate(0x15, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000040)=""/63, &(0x7f00000000c0)=0x3f)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x80700000000000, 0x4000, &(0x7f0000000200), 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, 0x0)

07:35:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:54 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:54 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x803, 0x0)
socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendto(r1, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400})
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@ax25={{0x3, @null, 0x8}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000040)=""/7, 0x7}, &(0x7f00000000c0), 0x2}, 0xa0)
ioctl(r0, 0x4161, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0)

[ 1288.396488] binder: 18878:18892 ioctl 8004562e 20000000 returned -22
[ 1288.438090] FAULT_INJECTION: forcing a failure.
[ 1288.438090] name failslab, interval 1, probability 0, space 0, times 0
[ 1288.451768] binder: BINDER_SET_CONTEXT_MGR already set
[ 1288.457293] binder: 18878:18892 ioctl 40046207 0 returned -16
07:35:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1288.502390] CPU: 1 PID: 18893 Comm: syz-executor.1 Not tainted 5.0.0-rc6+ #74
[ 1288.509708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1288.519069] Call Trace:
[ 1288.521679]  dump_stack+0x172/0x1f0
[ 1288.525335]  should_fail.cold+0xa/0x1b
[ 1288.528585] binder: 18878:18879 ioctl 8004562e 20000000 returned -22
[ 1288.529244]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1288.529265]  ? lock_downgrade+0x810/0x810
[ 1288.529287]  ? ___might_sleep+0x163/0x280
07:35:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1288.529315]  __should_failslab+0x121/0x190
[ 1288.529338]  should_failslab+0x9/0x14
[ 1288.529358]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1288.529379]  ? kasan_check_read+0x11/0x20
[ 1288.566114]  ? do_raw_spin_unlock+0x57/0x270
[ 1288.570552]  ? _raw_spin_unlock+0x2d/0x50
[ 1288.574720]  binder_transaction+0x886/0x6890
[ 1288.579151]  ? mark_held_locks+0x100/0x100
[ 1288.583463]  ? __might_fault+0x12b/0x1e0
[ 1288.587546]  ? find_held_lock+0x35/0x130
[ 1288.591631]  ? binder_deferred_func+0xea0/0xea0
[ 1288.591664]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
07:35:55 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r2 = fcntl$getown(r1, 0x9)
ptrace$peek(0x1, r2, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1288.591682]  ? _copy_from_user+0xdd/0x150
[ 1288.601922]  binder_thread_write+0x64a/0x2820
[ 1288.601936]  ? fs_reclaim_acquire+0x20/0x20
[ 1288.601972]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1288.601997]  ? binder_transaction+0x6890/0x6890
[ 1288.625142]  ? __might_fault+0x12b/0x1e0
[ 1288.629251]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1288.634831]  ? _copy_from_user+0xdd/0x150
[ 1288.639023]  binder_ioctl+0x13b9/0x1b79
[ 1288.643008]  ? kasan_check_read+0x11/0x20
[ 1288.643032]  ? binder_thread_write+0x2820/0x2820
[ 1288.643050]  ? mark_held_locks+0x100/0x100
[ 1288.643117]  ? proc_fail_nth_write+0x9d/0x1e0
[ 1288.643148]  ? proc_cwd_link+0x1d0/0x1d0
[ 1288.656304]  ? __f_unlock_pos+0x19/0x20
[ 1288.656334]  ? find_held_lock+0x35/0x130
[ 1288.656350]  ? __fget+0x340/0x540
[ 1288.656378]  ? binder_thread_write+0x2820/0x2820
[ 1288.681142]  do_vfs_ioctl+0xd6e/0x1390
[ 1288.685049]  ? ioctl_preallocate+0x210/0x210
[ 1288.689472]  ? __fget+0x367/0x540
[ 1288.692958]  ? iterate_fd+0x360/0x360
[ 1288.696771]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
07:35:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1288.702323]  ? fput+0x128/0x1a0
[ 1288.705624]  ? security_file_ioctl+0x93/0xc0
[ 1288.710051]  ksys_ioctl+0xab/0xd0
[ 1288.713521]  __x64_sys_ioctl+0x73/0xb0
[ 1288.717426]  do_syscall_64+0x103/0x610
[ 1288.719899] binder: BINDER_SET_CONTEXT_MGR already set
[ 1288.721354]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1288.721368] RIP: 0033:0x457e29
[ 1288.721384] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1288.721394] RSP: 002b:00007f1718d7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1288.721410] RAX: ffffffffffffffda RBX: 00007f1718d7ac90 RCX: 0000000000457e29
[ 1288.721419] RDX: 0000000020008fd0 RSI: 00000000c0306201 RDI: 0000000000000005
[ 1288.721432] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 1288.734862] binder: 18902:18907 ioctl 40046207 0 returned -16
[ 1288.735265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1718d7b6d4
07:35:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1288.796829] R13: 00000000004bf15b R14: 00000000004d0a60 R15: 0000000000000006
[ 1288.851707] binder: 18902:18904 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1288.941074] binder_transaction: 7 callbacks suppressed
[ 1288.941091] binder: 18887:18893 transaction failed 29201/-12, size 0-0 line 2975
[ 1289.090169] binder_release_work: 7 callbacks suppressed
[ 1289.090177] binder: undelivered TRANSACTION_ERROR: 29201
07:35:55 executing program 1 (fault-call:3 fault-nth:2):
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:55 executing program 2:
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0xa, 0x0, 0x0, @local}, 0x1c)

[ 1289.215092] binder: 18929:18930 transaction failed 29189/-22, size 0-0 line 2896
[ 1289.299569] binder: undelivered TRANSACTION_ERROR: 29189
07:35:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x3007, 0x100000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f2172"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40, 0x0)
exit(0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:35:55 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:55 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/137, 0x89)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x40c00, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000280), 0x4)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000200)=0x15, 0x4)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0), 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\tc\fC'], 0x0, 0x0, 0x0})

07:35:55 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@loopback, @multicast1, 0x0, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @broadcast, @remote]}, 0x24)
listen(r0, 0x6f)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
sched_rr_get_interval(r1, &(0x7f0000000100))
openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x30842, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0), 0xfffffffffffffdff)

07:35:55 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1289.422887] binder: 18937:18938 unknown command 1124885257
[ 1289.439679] binder_alloc: 18937: binder_alloc_buf, no vma
[ 1289.463568] binder: 18937:18938 ioctl c0306201 20008fd0 returned -22
[ 1289.479613] binder: 18936:18944 transaction failed 29189/-3, size 0-0 line 3035
07:35:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:56 executing program 2:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20000, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000002dfffffffffffffff"])

[ 1289.508263] binder: undelivered TRANSACTION_ERROR: 29189
[ 1289.520246] binder: BINDER_SET_CONTEXT_MGR already set
07:35:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1289.589565] binder: 18937:18938 ioctl 40046207 0 returned -16
07:35:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0xf, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:56 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair(0x3, 0xf, 0xfffffffffffffff9, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x102, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
recvfrom$rxrpc(r1, &(0x7f00000000c0)=""/60, 0x3c, 0x10100, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @local, 0x1f}}, 0x24)
ioctl$BLKPG(r0, 0x1278, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

07:35:56 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x800, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000000c0)=""/75)
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000400))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:56 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0)
ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000140))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400000, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80)
ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000680))
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4])
ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x484]})

07:35:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0xc0, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1290.326521] binder: BINDER_SET_CONTEXT_MGR already set
[ 1290.349284] binder: 18985:18997 ioctl 40046207 0 returned -16
07:35:56 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0xec0, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1290.373623] binder: 18985:18997 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:56 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:57 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x6)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x6)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0)

07:35:57 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9f, 0x20000)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000400)=""/4096)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="c0e84fe769cf5800"], 0x0, 0x0, 0x0})
r3 = socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'veth0\x00', 0x82})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = getpid()
getpgid(r2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})

07:35:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x33fe0, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:57 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1290.595450] binder: BINDER_SET_CONTEXT_MGR already set
[ 1290.608665] binder: 19020:19026 ioctl 40046207 0 returned -16
07:35:57 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:57 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85fa0)=ANY=[@ANYBLOB="020500000c000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000020001050000000000020000007f0000010000000000000000000000000000000000000000000000"], 0x60}}, 0x0)
socket$key(0xf, 0x3, 0x2)

07:35:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20000194, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:57 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:35:57 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563044008000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0xfc28, 0x0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYPTR64, @ANYRES64=r0, @ANYRES64=r2, @ANYRES64=r0], @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESOCT, @ANYPTR64, @ANYRESHEX=r0], @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB="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"]], 0x0, 0x0, 0x0})

07:35:57 executing program 2:
openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x4000, 0x0)
r0 = socket$kcm(0x10, 0x4000000000000005, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x2e7}, 0x0)
socketpair(0x1, 0x2, 0x78, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1e, 0x2, 0x7, 0x8}, {0x100000001, 0x5, 0x5, 0x7}]}, 0x10)

07:35:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x7ffff000, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1290.865509] binder: 19052:19055 Acquire 1 refcount change on invalid ref 8 ret -22
[ 1290.896834] binder: 19052:19055 unknown command 536871936
07:35:57 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:57 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0x1a, 0x0, &(0x7f00000000c0)=0xa9cc})
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_pgetevents(r1, 0x100, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f0000000200)={0x77359400}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0)

[ 1290.926611] binder: 19052:19055 ioctl c0306201 20008fd0 returned -22
[ 1290.976715] binder: BINDER_SET_CONTEXT_MGR already set
07:35:57 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1291.010159] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615)
[ 1291.020695] binder: 19052:19070 Acquire 1 refcount change on invalid ref 8 ret -22
[ 1291.030350] binder: 19052:19055 unknown command 536871936
[ 1291.034416] binder: 19052:19064 ioctl 40046207 0 returned -16
07:35:57 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpid()
mknod(&(0x7f0000000140)='./file0\x00', 0x10001040, 0x0)
execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r2 = gettid()
kcmp(r2, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="07030f000000008000c67a96f53dc902478e7a7e6494295235bd7b838c0a212201dccd97739aaa6c2bd70412bc9bc0ffeaf71aca964ad8c904d4b6b8ce67ffffff7fb19cf9e40fe00c93d623d0951b2956b103714e7b2abc399e239860fbba5d2895cf3d993a99a04856590a44728632666dd8c4b292e0fc766f602f24ddc6242b559e3183f26fbc0b2dc0a6bba2ed0081fdb38b5aa222cfd93e9fcd46e8b2cbe0829eaa395bb04937f9ac6c62769dd1dbb8366f829c39986b9958b5d7cfc78cc4abdc"], 0xd0, 0x3)
tkill(r2, 0x1000000000016)
r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x80000000, 0x402800)
mq_notify(r3, &(0x7f00000001c0)={0x0, 0x1f, 0x5, @tid=r2})
tkill(r1, 0xf)

07:35:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0xfffffdef, r1, 0x705, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1291.058011] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[ 1291.093976] binder: 19052:19055 ioctl c0306201 20008fd0 returned -22
07:35:57 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:57 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)
r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
dup2(r0, r2)
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)=0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630600000000000000929a43bdad922240"], 0x0, 0x0, 0x0})

07:35:57 executing program 5:
r0 = socket$unix(0xa, 0x100000003, 0x3a)
connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_1\x00', 0x2802})
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)
prctl$PR_MCE_KILL_GET(0x22)

07:35:57 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4c751f429cf2077b)
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000009c0)={0x12, 0x5, 0x9})
getgroups(0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sysfs$2(0x2, 0x7, &(0x7f0000000080)=""/99)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x1)
r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0xb3, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x9f, 0x0, &(0x7f00000000c0)="0ab509b9108e6cf0f5b5b81621671e728649b359f4fd56605c4a16a8dc9a8560ef5d041fe9a84f709b078ff8bf8c8181a9f4bda264d2c69520400a38195d5003102f13796b86f1ac0946c8a4677a7f910216a0d6f616c5aeb44310dec71c7320547dcf296509e2445b913a74f27c96e5050fc54b421c8fa29d08936e98f04bb0232518bc9b4775bc900fd31414417c1bd405ad1f4b2c373b24fcd9290a9d7d", 0x0, 0x101}, 0x28)
recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000240)=@hci={0x1f, <r4=>0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f00000005c0)=""/206, 0xce}], 0x4, &(0x7f0000000800)=""/222, 0xde}, 0x40000020)
sendmsg$can_raw(r3, &(0x7f0000000980)={&(0x7f00000006c0)={0x1d, r4}, 0x10, &(0x7f0000000940)={&(0x7f0000000900)=@can={{0x3, 0x100, 0x1, 0x58841f62}, 0x5, 0x0, 0x0, 0x0, "4e96d18ce8feb7e2"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4044051)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000b00)=""/246)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00')

07:35:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x710, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:57 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:57 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x715, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1291.323330] binder: 19095:19097 unknown command 0
[ 1291.355211] binder: 19095:19097 ioctl c0306201 20012000 returned -22
[ 1291.385815] binder: 19095:19111 unknown command 418574
07:35:58 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1291.462076] binder: 19095:19111 ioctl c0306201 20008fd0 returned -22
07:35:58 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:35:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x2, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1291.577385] binder: BINDER_SET_CONTEXT_MGR already set
[ 1291.658010] binder: 19095:19097 unknown command 0
[ 1291.669274] binder: 19095:19122 ioctl 40046207 0 returned -16
[ 1291.675357] binder: BINDER_SET_CONTEXT_MGR already set
[ 1291.677693] binder: 19095:19111 unknown command 418574
[ 1291.681404] binder: 19123:19124 ioctl 40046207 20008fd0 returned -16
[ 1291.701841] binder: 19095:19111 ioctl c0306201 20008fd0 returned -22
07:35:58 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:35:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x4, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1291.743799] binder: BINDER_SET_CONTEXT_MGR already set
[ 1291.760602] binder: 19095:19097 ioctl c0306201 20012000 returned -22
[ 1291.831232] binder: 19123:19133 ioctl 40046207 20008fd0 returned -16
07:35:58 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x501000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000400)={0x7, 0xffffffff, 0x7fff, 0x0, 0x0, [], [], [], 0x6, 0x80000001})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1292.057287] binder: BINDER_SET_CONTEXT_MGR already set
[ 1292.094482] binder: 19146:19148 ioctl 40046207 0 returned -16
[ 1292.124782] binder: 19146:19147 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:35:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3166b194}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x1)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0xa07d, 0xa, 0x0, 0x0, 0x2f}, {0x4, 0x3, 0x831, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x7, 0x8, 0x7ee}, 0x0, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0xa, @in6=@mcast2, 0x3503, 0x0, 0x1, 0x2, 0x0, 0x7}}, 0xe8)
sync_file_range(r0, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @local}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}}, &(0x7f00000000c0)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in, 0x4e23, 0x1f, 0x4e20, 0x6, 0xa, 0xa0, 0x80, 0x2e, 0x0, r1}, {0x8, 0x6, 0x4, 0x93, 0x0, 0x8001, 0xba}, {0x7, 0x0, 0xffffffffffffff2d, 0x5}, 0x2, 0x6e6bb7, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast1, 0x4d3, 0xff}, 0x0, @in=@rand_addr=0x80000000, 0x0, 0x3, 0x3, 0x80, 0x5, 0x3, 0x40}}, 0xe8)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4000000000000003, @local, 'syz_tun\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x3, @empty, 'bridge_slave_0\x00'}}, 0x1e)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000300)=0x3, &(0x7f0000000640)=0x4)
r4 = dup2(r2, r3)
ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000680)={0x401, 0xa, 0x11, "04d9051875d8cf0ada65d78ade0a91f4f4ab4c2f6a40cd95799d0fd7338a88c850a0124d83e0cea2f83534dc81696a506237ac3005db341fc6165371", 0x39, "14161aea99965dcc0fec2c2a4fca9516f2368a3a5da8cb1d2cce6c424d8d76eda303bfdda483630d77f32db4d90e04c6b9f6ccd3b0471690e2dc1c05", 0xa0})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net\x00')
fcntl$setstatus(r5, 0x4, 0x4000)
ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f00000003c0)=0x489)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340))
recvfrom(0xffffffffffffffff, &(0x7f0000000780)=""/89, 0x59, 0x40000001, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80)
msgget$private(0x0, 0x402)
seccomp(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3ff, 0x6, 0x20000000000, 0x6}, {0x8e1, 0x6, 0x5, 0x1}, {0x300000, 0x1, 0xbb1}, {0xe3, 0x4, 0x5, 0x101}]})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, <r6=>0x0, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={r6, 0x80000, r0})
sendfile(r0, r5, &(0x7f0000000040)=0xe00, 0x1080005000)

07:35:58 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:35:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x8, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:58 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:58 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4c751f429cf2077b)
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000009c0)={0x12, 0x5, 0x9})
getgroups(0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sysfs$2(0x2, 0x7, &(0x7f0000000080)=""/99)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x1)
r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0xb3, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x9f, 0x0, &(0x7f00000000c0)="0ab509b9108e6cf0f5b5b81621671e728649b359f4fd56605c4a16a8dc9a8560ef5d041fe9a84f709b078ff8bf8c8181a9f4bda264d2c69520400a38195d5003102f13796b86f1ac0946c8a4677a7f910216a0d6f616c5aeb44310dec71c7320547dcf296509e2445b913a74f27c96e5050fc54b421c8fa29d08936e98f04bb0232518bc9b4775bc900fd31414417c1bd405ad1f4b2c373b24fcd9290a9d7d", 0x0, 0x101}, 0x28)
recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000240)=@hci={0x1f, <r4=>0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f00000005c0)=""/206, 0xce}], 0x4, &(0x7f0000000800)=""/222, 0xde}, 0x40000020)
sendmsg$can_raw(r3, &(0x7f0000000980)={&(0x7f00000006c0)={0x1d, r4}, 0x10, &(0x7f0000000940)={&(0x7f0000000900)=@can={{0x3, 0x100, 0x1, 0x58841f62}, 0x5, 0x0, 0x0, 0x0, "4e96d18ce8feb7e2"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4044051)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000b00)=""/246)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00')

07:35:58 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10080, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000040)={0x10000, 0xb3f, &(0x7f00000000c0)="46b64ea3a970a0428049e768ae05fa14849ef8d61aeea0725afa3a3faf075c27f4b0753bb926a7d08b5251673f412d55501de1d98c597cde580ad7c33bd89dd2542be406ca4bb6ddcd5d2c4ef88f0031413101be6f1bad668595702e8f7a94c6cb66d932616439f319a6be3c57f5657c81e0f41ee473c315f391d5ee253d12cf7fa952cdb10f69d1aa515077576803b95602541bc25820471b61", &(0x7f0000000200)="67d90a50ff404390e98f08829bf005f3e581f7a2a190a742e73d9ba850c6458d159cbe608ea380898d79a900c82eeb7f9e0aa9122e104f2fd1dfbc95f0609576cf1d285eb827301a70494a2afbbdac27fa32f6fe7218f9d8f020250c292fdbe366f8ff187ff12cd73dd599b624b363e7fa8c9b19449d17f23f153983860a1aeb8af6e98550af6afd9e1684533cd0362495380ab08a9e18fe864d45e7e1e0e5d62ba8e86187aebd27ae865f111f36af3a80f9877d5c6cdc6b60d67131b1148f28f7d1f044e2a628a9991f64b6047d2a7f89737542cc9f4f207058964fe2db711a8e6ca50429a09db73fe2d0829731", 0x9a, 0xee})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1292.226840] bridge0: port 2(bridge_slave_1) entered disabled state
07:35:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xa, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:58 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1292.365836] binder: BINDER_SET_CONTEXT_MGR already set
07:35:59 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1292.444679] binder: 19170:19172 ioctl 40046207 0 returned -16
07:35:59 executing program 5:
prlimit64(0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000200))
mknod(&(0x7f00000000c0)='./file0\x00', 0xff7, 0x0)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f00000008c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000001ac0)=[&(0x7f0000001d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14* \xddb\x7f\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbf\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04\x87\xe10\x1c+\xf4D\f\xe51\a\x19*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\xfc\xa3dx\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xb1ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00\x00\x00\x00\x00\x00\x00\x00\xb9R\"\xe7o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000e40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\t\xd11\x8d\xf2\nd\xdd1\x05\xcc\f\xc4UPJ\x97,\xc4\x9c\xa6\x94\x8106t\xf7;\x0f\x9a\xb5', &(0x7f0000001280)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001480)='&.\x00', &(0x7f0000001680)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001880)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'])

07:35:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xe, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:59 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={<r2=>0x0, 0x8}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x61}, &(0x7f0000000280)=0x8)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={<r5=>0x0, 0x35, "1a70ea7ca3595d35dbcc257497336449ace6ca77d79d713fed24bb08e5acac8cecab36c34ec020c1c708e7c499afd44fc734ad72ce"}, &(0x7f00000000c0)=0x3d)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x9}, 0x8)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:35:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:59 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:35:59 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1292.770932] binder: BINDER_SET_CONTEXT_MGR already set
[ 1292.810617] binder: 19200:19208 ioctl 40046207 0 returned -16
07:35:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x10, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:59 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4c751f429cf2077b)
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000009c0)={0x12, 0x5, 0x9})
getgroups(0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sysfs$2(0x2, 0x7, &(0x7f0000000080)=""/99)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0)
r2 = socket$inet6(0xa, 0x80003, 0x1)
r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0xb3, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x9f, 0x0, &(0x7f00000000c0)="0ab509b9108e6cf0f5b5b81621671e728649b359f4fd56605c4a16a8dc9a8560ef5d041fe9a84f709b078ff8bf8c8181a9f4bda264d2c69520400a38195d5003102f13796b86f1ac0946c8a4677a7f910216a0d6f616c5aeb44310dec71c7320547dcf296509e2445b913a74f27c96e5050fc54b421c8fa29d08936e98f04bb0232518bc9b4775bc900fd31414417c1bd405ad1f4b2c373b24fcd9290a9d7d", 0x0, 0x101}, 0x28)
recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000240)=@hci={0x1f, <r4=>0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/206, 0xce}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f00000005c0)=""/206, 0xce}], 0x4, &(0x7f0000000800)=""/222, 0xde}, 0x40000020)
sendmsg$can_raw(r3, &(0x7f0000000980)={&(0x7f00000006c0)={0x1d, r4}, 0x10, &(0x7f0000000940)={&(0x7f0000000900)=@can={{0x3, 0x100, 0x1, 0x58841f62}, 0x5, 0x0, 0x0, 0x0, "4e96d18ce8feb7e2"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4044051)
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000b00)=""/246)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00')

07:35:59 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:35:59 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$NBD_SET_SOCK(r3, 0xab00, r3)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0xc0000)
sendmsg$nl_route(r0, &(0x7f000000a000)={0x0, 0x6f, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="48010000180002002cbd70891438579000fedbdf2502000020fc02000f0020000008000b000700000008000b0005001d000c00097b7f5b53bb081f917a15944cd032f8d498c39351a42533b41fd01ebf097b84f18c3f4ccf165b216169b8353891cb09acabb25f98490e8bc5f1e09609c5e271135d1ed984e363", @ANYRES32=r1, @ANYBLOB="08000b000000000008007fd89293007e6e2788c927f153da9e4063e165e421437b3b8889480466bd73f42181c7f1fae7464f5f74ed8ab224547dd10e9a8e9a39285ccb532db312", @ANYRES32=r2, @ANYBLOB="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"], 0x148}}, 0x0)

07:35:59 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:35:59 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x400)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, <r3=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r3, 0x7}, &(0x7f0000000200)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e7d630c40867e1c6f491ab347e4bdc2e6022c890a03006901f042529b69a90c837715fa7d685010e0ed3578479a41619032510766caae2cfd67f31b3f3ecb"], 0x0, 0x0, 0x0})

07:35:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x60, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1293.159053] binder: 19233:19237 unknown command 207846670
[ 1293.183110] binder: 19233:19237 ioctl c0306201 20008fd0 returned -22
07:35:59 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1293.217163] binder: BINDER_SET_CONTEXT_MGR already set
07:35:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xc0, 0x0, {0x10}}, 0x14}}, 0x0)

07:35:59 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00')
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x100)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x100, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x200, 0x0)
r5 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x35, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80000)
r7 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x101001)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
r8 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r8, 0x2287, &(0x7f00000000c0))

[ 1293.250603] binder: 19233:19246 ioctl 40046207 0 returned -16
07:35:59 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1293.321095] binder: 19233:19246 unknown command 207846670
[ 1293.376539] binder: 19233:19246 ioctl c0306201 20008fd0 returned -22
07:36:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf0, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:00 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

[ 1293.577173] binder: 19271:19273 unknown command 0
[ 1293.589266] binder: 19271:19273 ioctl c0306201 20008fd0 returned -22
[ 1293.626315] binder: BINDER_SET_CONTEXT_MGR already set
[ 1293.636903] binder: 19271:19276 ioctl 40046207 0 returned -16
[ 1293.667422] binder: 19271:19273 unknown command 0
[ 1293.689469] binder: 19271:19273 ioctl c0306201 20008fd0 returned -22
07:36:00 executing program 2:
socket$unix(0x1, 0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00')
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000340))
lseek(r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x1, 0x2, 0x800, 0x0, 0xc})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x80000, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00')
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000001c0))
write$binfmt_elf32(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x777)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952})
pipe(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x800, 0xfff}, 0x2}, 0x10)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03Z\x00\x02\xe6\x03\xca\x00', @ifru_mtu=0x1})

07:36:00 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x802, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
tee(r0, r0, 0x0, 0x0)
r2 = socket(0x4000000000013, 0x801, 0x1)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)="3dff5f786bf1948ea3b879c3d4b59d1343d2061229eac76ddb6a7aa18f3dbefb3060b8de88d5558f09e0af1911c6a3cfb34c0d5e1da34e411d58263b2cf8f1a4a3620b2ffaca9ccc12007d7bad3e03fa919cc0df318da3c7d55b91f3", 0x5c)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x1f, 0x6}, 0x14)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00'})
renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00')
r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x81, 0x2000)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000340)={0x2, 0x0, [{0x1000, 0x7, 0x0, 0x0, @adapter={0x9, 0xd307, 0x0, 0x8, 0x1d}}, {0x7f, 0x1, 0x0, 0x0, @irqchip={0xffff, 0x7}}]})
r4 = msgget$private(0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000500)=0xc)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8)
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = getpgid(0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={<r10=>0xffffffffffffffff, r1, 0x0, 0x10, &(0x7f0000000740)='team0\x00\x04\xff\xff\xff\xc0`\x03\x00\x00\xff', 0xffffffffffffffff}, 0x30)
msgctl$IPC_SET(r4, 0x1, &(0x7f00000007c0)={{0x6, r5, r6, r7, r8, 0x40, 0x8}, 0x2, 0x3e6, 0x200, 0x6, 0x200, 0x10001, r9, r10})
ustat(0x0, &(0x7f0000000100))
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'team0\x00\x04\xff\xff\xff\xc0`\x03\x00\x00\xff', 0x4bfd})
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[]}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x2100)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000f6bfe8))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}})
sendmmsg(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000d40)}, 0x80000000}], 0x1, 0x10)

07:36:00 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:00 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xa00, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:00 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1294.002293] binder: BINDER_SET_CONTEXT_MGR already set
07:36:00 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:00 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xe00, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1294.040945] binder: 19290:19296 ioctl 40046207 0 returned -16
[ 1294.079557] binder: 19290:19292 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xec0, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:00 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x1}, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:00 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1294.266439] binder: BINDER_SET_CONTEXT_MGR already set
[ 1294.272487] binder: 19317:19319 ioctl 40046207 0 returned -16
[ 1294.279825] binder: 19317:19318 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1294.355334] binder: 19320 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[ 1294.355347] binder: 19320:19321 ioctl c018620c 20008fd0 returned -22
[ 1294.419325] binder: 19320 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[ 1294.419339] binder: 19320:19321 ioctl c018620c 20008fd0 returned -22
[ 1294.869169] device team0 entered promiscuous mode
[ 1294.874244] device team_slave_0 entered promiscuous mode
[ 1294.880524] device team_slave_1 entered promiscuous mode
[ 1294.888048] 8021q: adding VLAN 0 to HW filter on device team0
[ 1294.899018] device team0 left promiscuous mode
[ 1294.903807] device team_slave_0 left promiscuous mode
[ 1294.909291] device team_slave_1 left promiscuous mode
[ 1295.073336] device team0 entered promiscuous mode
[ 1295.079078] device team_slave_0 entered promiscuous mode
[ 1295.085330] device team_slave_1 entered promiscuous mode
[ 1295.092427] 8021q: adding VLAN 0 to HW filter on device team0
07:36:01 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
read(r1, &(0x7f0000000280)=""/1, 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80a020}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x13c, r4, 0x14, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd5}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x22}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="9ed20de56742e5ae64b3034b9e0c0627"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000)
rt_sigsuspend(&(0x7f0000000680), 0x8)
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/251, 0xfb}], 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x1000000000016)

07:36:01 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf00, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:01 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440e5ffffffba676e"], 0x0, 0x0, 0x0})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x5, 0x7, 0xffff, 0xc2}, {0x6e3d, 0x86, 0x8}, {0x0, 0x9, 0xcb, 0xd613}]}, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:01 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:01 executing program 5:
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x80000009, 0xffffffb5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040))
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0))

07:36:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x3f00, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:01 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18)

07:36:02 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1295.445274] binder: 19338:19346 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:02 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x6000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:02 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="bedf0563042f00000000"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x80000)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={<r3=>0x0, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x9, 0xfff, 0x1, 0xffffffffffffd6dc}, &(0x7f0000000140)=0x98)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0x2}, &(0x7f0000000240)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ffff0c40"], 0x0, 0x0, 0x0})

07:36:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008916, &(0x7f0000000100)="0af51f023c010000afc6b2")
r1 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x7ff, 0x0)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x1, "d5e70b8acd7c9d6ba698be30905d9c4afcf0a401761bf9b5c7de586f8c010f97", 0x0, 0x8000000000})

07:36:02 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00\b\x00')
socket$kcm(0x29, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/114, 0x72}], 0x1, 0x92)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x4, 0x7fff, 0x51e6, 0x0, 0x23})

07:36:02 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306209, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:02 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1295.701795] binder: 19380:19381 unknown command 1661329342
[ 1295.715640] binder: 19380:19381 ioctl c0306201 20012000 returned -22
07:36:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xc000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1295.750184] binder: 19380:19391 unknown command 1074593791
07:36:02 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x200800)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x8, &(0x7f00000000c0)=@raw=[@map={0x18, 0x5, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x56}, @alu={0x4, 0x9, 0x1, 0x3, 0xb, 0x20, 0x1}, @jmp={0x5, 0x0, 0x4, 0x9, 0xf, 0xffffffffffffffc0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffff7fff}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x1e6}, 0x48)

07:36:02 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1295.794426] binder: 19380:19391 ioctl c0306201 20008fd0 returned -22
[ 1295.794464] binder: 19389:19398 ioctl c0306209 20008fd0 returned -22
07:36:02 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
pipe2$9p(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x80800)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/23)

07:36:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xc00e, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1295.896118] binder: 19389:19390 ioctl c0306209 20008fd0 returned -22
[ 1295.922887] binder: BINDER_SET_CONTEXT_MGR already set
07:36:02 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1295.965808] binder: 19380:19381 ioctl 40046207 0 returned -16
[ 1295.994044] binder: 19380:19391 unknown command 1661329342
07:36:02 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000002c0)="0af51f023c123f3188a070")
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000340), 0x8)
sendmmsg(r0, &(0x7f00000000c0), 0x40000000000005c, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000040)=0x100)
getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000180))

[ 1296.012253] binder: 19380:19391 ioctl c0306201 20012000 returned -22
[ 1296.050289] binder: 19380:19381 unknown command 1074593791
[ 1296.055964] binder: 19380:19381 ioctl c0306201 20008fd0 returned -22
[ 1296.086866] binder: 19421:19424 ioctl c0306225 20008fd0 returned -22
07:36:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000001880)={'lapb0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}})
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
r4 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x4)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x100000000, 0xe9e4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}})
ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)=0x4)

07:36:02 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:02 executing program 2:
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x81, 0x210201)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x2}}, 0x18)
sendfile(r0, r0, &(0x7f00000001c0), 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="12002218472e1c6a70f8000000000082348e219b9e0071d5fc33494bc43e0a12ed2917cfa80e77455c2f90bd0c60cbf290476731e36d1285ee5fb052cbe1f74d3be6f54adad44a3225cf787a4cf7563cec839f72ebc75589eafd1bf654a16e8893dba021811b9e9f8bf239624ae84838eead839f8a458afc42f0a197e783abdb816578e54779efcaf7cbdb7269f51cba6ea7dd5d6df0c858f1428146def232f4fddaad109b36347fed4fa5d09bf00c98ea"]})

07:36:02 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x220000007, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0xffffdffffffffffd)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00000000000000000000000000", 0x281}], 0x1)

07:36:02 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc030623d, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1296.329453] binder: 19434:19435 ioctl c030623d 20008fd0 returned -22
[ 1296.359743] binder: 19434:19435 ioctl c030623d 20008fd0 returned -22
07:36:02 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0))
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3)
futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x308000000)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000))
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)

[ 1296.385478] binder: BINDER_SET_CONTEXT_MGR already set
07:36:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x34000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1296.409614] binder: 19447:19454 ioctl 40046207 0 returned -16
07:36:03 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8100, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x4f3, @local, 0x1f}}, [0x9fcb, 0x0, 0x0, 0xffffffff, 0x4, 0x401, 0x9, 0x0, 0x0, 0x32, 0x0, 0x4, 0x0, 0x10000, 0x75eb]}, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="a3d00c6fc390144fb1329653986041", 0xf}], 0x1)
write(r1, 0x0, 0xffffffffffffff2c)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
socket$tipc(0x1e, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000236fc8), 0x1f8, 0x0)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080))
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x105000, 0x0)
fstat(0xffffffffffffffff, 0x0)

07:36:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:03 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306253, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1296.453834] binder: 19447:19448 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:03 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0))
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0x3)
futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x308000000)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000))
lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0)

[ 1296.613876] binder: 19472:19473 ioctl c0306253 20008fd0 returned -22
07:36:03 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e010c40"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x80000000, 0x101000)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000040)={0x8, 0x1, 0x3631f09b, 0x400000, '\x00', 0x5})

07:36:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x400300, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:03 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1296.795314] binder: 19483:19484 unknown command 1074528526
[ 1296.840649] binder: 19483:19484 ioctl c0306201 20008fd0 returned -22
[ 1296.845210] binder: 19492:19493 ioctl c0306263 20008fd0 returned -22
07:36:03 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00')
sendfile(r0, r0, 0x0, 0x1fc)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3)

[ 1296.904878] binder: BINDER_SET_CONTEXT_MGR already set
07:36:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1296.929705] binder: 19483:19494 ioctl 40046207 0 returned -16
[ 1296.962978] binder: 19492:19499 ioctl c0306263 20008fd0 returned -22
[ 1296.969812] binder: 19483:19494 unknown command 1074528526
07:36:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf0ffff, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:03 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1297.029058] binder: 19483:19494 ioctl c0306201 20008fd0 returned -22
[ 1297.175705] binder: 19511:19512 transaction failed 29189/-22, size 0-0 line 2896
[ 1297.242771] binder: undelivered TRANSACTION_ERROR: 29189
07:36:03 executing program 2:
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8100, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x4f3, @local, 0x1f}}, [0x9fcb, 0x0, 0x0, 0xffffffff, 0x4, 0x401, 0x9, 0x0, 0x0, 0x32, 0x0, 0x4, 0x0, 0x10000, 0x75eb]}, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="a3d00c6fc390144fb1329653986041", 0xf}], 0x1)
write(r1, 0x0, 0xffffffffffffff2c)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
socket$tipc(0x1e, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000236fc8), 0x1f8, 0x0)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080))
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x105000, 0x0)
fstat(0xffffffffffffffff, 0x0)

07:36:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0xfffffffffffffffd, 0x2, 0x0, "5f70d4de8a98b182528ef6c7e82339ed17dc1bca32434ea597d5a14978a0c164"})
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000000c0)={0xb, {0x100000001, 0x4, 0x0, 0x10001}, {0xffffffffffff7fff, 0x4, 0x2040000}, {0x8, 0x5}})
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x4)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x6, {0x1f, 0x80, 0xcbe, 0x7fff}, {0x2, 0x1ff, 0x10001, 0x7}, {0x10000, 0x81}})
r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xe6, 0x200)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x1, @remote, 0x80}}, [0x1, 0x9, 0x5, 0x85f, 0xffff, 0x4, 0x9, 0x20, 0x7f8, 0x0, 0xd32, 0x1000, 0x7fff, 0x9, 0x23]}, &(0x7f0000000280)=0x100)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r2, 0xe5c}, 0x8)

07:36:03 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="4dbc0c40"], 0x0, 0x0, 0x0})

07:36:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x1000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:03 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x5, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x2000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:04 executing program 5:
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8100, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x4f3, @local, 0x1f}}, [0x9fcb, 0x0, 0x0, 0xffffffff, 0x4, 0x401, 0x9, 0x0, 0x0, 0x32, 0x0, 0x4, 0x0, 0x10000, 0x75eb]}, 0x0)
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="a3d00c6fc390144fb1329653986041", 0xf}], 0x1)
write(r1, 0x0, 0xffffffffffffff2c)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a)
writev(r1, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
socket$tipc(0x1e, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000236fc8), 0x1f8, 0x0)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080))
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)
openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x105000, 0x0)
fstat(0xffffffffffffffff, 0x0)

[ 1297.476547] binder: 19526:19537 unknown command 1074576461
[ 1297.492126] binder_alloc: 19526: binder_alloc_buf, no vma
07:36:04 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1297.523008] binder: 19525:19527 transaction failed 29189/-3, size 0-0 line 3035
[ 1297.552688] binder: 19526:19537 ioctl c0306201 20008fd0 returned -22
07:36:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x4000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1297.582663] binder: BINDER_SET_CONTEXT_MGR already set
[ 1297.587992] binder: 19526:19537 ioctl 40046207 0 returned -16
[ 1297.619026] binder: undelivered TRANSACTION_ERROR: 29189
[ 1297.661450] binder: 19526:19529 unknown command 1074576461
07:36:04 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x12, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1297.708504] binder: 19526:19529 ioctl c0306201 20008fd0 returned -22
07:36:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x8000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1297.863069] binder: 19557:19558 transaction failed 29189/-22, size 0-0 line 2896
[ 1297.930854] binder: undelivered TRANSACTION_ERROR: 29189
07:36:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x1000, 0x10000}, {0x7fffffff, 0x8b4e}]}, 0x14, 0x0)
bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x7fffffff)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x280000)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4)
syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
r5 = socket$inet6(0xa, 0x1000000000002, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r6, 0x5452, &(0x7f00000000c0)={'s\x81zkalYer0\x00'})
dup3(r5, r6, 0x0)
sendfile(r5, r3, 0x0, 0x10000000000443)
writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000540)="976e400f454b7b2ab10e8bb9093ad1852c345927e96ae06a2c0fa2c8ea4383decd2b318691509abed5d5ad4709c919d7aa4881a4de5ecaf8b32282bdd07c5a5decb9b2d94fd7"}], 0x1127)
read(r4, &(0x7f00000003c0)=""/72, 0x100000104)
sendmsg$xdp(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000002c0)=0x1)
r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
close(r7)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4004ae86, &(0x7f0000000280))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0x2)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r8, 0x4040aea4, &(0x7f0000000200)={0x0, 0x10000, 0x2bb00000000000, 0x3, 0x5})

07:36:04 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:04 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xa000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:04 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1298.280055] binder: BINDER_SET_CONTEXT_MGR already set
[ 1298.292878] binder: 19570:19579 ioctl 40046207 0 returned -16
[ 1298.301369] binder_alloc: 19570: binder_alloc_buf, no vma
[ 1298.307016] binder: 19571:19574 transaction failed 29189/-3, size 0-0 line 3035
07:36:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x80000)
ioctl$CAPI_INSTALLED(r3, 0x80024322)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={<r4=>0x0, 0x1, 0x2}, &(0x7f00000000c0)=0xc)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000380)=0x10000, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={r4, 0x7}, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000d5"], 0x0, 0x0, 0x0})
lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="393152ecb22f8b787d1c0a148b9b6f5be7620c9a2e2d42765e97a53984537f58103d62f84cde9b67a97fd57fa3154665e5c553a32f5437d3252b00e19edbc5ba4325afae0ea1a6b8fd0e03e91b407549ef7c8950ff7fb1d3dcf09b0764183e2e2792c7538eadbd5005b83c7e14fd0fee8ac4a884dcc1447916c2bdf038cc15b8aae6dd57d211370addca9abd0bf485fb71712036ee68e7c51f6bb90a6d250896707a43e658f9f787eb7e3184f8b8fea95cff90b20be95ec7961afabb202f312be6d001be53749344dac0b01b92231bd99e2337f58b3c16793f0485063f4557dedc694a22cea41f3cd9b85e223e2900a2b926e76da741"], 0x0, 0x0, 0x0})
fallocate(r1, 0x50, 0x3, 0x2)

07:36:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xe000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1298.351671] binder: undelivered TRANSACTION_ERROR: 29189
[ 1298.466170] binder: 19586:19587 unknown command 0
07:36:05 executing program 5:
sched_rr_get_interval(0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000100))
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x8000, 0x2, 0x3f, 0x3, 0x7, 0x5, 0x64, 0x38, 0x2dc, 0x3, 0x5, 0x20, 0x1, 0x2d, 0x81}, [{0x6474e553, 0x2, 0x1, 0x2, 0x8, 0x4, 0x401, 0x4}, {0x5, 0x8, 0x3, 0x10001, 0x5, 0x7b, 0x9, 0x7}], "d5df1f76a9886232aba220ea49384147a1909de9dd27174c157af48bc8b4e960556250663dac5f20d098f4dd63a4dc9bc3c55c4bb914e6804f0e5a7965a202c6a38e6eaaa956611d4ad795a15ab7e44358ad2028595fd051d47a6503718c1362d5d053d9a2c40a449b7454258b9e0740e5b5fc9fd8b22e2888a1269059aade6611d40a94561b9ee825eb71d5820f844648d5a119afe1e1b234b412ccf6912d6b30e0d15277285c5180be982f3c1b6ab8fe867cd5544400f0c015d1b01bae17a7f436b08e18ebdab3492006ddeb07d43dddc2843bc881490044543f3bf748e489caf2d310562034", [[]]}, 0x25f)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180), 0x0)
fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000003d40), 0x0, 0x4000000)

07:36:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:05 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x53, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1298.527836] binder: 19586:19587 ioctl c0306201 20012000 returned -22
[ 1298.528085] binder: 19586:19591 unknown command -330157767
[ 1298.589230] binder_alloc: 19586: binder_alloc_buf, no vma
[ 1298.608625] binder: 19586:19591 ioctl c0306201 20008fd0 returned -22
[ 1298.633549] binder: 19595:19597 transaction failed 29189/-3, size 0-0 line 3035
07:36:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1298.663696] binder: BINDER_SET_CONTEXT_MGR already set
[ 1298.669560] binder: 19586:19591 ioctl 40046207 0 returned -16
[ 1298.710572] binder: undelivered TRANSACTION_ERROR: 29189
[ 1298.739845] binder: 19586:19587 unknown command 0
[ 1298.760960] binder: 19586:19587 ioctl c0306201 20012000 returned -22
[ 1298.804038] binder: 19586:19599 unknown command -330157767
[ 1298.819573] binder: 19586:19599 ioctl c0306201 20008fd0 returned -22
07:36:05 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
unshare(0x400)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0))
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080))
ioctl$HDIO_GETGEO(r1, 0x40081271, 0x0)

07:36:05 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3d00, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:05 executing program 5:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xfffffffffffffffc, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x4d, 0x3, 0x0, {0x3, 0x2c, 0x0, '[vmnet1eth1wlan0,wlan1!locpuset!]em1md5sum\x05%'}}, 0x4d)
r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000005c0)='asymmetric\x00', &(0x7f00000006c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'})
keyctl$link(0x8, r1, r1)

07:36:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x10000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:05 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c40bf1b0621023f051b9c80ae8398cecff81bc6e9df6fe61447010800a83efac9e61723fe969e2c49bccda26550294ce90eef5a83bf3fd734858d9acbe6010214a9cda165ec3218ce62834d34c17e43895761e3a841d51b9d89faa52f4db388e17672de192f40d9a4b7f24ff3ae2906cd326c38ab069ad3163b2f62742b54c9339ec53148bde62280d1b15eeb31eb0eb819d4787c0060dafd486a4e29e12165415ec68d3d565346261db0c4c109906e674793d88319de52382d40ef952c8e26ade80123d9d8c9d00cd470dc4570f628b9ecee1f7e036bb4730f2a4d499c5c94bd48"], 0x0, 0x0, 0x0})

[ 1299.150346] binder: 19625:19626 transaction failed 29189/-22, size 0-0 line 2896
[ 1299.154616] binder: 19634:19636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 554048447
07:36:05 executing program 5:
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000005400)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="146cdd5312b21f64da40339f00940402", 0x10}], 0x1}, 0x8000)
sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffdce}, 0x0)

07:36:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:05 executing program 2:
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c593c4633ef1f374997aa1afee0162c3739d5e42fb0500000000000000438e7ab5cde30aae88d0151c5d8db664666f5c9274d6b0c4709c00", "d79763d957116aae296e0193d645fd143754e010c90c43df5e5fc3286854d45e3605f358a228468c748a4cc8985e45216a88fbe75f89b5f61efd3c466243ef8e", "a2951aa84d1b84172faa628878770e69dea7027bc5fab56a546bab898eee5d7d"})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4)

[ 1299.199726] binder: undelivered TRANSACTION_ERROR: 29189
[ 1299.227121] binder: BINDER_SET_CONTEXT_MGR already set
07:36:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x3f000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:05 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x5300, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1299.287977] binder: 19634:19644 ioctl 40046207 0 returned -16
[ 1299.321682] binder: 19634:19636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 554048447
[ 1299.335281] binder_alloc: 19634: binder_alloc_buf, no vma
07:36:05 executing program 5:
socketpair$unix(0x1, 0x6, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
pipe(&(0x7f0000000a00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x80)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioprio_set$pid(0x2, 0x0, 0xce9)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000000040}, 0x4000001)
kcmp(0x0, 0x0, 0x6, r1, r0)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/232, 0xe8, 0x7}, 0x8}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000000900)=""/56, 0x38}, {&(0x7f0000000940)=""/42, 0x2a}, {0x0}], 0x4, &(0x7f0000000a40)=""/37, 0x25, 0x8001}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001080)=@nfc, 0x80, &(0x7f0000002400)=[{0x0}, {&(0x7f0000001140)=""/67, 0x43}, {0x0}, {&(0x7f0000001340)=""/12, 0xc}, {&(0x7f0000001380)=""/77, 0x4d}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0xff}}], 0x4, 0x41, &(0x7f0000002640))
r5 = dup2(r4, r2)
sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200000000000000001ff000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r2], 0x20}, 0x0)
recvmmsg(r3, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0xb, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0)
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000380), 0x4)

07:36:05 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1299.386676] binder: 19655:19656 transaction failed 29189/-3, size 0-0 line 3035
07:36:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYBLOB="09007902d0c39d"], 0x0)
write$binfmt_aout(r0, &(0x7f0000000440)={{0x0, 0x2, 0x80000001, 0xc6, 0x1c9, 0x1, 0x125, 0x401}, "bbc64a1f7db61fb721da3bc8b3b80fca0fa28e433dffa80d390b47789939045dd25c12cfe16f6aab9a7b5b265db53b05ef746f9095ab4b13a0b1ea5abb07ec37f24cbc38a9697c8b23f8570e764fbd3e946a4f6d29374a6cb3fbeb7fb9f4653d0095c524088e3250da4b63bc0e9b992a5fc991dddf2c27b54f3b93b0066bbde25167ef773386a85402393ebaa08a079afa57ea6d9618e1c9b2a4776acfda5abf3023adb1a994abcc8569a38222aeef7ecb697db68aa83ac81d135b58399ce6a123526e8671864d521015e8e4e148254357613b5577df2e51d9321f5768a6fd644b7fc5af6aff29535a229a98e01e", [[], [], [], [], [], [], [], []]}, 0x90e)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1299.457522] binder: undelivered TRANSACTION_ERROR: 29189
07:36:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000))

07:36:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x60000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:06 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:06 executing program 5:
r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x800000002009)
ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)={0x1, 0xfffffffffffffff7})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x3})
fcntl$setflags(r0, 0x2, 0x1)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r3 = dup2(r1, r0)
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000040)=""/56)

[ 1299.610409] binder: BINDER_SET_CONTEXT_MGR already set
[ 1299.628035] binder: 19676:19680 ioctl 40046207 0 returned -16
07:36:06 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x9effffff, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1299.673433] binder: 19676:19677 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1299.701746] binder: 19685:19686 unknown command 16448
[ 1299.739252] binder: 19685:19686 ioctl c0306201 20008fd0 returned -22
[ 1299.777974] binder: 19685:19700 unknown command 16448
07:36:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair(0x5, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @local}, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:06 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1299.809273] binder: 19685:19700 ioctl c0306201 20008fd0 returned -22
07:36:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xc0000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:06 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000001c0)={0x0, 0x0, 0x3b, 0x0, 0x400000000000, 0x0, 0x3})

07:36:06 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1299.979459] binder: BINDER_SET_CONTEXT_MGR already set
07:36:06 executing program 2:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
clone(0xfffff7ffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2000, 0x0)
sysinfo(&(0x7f00000000c0)=""/119)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x3, 0x1, {0x9, 0x2, 0x8, 0x81}})
mlock(&(0x7f00006de000/0x2000)=nil, 0x2000)

07:36:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xc00e0000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1300.004784] binder: 19713:19720 ioctl 40046207 0 returned -16
[ 1300.015723] binder: 19721:19722 unknown command 64
[ 1300.023946] binder: 19721:19722 ioctl c0306201 20008fd0 returned -22
07:36:06 executing program 5:
mkdir(&(0x7f0000000240)='./file0\x00', 0x4)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ubifs\x00\xbaD\xd8\\$\xa7]#^O9\x91\xcf\xdf\x98\xc2\xa8\x10\x06\xc6\xe0\xa4\xb5\xaf6:\x82\x87g/\x17;#\x86\x8c\xf3\xd8\xff\x9eP\xbd\'\xfc$\x98J\x1ey$Fg\xe5\x0fq,-Q+\x16\x11\xf6\xaf\xb3z\xd2\xda\v\x8e\xc7\x0e\x85\x83\xc9\x8c\x05\x19g/\x8f\x01\xbe\xd4\x85\xbdH\x1eJ2\xf2\xb2\xf4j/.A\xa3gWY\x96\xed\xe5\a;0VO\x00\x82>\xcfpdB[\x83\x9d3\xd8\x82\a\x91\xed\xb6]\x15\xbbeM<\x11\f\x1f\xee\xff\x01\x93\xd5\x10\xa3p\xf0dI`Yphz\xe3g\\\xff\xcb\xdc\xaf]\xa9\xc2\xbc$\xd0\x17\xd6\xadIw\xb2\xcd(\xa0T\xea\xa0&\xdc\xff\x9e\x15\x12\xf8w\x87E\xb5\v\xccjI\xc9\x02K\xe3\xc9\x7f\x89z\xc9\xe8\xdc\'\x19_/f\x801w\xca\xa1\xd6?\x0f\x17\xa5G\x9c\xef\x04!\x84|\xc7\x15\x82\xc0\xc1\x81\x8c\xec\xb2\xd6\x02\xa8\r\x03\xe7\x05o\x85\fP\xb8b)\x8d\x19\xbb\nj\x15\xb9\"RC\xbc', 0x0, 0x0)

07:36:06 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:06 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e622d0ad954b80c40"], 0x0, 0x0, 0x0})

[ 1300.155470] UBIFS error (pid: 19736): cannot open "/dev/md0", error -22
[ 1300.156402] UBIFS error (pid: 19739): cannot open "/dev/md0", error -22
07:36:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf0ffffff, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:06 executing program 5:
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000021002551075c0165ff0ffc020200000300100f0007e1000c080018008000a000", 0x24)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={<r1=>0x0, 0xffffffffffff547a, 0x4, [0x7fff, 0x4, 0x400, 0xddd]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0xfffffffffffffffc}, &(0x7f0000000100)=0x8)

07:36:06 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil)
socket$caif_seqpacket(0x25, 0x5, 0x0)
mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil)

[ 1300.266123] binder: 19744:19748 unknown command 170746382
[ 1300.299091] binder: 19744:19748 ioctl c0306201 20008fd0 returned -22
07:36:06 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1300.345493] binder: BINDER_SET_CONTEXT_MGR already set
07:36:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xfffff000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:06 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1300.405870] binder: 19744:19757 ioctl 40046207 0 returned -16
[ 1300.420120] binder: 19744:19748 unknown command 170746382
07:36:06 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0)
mq_open(&(0x7f0000000000)='(keyringselinux.posix_acl_access$#\x00', 0x0, 0x100, &(0x7f0000000180)={0x1f, 0x4, 0x9, 0x3, 0x6, 0x6, 0x39fbc000000000, 0x1000})
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1009}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0xcd}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0xcd, 0x6, &(0x7f0000003700)={0x77359400})

07:36:07 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080))
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0x19e, &(0x7f0000000240)=""/183}, 0x48)
r3 = socket$kcm(0x29, 0x1000000000002, 0x0)
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r1, r2})
recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0)

[ 1300.459309] binder: 19744:19748 ioctl c0306201 20008fd0 returned -22
07:36:07 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xffffff7f, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1300.555625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
07:36:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x0, 0x40, 0xffffffffffffff80, 0x1, 0x482d, 0xfffffffffffffffc})
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x40000)
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000040)=0x4)

07:36:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:07 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$vcsa(0x0, 0x1, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/214, 0xd6)
ioctl$int_in(r1, 0x800000c0045008, &(0x7f0000000000)=0x3ff)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))

[ 1300.680604] binder: BINDER_SET_CONTEXT_MGR already set
[ 1300.732006] binder: 19792:19794 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xffffff9e, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:07 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1300.809569] binder: 19792:19793 ioctl 40046207 0 returned -16
07:36:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:36:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000002c0)={0x3, &(0x7f00000001c0)=[0xa5, 0x20, 0x9]})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xfffffef3, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0523044000000000"], 0x0, 0x0, 0x0})
r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7fff, 0x210000)
write$sndseq(r3, &(0x7f0000000400)=[{0xbb5, 0x9, 0x385c, 0x7, @tick=0x4, {0x7ff, 0x4}, {0x100000000, 0x6}, @connect={{0x1ff, 0xfffffffffffffeff}, {0x10000}}}, {0x7fffffff, 0x1000, 0x9, 0x3, @time={0x0, 0x989680}, {0x6, 0x7}, {0x7, 0x1}, @quote={{0x2, 0x9}, 0x81, &(0x7f0000000140)={0x80000001, 0x44, 0x0, 0x1f, @time, {0x20, 0x8}, {0x1f, 0x3}, @connect={{0x9, 0xd45f}, {0x8a, 0x2}}}}}, {0x8000, 0x100, 0x10000, 0x7, @tick=0x100000000, {0x0, 0x1000}, {0xfffffffffffffffb, 0x6}, @ext={0x9f, &(0x7f0000000200)="6ff5dc18eafefe6bbef1d25c33333f9db1dfbfce31218e476d9745cc4cef490ed7d7d63a0a582945b54a403acb392ca2b19bdc7456608f00a07de6934d447c2725850289e474eff092cd66ffe27e196c696577fc347c5e69cb26b9d9098c07d9d9bb66d39ad744fd8bbe47a8c98ca45641b77d81c6cf8f3a647159579cf996073c367c09f3e3803837a59236bd72f4bcb025ed48a021bb47d092b541f3bd88"}}], 0x90)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1acfdcbeb90c597d91ed10aa9b786f9a655a8e1b7e97ad6c37ff8b8e9b83afd959dd9021d7c40d00c8bcf3f12c488c55eebbb23e5095ff38906d9f5f2bbe70435be3c8a37b24dd22656576c590b234112bcd229f3084c043d1eabcea21e12de2eea7b3150ac80b9dca657ff6d4d0064466dfead6d59ef0372360b63f8653"], 0x0, 0x0, 0x0})
r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400002)
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="8509000000180000004612883d0aaa3baa47b30ba5bd9a7c05481c7b2bee4d94f8d56448539482cdc9db42c9cc7cc7f2a0688fd214389571120200010000000000000000000000af000092e48a2400000000000000000000"], 0x58)

07:36:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xfffffff0, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1301.115970] binder: 19830:19831 unknown command 1074012933
[ 1301.139607] binder: 19830:19831 ioctl c0306201 20012000 returned -22
[ 1301.167334] binder: 19830:19831 unknown command -1092825318
[ 1301.184709] binder: 19830:19831 ioctl c0306201 20008fd0 returned -22
[ 1301.197945] binder: 19830:19832 unknown command 1074012933
[ 1301.205580] binder: 19830:19832 ioctl c0306201 20012000 returned -22
[ 1301.217719] binder: 19830:19831 unknown command -1092825318
[ 1301.224939] binder: 19830:19831 ioctl c0306201 20008fd0 returned -22
07:36:07 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
close(0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xf, 0xffffffffffffffff, 0x0)
close(r0)

07:36:07 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x40030000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:07 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00')
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x3, 0x0, 0x100})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x33d, 0x0, &(0x7f0000000040), 0x1d2, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c48"], 0x0, 0x0, 0x0})
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1, 0x0)

[ 1301.406085] binder: 19841:19851 unknown command 796157294
[ 1301.414182] binder: 19841:19851 ioctl c0306201 20012000 returned -22
[ 1301.435089] binder: 19841:19843 unknown command 1208771342
[ 1301.469480] binder: 19841:19843 ioctl c0306201 20008fd0 returned -22
[ 1301.490210] binder: BINDER_SET_CONTEXT_MGR already set
[ 1301.512778] binder: 19841:19856 ioctl 40046207 0 returned -16
[ 1301.519694] binder: 19841:19851 unknown command 796157294
[ 1301.525265] binder: 19841:19851 ioctl c0306201 20012000 returned -22
[ 1301.536196] binder: 19841:19843 unknown command 1208771342
[ 1301.542259] binder: 19841:19843 ioctl c0306201 20008fd0 returned -22
07:36:08 executing program 5:

07:36:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf0ffffffffffff, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:08 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:08 executing program 2:

07:36:08 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1302.006599] binder: BINDER_SET_CONTEXT_MGR already set
[ 1302.029698] binder: 19862:19869 ioctl 40046207 0 returned -16
07:36:08 executing program 2:

07:36:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x100000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1302.051886] binder: 19862:19867 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:08 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:08 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:08 executing program 5:
socket$key(0xf, 0x3, 0x2)
dup(0xffffffffffffffff)
open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), 0x0)
r1 = accept4(r0, 0x0, &(0x7f00000005c0)=0x1000000d6, 0x10000080800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4)

07:36:08 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000700030001000000000000"], 0xd)
sendfile(r0, r0, &(0x7f0000000080), 0x1000000000fd51)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
sigaltstack(&(0x7f0000001000/0x4000)=nil, 0x0)

07:36:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x400)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x8001, @rand_addr="d8b39e2dff4232f01763da224c99127a"}, 0x1c)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000140))

07:36:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x200000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:08 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:08 executing program 5:
mbind(&(0x7f0000364000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000080)=0x800, 0xcf, 0x0)

[ 1302.307944] binder: BINDER_SET_CONTEXT_MGR already set
[ 1302.338117] binder: 19896:19898 ioctl 40046207 0 returned -16
[ 1302.358147] binder: 19896:19897 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:08 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x400000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:09 executing program 5:

07:36:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00')
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=<r2=>0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x7ff, 0x8, 0x10000000000, 0x9, 0x0, 0xff, 0x1, 0x1, 0x4, 0x9, 0xffff, 0x7ff, 0x9, 0x8, 0xffffffffffffffff, 0x78f, 0xffffffffffffff6f, 0x5, 0xb76, 0x9, 0xfffffffffffffffc, 0x824a, 0x2, 0x800, 0x0, 0xfffffffffffffffd, 0xfff, 0xffffffff, 0x6, 0x0, 0xffffffffffffffe9, 0x232, 0x9, 0x0, 0x4, 0x101, 0x0, 0x100000001, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x80, 0xfffffffffffffe01, 0x1ff, 0xf, 0x8, 0x6, 0x10001}, r2, 0xf, r1, 0xb)
getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="88e8cd04d07edad40563044006000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x60, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x800000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:09 executing program 5:

[ 1302.611477] binder: 19921:19922 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1302.697089] binder: BINDER_SET_CONTEXT_MGR already set
[ 1302.723299] binder: 19921:19924 ioctl 40046207 0 returned -16
[ 1302.769463] binder: 19921:19922 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:09 executing program 2:

07:36:09 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:36:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x68, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xa00000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:09 executing program 5:

07:36:09 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x355, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x7fff, 0x68b1, 0xeb4c})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:09 executing program 5:

07:36:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xe00000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:09 executing program 2:

[ 1303.145628] binder: 19941:19953 unknown command 0
[ 1303.155685] binder: 19941:19953 ioctl c0306201 20012000 returned -22
[ 1303.202699] binder: BINDER_SET_CONTEXT_MGR already set
[ 1303.218170] binder: 19941:19953 ioctl 40046207 0 returned -16
07:36:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2)
r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4)
ftruncate(r1, 0x1000000)
sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef)
close(0xffffffffffffffff)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000080))
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

07:36:09 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1303.275291] binder: 19941:19961 unknown command 0
07:36:09 executing program 2:
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write(r1, &(0x7f0000000200)="bcd4c3bb92e6e8e04dc9a2c27d6b7cf6f4130ee79711ede20f3d37458462921639c7289184bfc8fbb8585acb5899b9beed98481645b314ecb34209ecbd6ca765b1d81cf97f86b0110a37e98b0bcf925624706ce5acdb8417d11d188d2af6aae699662656c4ef0cf7e6f2b1ddaf6b2797d2ae3a28db0145b8d0d16da92fb2b52f127af4148dbbfcd48410972de74f0a52677fd4b66c9d23bb60", 0x99)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10009, 0x0)

[ 1303.320543] binder: 19941:19961 ioctl c0306201 20012000 returned -22
[ 1303.321190] binder: 19941:19953 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:09 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf00000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:10 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x74, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x1000000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xa0, 0x0, &(0x7f0000000080)=[@acquire], 0x2dc, 0x0, 0x0})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0)
getsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="eb68bd88e1ea012bf1bcce739831d18d87eab34167e3d5650c76d6c8833154fa12b16b8dd4e8c6d4bc9176460e903f21198cbf1f6b7475d686058c3f5535e48be44d8a9a5b27cfff22624472d637873c6c4ec33950c28e77e91b04ac56bb7492302b040d4313726cb9e6cf9973fd03f93ae17d5b6e011bffd0e9b58cb7aabfe6360d428258d83a87194131a62bf2f7aafb9e89bf78a1e7c34ea29dabc67cc3124ea2929d69cb2aea4bbd930a2bf2c32e28cae44627417191fd28ac501ac5215a2c5f9a05e9f29b1c4f88421eecc0425944fbf54ea38064bb4d449cec3235625078743c20", 0xe4, 0xfffffffffffffffc)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in=@broadcast}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8)
fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000580))
getgroups(0x7, &(0x7f0000000380)=[0x0, 0xee01, 0xee01, 0xee01, 0xee00, 0x0, r4])
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000005c0)={'hwsim0\x00', 0x200})

[ 1303.573991] binder: 19992:19994 unknown command 0
[ 1303.593670] binder: 19992:19994 ioctl c0306201 20000600 returned -22
07:36:10 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:10 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x3f00000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1303.625547] binder: BINDER_SET_CONTEXT_MGR already set
[ 1303.644988] binder: 19992:19997 ioctl 40046207 0 returned -16
[ 1303.695646] binder: 19992:19997 unknown command 0
07:36:10 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1303.722448] binder: 19992:19997 ioctl c0306201 20000600 returned -22
[ 1303.775666] binder: 19992:19997 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:10 executing program 5:
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000440)={'erspan0\x00', 0xffffffff80000001})
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
write$binfmt_script(r0, &(0x7f0000002ec0)={'3! ', './file0'}, 0x3138)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x10a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x80000000003, 0x10, 0xffffffffffffffff, 0x0)

07:36:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x6000000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:10 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00')
close(r0)

07:36:10 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x7d, 0x0, [0x9, 0x7, 0x5]})
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:10 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x300, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:10 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x9effffff00000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1304.274043] binder: BINDER_SET_CONTEXT_MGR already set
[ 1304.299711] binder: 20034:20037 ioctl 40046207 0 returned -16
07:36:10 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0))
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
r2 = accept4(r1, 0x0, &(0x7f00000005c0)=0x1000000d6, 0x10000080800)
semget(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)
recvmmsg(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

07:36:10 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1304.330172] binder: 20034:20035 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:10 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x500, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xc000000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:11 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$vcsa(0x0, 0x1, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/214, 0xd6)
ioctl$int_in(r1, 0x800000c0045008, &(0x7f0000000000)=0x3ff)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))

07:36:11 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x60, 0x48, &(0x7f00000000c0)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x1, 0x6}, @fda={0x66646185, 0x8, 0x0, 0xe}], &(0x7f0000000200)=[0x38, 0x40, 0x38, 0x30, 0x20, 0x18, 0x18, 0x0, 0x0]}, 0x80000001}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:11 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1304.592546] binder: 20069:20072 got reply transaction with no transaction stack
[ 1304.614523] binder: 20069:20072 transaction failed 29201/-71, size 96-72 line 2801
07:36:11 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00')
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x3, 0x0, 0x100})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x33d, 0x0, &(0x7f0000000040), 0x1d2, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c48"], 0x0, 0x0, 0x0})
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1, 0x0)

07:36:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xc00e000000000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1304.638620] binder: 20069:20070 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:11 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1304.690116] binder: BINDER_SET_CONTEXT_MGR already set
[ 1304.719916] binder: 20069:20072 ioctl 40046207 0 returned -16
07:36:11 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x600, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1304.751665] binder: BINDER_SET_CONTEXT_MGR already set
[ 1304.756985] binder: 20079:20080 ioctl 40046207 0 returned -16
[ 1304.767967] binder: 20069:20085 got reply transaction with no transaction stack
07:36:11 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1304.811943] binder: 20069:20085 transaction failed 29201/-71, size 96-72 line 2801
07:36:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xf0ffffff00000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1304.859992] binder: undelivered TRANSACTION_ERROR: 29201
[ 1304.865490] binder: undelivered TRANSACTION_ERROR: 29201
[ 1304.910269] binder: 20079:20080 unknown command 796157294
[ 1304.939229] binder: 20079:20080 ioctl c0306201 20012000 returned -22
07:36:11 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x80000000, 0x8])
r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:11 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x700, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1304.959364] binder: 20079:20097 unknown command 1208771342
[ 1304.965043] binder: 20079:20097 ioctl c0306201 20008fd0 returned -22
07:36:11 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1305.110865] binder: BINDER_SET_CONTEXT_MGR already set
[ 1305.135894] binder: 20105:20111 ioctl 40046207 0 returned -16
[ 1305.173545] binder: 20105:20110 BC_REQUEST_DEATH_NOTIFICATION death notification already set
07:36:12 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$vcsa(0x0, 0x1, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/214, 0xd6)
ioctl$int_in(r1, 0x800000c0045008, &(0x7f0000000000)=0x3ff)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))

07:36:12 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0xa00, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:12 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:12 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x60, 0x48, &(0x7f00000000c0)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x1, 0x1, 0x6}, @fda={0x66646185, 0x8, 0x0, 0xe}], &(0x7f0000000200)=[0x38, 0x40, 0x38, 0x30, 0x20, 0x18, 0x18, 0x0, 0x0]}, 0x80000001}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xffffff7f00000000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xffffffffffff8001, 0x0, 0x3, 0x7, 0x9, 0xfffffffffffff6e9})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xffffffff00000000, 0x0, {0x10}}, 0x14}}, 0x0)

[ 1305.544326] binder: BINDER_SET_CONTEXT_MGR already set
07:36:12 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1305.566635] binder: 20125:20136 ioctl 40046207 0 returned -16
[ 1305.566741] binder: BINDER_SET_CONTEXT_MGR already set
[ 1305.599376] binder: 20127:20130 ioctl 40046207 0 returned -16
07:36:12 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x1200, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1305.610437] binder: 20125:20141 BC_REQUEST_DEATH_NOTIFICATION death notification already set
07:36:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0xfffffffffffff000, 0x0, {0x10}}, 0x14}}, 0x0)

07:36:12 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0)
mq_getsetattr(r1, &(0x7f0000000040)={0x1, 0x5, 0x20, 0x5f7d, 0x3c801271, 0xfff, 0x3f, 0x7ff}, &(0x7f00000000c0))
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:12 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1305.733080] binder: 20127:20130 got reply transaction with no transaction stack
[ 1305.785548] binder: 20127:20130 transaction failed 29201/-71, size 96-72 line 2801
[ 1305.921810] binder: BINDER_SET_CONTEXT_MGR already set
[ 1305.927467] binder: 20164:20167 ioctl 40046207 0 returned -16
[ 1305.946118] binder: undelivered TRANSACTION_ERROR: 29201
[ 1305.946881] binder: 20164:20165 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:12 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$vcsa(0x0, 0x1, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/214, 0xd6)
ioctl$int_in(r1, 0x800000c0045008, &(0x7f0000000000)=0x3ff)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080))

07:36:12 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x2000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x2, {0x10}}, 0x14}}, 0x0)

07:36:12 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:12 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev}, &(0x7f00000000c0)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

07:36:12 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="056304400000e1ff"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f6620c40eed2bea2c3b7f925b179f63b61d9521533c2b1247f719439dfd9dd076f75efafc4fdfba89c08d42b59c0000000000100000049ef7f37f65df1f70f1dd71d05088ebb2276f9cbe2283537336610bc5602cefdde53e5418017c33d46177ef01363752d6d391926b7f165d78d589f079c2ac56c6612e151dee4df7f5670ebc448e431df2a35c35bd1d7ede9b65f479d5aba3741067c092c5b2d20ec2ca670832a904b51f8030b983632"], 0x353, 0x0, 0x0})

[ 1306.395953] binder: 20175:20176 Acquire 1 refcount change on invalid ref -2031616 ret -22
[ 1306.427563] binder: 20175:20176 unknown command 1074553590
07:36:13 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x3f00, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1306.476259] binder: 20175:20176 ioctl c0306201 20008fd0 returned -22
07:36:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x4, {0x10}}, 0x14}}, 0x0)

[ 1306.530260] binder: BINDER_SET_CONTEXT_MGR already set
07:36:13 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1306.589409] binder: 20175:20191 ioctl 40046207 0 returned -16
07:36:13 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1306.641754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1306.648730] binder: 20175:20176 unknown command 1074553590
[ 1306.750133] binder: 20175:20176 ioctl c0306201 20008fd0 returned -22
07:36:13 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1ff, 0x200)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={<r3=>0x0, 0x2}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x100000001, 0xfffffffeffffffff}, 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x8, {0x10}}, 0x14}}, 0x0)

[ 1306.979206] binder: BINDER_SET_CONTEXT_MGR already set
[ 1307.022454] binder: 20209:20216 ioctl 40046207 0 returned -16
[ 1307.077124] binder: 20209:20217 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1307.090028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
07:36:13 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000740)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180))
mount(&(0x7f0000d04000), &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0))
mount(&(0x7f0000000240), &(0x7f0000000080)='.', &(0x7f0000000040)='\x04[\x89\x8fs', 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200))
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580))
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580))
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x10400, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="9ce664641049332ad6134b8fbae656fa85b4e2c7caacc5d0203fb849e20bffb15fed34bec08294dc798dc4c13c097a4029427911a67e37e2219d1120973d0d529831ec8f1c5ed27cb97e3f54d066d8e34275ad7479b10f9ae520b674dabf688ce234beff5989e57fd43ed96aa005aa1295e87dfe1a89b22d8f33253ba4282f1e48a33ea74eed9e1303dad44de4fd8e294b60c1403676899411fc107390491cf1ee91584c0d85d14a7b0971f8afdc1a6679962d838a64d502", 0xb8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000480)={{{@in, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02')

07:36:13 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xa, {0x10}}, 0x14}}, 0x0)

07:36:13 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4c00, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:13 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4ad035bdee7d01f93ce3184b6e3d1038f4"], 0x0, 0x0, 0x0})

07:36:13 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev}, &(0x7f00000000c0)=0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[ 1307.441809] binder: 20223:20224 unknown command -1120546742
[ 1307.474449] binder: 20223:20224 ioctl c0306201 20008fd0 returned -22
07:36:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xe, {0x10}}, 0x14}}, 0x0)

07:36:14 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1307.492028] binder: BINDER_SET_CONTEXT_MGR already set
[ 1307.497467] binder: 20223:20240 ioctl 40046207 0 returned -16
07:36:14 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1307.536819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1307.571269] binder: 20223:20224 unknown command -1120546742
[ 1307.639646] binder: 20223:20224 ioctl c0306201 20008fd0 returned -22
07:36:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf, {0x10}}, 0x14}}, 0x0)

07:36:14 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6800, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:14 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setitimer(0x2, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x7fd)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:14 executing program 2:
r0 = socket(0x2, 0x1, 0xfffffffffffffffe)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0xa0, 0xa0, 0x118, [@pkttype={'pkttype\x00', 0x8}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x220)

07:36:14 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:14 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6c00, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x10, {0x10}}, 0x14}}, 0x0)

[ 1307.939897] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
07:36:14 executing program 2:
mount(&(0x7f0000000040)=ANY=[@ANYBLOB="756269372f646f300098882f59d37896b824d1194fb00d6f945228433a02a0bf7dbcdf"], &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)

07:36:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
clone(0x20004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x40000000, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
r0 = gettid()
tkill(r0, 0x1b)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)

07:36:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x60, {0x10}}, 0x14}}, 0x0)

07:36:14 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:36:14 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7400, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1308.221786] UBIFS error (pid: 20294): cannot open "ubi7/do0", error -22
07:36:14 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "182a13e6c1c562376616854ed8aa05be76502b96"}, 0x15, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:14 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)='ramfs\x00', 0x1, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x400000)
getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)=""/185, &(0x7f0000000180)=0xb9)
sendmmsg(r0, &(0x7f0000004280)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="0fd8e8776090bbbfdd0c6aebc9afadb86cb024ecbab1cbc52cfea4c4fd71a4d0f3b55a2ffe0a8e4eb753a641b50268bd0cd5db7eb1f1a522deb9c7836c5cbaaa46d7afea7cf7a0528300af99b3d1551e5b6adc374067d4cb9e93d01ce2317e2cdc3af1786dbd77758c8566a3e987a625fdb620aa59c3a19daadd2f3b65397f4689b30213de6a08a4bb25c76b751f375000029a90a281045d04325b6987f572e0ad3f4d2f60c98edb74452ae432a53270", 0xb0}, {&(0x7f0000000300)="4964b12e9e4a95744e80797d9d6a5d0d0dffbe8c3e1feccbdc5f3f", 0x1b}], 0x2}, 0x79ae}, {{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)="63334479d38f99d058ee20fda3ff796211cd394ca15c49bb158eb2d55deb7ae26227b9ace1b7d4e323f784fddbe5ec33071b7612ba63c04cb3935b73898cefdd359dbccb768cebd982bef338ad6c421ef13a13088fe09620525c819f9f2d73ed9f492e", 0x63}, {&(0x7f0000000500)="ebb31289ba8c260056ef3e4c5e7936c6755c0d2d8365b8408a92ab1a263d5881c88f1b3cbb64abb178cbe30ec32287216ee4a1031058528ce946e6feecd0bbf3816de3b3271e598d8ed761c36897cd078689abab96c0e411feaa0333ca204ef3c3b3b5947a442b2949bf280fa5a941eedb5767bd0a08", 0x76}, {&(0x7f0000000600)="14e4d4f61f5dd47d9ea85853491276358a6ec820747f41d3e3680c41ba237527d1a70d5ed006b22cb98aca38db6c848a9ab58c767e7c744f17f111cad1dad40103c6a0e37c21b0f6bb4149e436ac65d7b4377ef69204459fcee838f228ec0da83771e49295131d65005372b516b0a96a6d2ae9cf35f45f3645c23c6af5857e4b0ce3483c418b5e3d2a74af65bde61de93b5e8a7249a0f436d2eedc3ac9650f78b680fa0c3b85", 0xa6}, {&(0x7f0000000380)="0cbbe5f016dd2c454377e0533bfd45c500c00dae1906e176d5725c7a752e6323e709c11c2d2d0b9b378b21ca8a8276eeca9d5e6df509770ace0115ec987da0", 0x3f}], 0x4, &(0x7f0000000700)=[{0xc8, 0x29, 0x100, "1f0fa6e534c0577e1ca1b77ca085312ea791c5df0de207be93d000d88572a1fd8d10e2d7289edcfd158914f4776ddc9946ac49029f5d41bcbd05ca52ac6a6302621bb3aefcabe61bbab4ea634467ebc4a75881bd2382377bf51e66b4f43f2d1195ff7734bee74f93b973d672c3bd167fcf22fe0e159027c1551d2d66e817cc2a13835e1fdf2f2c31b60ccda16e63a2c58e2f8e33e3390ef4ffe15cda1c94de9ed41a52b82685c3a861004b631736540074d859ca"}, {0x78, 0x11f, 0x6, "2f6e7c06ba62e2004356e027d7c884f4f8ba1b5c24d2b1e97aeb5b0c4fb57f68a9614aa11aabe4653e964175358977852a846e4cf8b6572d7a4cb20ddaae66de678331b554f459381558eb7cae2be2a1986c09f7e785c53fc20d539d8c32c9ef663594a7d9b6fec4"}, {0x80, 0x119, 0xffffffff, "8cecebd75c0f3be41fd057f598604253bb6809fd1dccb956c615d1472841d60f6479dcfa09eda8d99ffebf3ec72bf45c210a023bab139d018f34a7d08808f9c5c943e19f93373c5753b28a0b50cfb39ce827c53ac5b91e7f56cd0d2857bb9bb0bb51c15917ede01715a6"}, {0xd0, 0x11f, 0x3, "98b68f95905b9c9d5d3128801537c959aa3a9a9f43c092bc9ac6235788b464648c20e3034640d7887edf18e673e54cb13638b6176c9a04eee97e396768071bee2b064a9836c464e526907f34dc783557aedf8b78482466b14f8f94e60278b16368ffec644de6694cce7d605efa976c3a8c51553142afebef4fb173ea6ebdf722b9383cb6c0733c8a0c9462a04310411f8fe0b10b6cc590f46d3c01e196bbeced49a7b885592b59bf8a8a039cfa7ae2fd8781d8666cfb050880bff2b11c"}, {0x38, 0x1, 0xc8, "cfe9872c21e288ae4c102a12710ccf6e65060f4fde37590d6fd182049cb42a6892"}, {0xb0, 0x0, 0x2800000000000, "0a7b0ad33ed75664a6b406c102b1876f9663432234300a015cb79b3cebaa4c8e0cc51a83ecf1ea9b5788fb86702909bc9e52d623e35c1c4085ef9d7b31b6346761662007b4b09624b41453b054fbc6e5a59f7d3efcde7d1ac44324b0cccada65ebefeaeaa8cef17f7f3f906cabaf5464d2129740c7fee0d766d46fbf290645dac91f4f99bb4b831ac1dc98af906c782df9c6a3e3aa6b0d98bd1fa7"}, {0x68, 0x108, 0x7fffffff, "357d4b287580b6d156e794e44abb79db88f998eee86639fbb59333bf09c042bb3f579054b3f85572fe87914f9c9d7589b7da37e1353f8d8eb9dc9d2ecd3456639161e320a7dfdce18f2505070b1567cf92fc3ab5946848"}, {0xf8, 0x0, 0x3, "47d9abb0973e5f7f82966c52a44ba94e3cd041a0bdf369dc50852fd52a6f17915114039862afd9ed398136dd4d227db1bb2d7df61b33c2c77dbb46aaa2a5d680444306c0b4569ab00d02758abedca2656be7e60e2c41906b106c05469d3252dfd480c1c101bc675c5f6ac1878c481bd14f07b749993ba6464f972464ce3207ea56698cca39fbe00d0a8c1aa1a8cd79d332f7ff0e8ecee74783e4c7feb58c62e3d376a0d90dd27859ad7b4fd12502766a8b12f6817f245f42499e0bfa96994a0dc28a7249525166266002799d0bd83da31a39effd8e4049aba341367d3fec4fe87325972e03"}, {0x38, 0x10f, 0x7fffffff, "4036bf8dedfcea96fc785168b029b827a3dd1001d84a7eb552d714ae8242548dae1ebf38"}, {0x110, 0x10f, 0x3, "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"}], 0x620}, 0x100000000}, {{&(0x7f0000000d40)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000000dc0)="04b3991bb281bb893b4ff9404cdef69828acbefabd1a7921cea855b5c55c95b1b86922cb074af0c90bb259e0390c439d0a7dfbb88063b471e4c99a0cd8d9a13420497dfe872bf532ea9daae693d1e26c49988ca15e32d366319b0c80e11bc016e9f6b1174bc2e9f6def539944e4eda1b327021788e903f60bf59bb80f136fcbe7f1ff883d69e206fa255ebc29471234bcb807ed44248ee9471f398dee88962391bcbca96af9a57b9bdeaa556946630a6a09cbd66c3cd2bd3200b5211196bb138a482df2e370fbd102dd17d0c043a51b4807c77ce9b831664d49269f2f40339c90ea91561b338ae8ef5102448cfaf35fff5f47d1c5fb921e70e653eeb7676cc43e6bf9d0cfa0762c072c5d4d52bb07e4b139aaf126d1b32e44162f2d7504db74016ddfe950f6c9cbb765c577475fd42844429c446d6a34a4890cad252f0f353f9010774f5122021276871104accdcd84cc226952f27142c8f97c1a135ecd99dfcddbaaac1d3a655ca24a801ea93fc67d7946954adcb458cfa92cac56987662981eb7bd9f3daeb7170981d57a7e8a52169ee5b2a71bddb0bc6fe5525f42744741136c70830636673caec9b390390fdfecf2c56742714bf923fc611a8882042925a2ae5d86ed1a3cbc38ee5952cae6d294aa3de3eacff9ff9c962b5bea8e0b8e06d6423b8d566c6683fc4b79be54aa10363ebd7e0dc8575f58aa47ebc43f59188d307cf566774bc3a532c4c0650ef33cb7efd127f413ef83fb2bd5a6acbde4125002c48ec2566477d7cfbe2f0cfb017e2c34a9f5393286372af517ee25b0533bcb9c3733994f4991a81838cc880d9b98a38dd3238c353fd21c2bb07dc32db1b05dd005b4148b1e29d67de9101ed13e272c5a89bb568db4cc82373795ec74629ae1f41b6355cf7bc0f97adecaafe75ca0333ffe6345a568f5c553a332a2f818ad941b36b59b29cb20ef663a83cb9c50ab1bda9c268676336cda565f91c1b1e5114e8c5dd6ec0e9feb67034ffa6f7d7fa5dc4ca4b5d67ff10048b1c49668663ab2ba96a9b62144b1f0e9b1e4d77521a0303aceee3f8fb1d555ada325c95846eadda1e2fb66e9077dd2eb3744ad450aa2538286fc4351a34a0905b5e7e5e20bba16b7001dc40b650fb096c833a666f0530f5a67da31688a97cac520e65d4e5d2eae0f06d5f0006cbd7f168bf76c6b10a3b33b2ae418f984e168128e6c1773ef7a6fd71f87b3e32cab5be93888fdd08e359671978af6dae63e4c6dfcad169523bca2288a2a731c4d578083e7fcaedd3c489adf24905fd0c0042059f627f3e9af2c8c3043a74db467a77b7c5c64a7df70c59d69b68489b81c6c842a6b704de289262068f7754843b0eb800f14e67e3b0178528a8511a8a3a0575f9493bfa692d5d017c4940a43e385370819da873f14e2b84151a04940d1ff057e60df144419f978e153973f7145b61911f47756c5f26826c7c0675a4dd834f091cf5c51dd3f5933c80620e473306bd00631e40f4ab0d8de5eb0f4f3f8940564ac56b2241e34727e69d5ac935787c4e11bc7009aa4a1e86d64eccc74d3c857bc16196e67cb9bb43920e3b8105a804548869ae75ed116771c224fa8377bc7c2b0a677cedf35bbb490959936164d5d3f6e160c2c1baa11a691d8e6d28f53b5a2847275abc6125f30781427166829af1a51ac3882c2aff18547d01a13773372f449c3a72cda37d59131137d7f7aa914d6364302037b9f2f10a0427af2a2cbd6088d6db746aac2e29d9c5a46a5f867682f6140da635e6f9def760357c2f74fe94c8afc5bbd0d2a373d805c6c8865e46aad2fe4d49b62dfe07a9494bbffcdb5e77912e36854092877e77965441e3e464c781067951f56b14aaf0f1014aad6baf3217c28b8068a67a0eb8b98f55abb153d45f65e6e3b99994fd4a2b928c3dc23196d2a9ebeecd9f2fb9cb60f57d8235deb363aa75d5e1bbcc64e17bba7dffb61fdda4e5e3c82cd30dcd08dd3325d7c42e0d783476ebb7546360eb3eafd73777ec7e50a2346f27959f74044a0dfbcc28fc063119b0e6d08313302e3b33f1b2f51be9072742aa49a469f7be52eef91c76a502e4022fc302aaab61b27a2aaf876459f5322a43faf2a10b2dbc2d8dca575bf092d890155b3f5880f3b387b7ed705d9376c4fcb46f267481eba7bb656ff00bbb790c7f758c064ec9afcdafa12e1022df0d7214a4044e94559069b0d8c21481176d30921f84ec23429e04a03fa65b6e1f6a3d7a4fb54b5e9871ac6d3a42eeeca402a2985f34f35af4a693ced393e9b8d0442b4572d728fa392c8b60650683521d9227f1f0615a2dc5b12548666b2160b82ebc7fa03af2b4b160a061ddc8c533bddcdd080323bcd8e19bb3f3ec8265600484573ea0992d9a9b8a478999790cb0f43b900c133e1a71b4254a5216d44909ae78c892b097628a3e56c33c76b4f65bfa707171d5b8975b0bdbbae34d7271d9f3d00c4c7e1db75d66f46a0c0d8c145c384fd692ec05b594bb754a4a9ab5c092b519daffead2bc644b8775f5f81d700b4e38908884e09a258cd568a95d9de3273a001547f1423084a7dcc1048698d8a16f4372a335dcbe40866095916003efd1e19f430c068a311b4d1c63a80a9f2dd2f1167f4b21859b443c90d1e1e969b6ed816cb268542f0697cdcdac599659f13062a242798f28042602e375d71f62e2e2caafc15d7631f4e1ab3c487a894a4f8627393436d195a5065fa151a2ac8b347465d49f69886bca37e79a5442499733b83564e93d225932c198e6b6da16d63c3d46c6e57cfbe0dd492a808640cf980a28bc11233d6891532fee1fd17eba766b15399f555539028ca52814b8ed092437a0e66c05833736721abe52331ae4450300db88f20b02149a5508bfc0574667ddbc98e6328be6bb55d0957ac3a9e7ab138bf4565fd332cd84041d4b2857a27913882a1f03450bf4ecdbe55a57ebb30dfc3197a26db69d287dca6d428e235cb75ee064b930596745e2b10f00a31b967afcc048b61233ba47f91c30e44c3751d97572668eec27f45a7ed0469a7d4d88a77cd13ed5b7e77dddbd5ab76b934e9a33e3f94ffa41e1e262543680afdd8721e5b96ff064b484eb1df43e780b0e8be49b78d977076cfe9d7cc5bfde7a6828d5324f04fd61aa5c144a546cee24471ce09a2959d06db8d6dd550da2fb50c8ecabf1f9c2567991c3775a46048f8f81af477fa928f216a75879f6da6d40dc08a56f6e853b243eaaa51c65d00da506dbcd94f0f5f83c6b9505491c864f7a5312d62c90718b356179e3234945942758b6395dde070dfb66c8358bca298fdfd72f75c914520659366b8262c25253d050676577c76a34816d345abb53bc3840b88d29d91c4914f93eb81b2c24aa2e3984f69c3906854bf9d93e9613556d86f2998da9d43401af727bd6de6925df26ad089e03e56149eb14b078ecc43c1e43ba4dfdf4518905c4999306486b137ea253e458e7274fb8aa856fafd609866231cf4aecf8f59b88f946296fc02ea413938c8ad4fe81c763b2a73fda39851971564f63fb667ec37cf30891ca2e07d237b9df43cb5237fa7720fc8ab062581d61a6a5e1322d3b7bf40efc918030c4432dc207951e513ca327bba00e7cccfe4f2669f45be0f2a3d02e3bbf21e790e52665b1cf0093e26f36b82e9d589ee175767834b4f9d670b0c9f440ad50bb0237176f52a498c4389a01b439725eb9a3b8d4dc11a5046a4baa7bc845bd7378376e56a8c5f80010d391b7d9e2fb2cca9fd681f440a8fc2dde484c927aa259ad706498598ad21af13022e7bc2bcf75c0e1d25600c48005f35211e293e08d8166161441068c85497159abaf69697dc9ed6d8d4ec58da2f6ffee622310006097a26a1d02a392151c813ed16a0eee883251641bac755a2d0ad85ca5fd99a1875e275817427328c2e3b1969a62bdccee4a73ad915c09b868bccbec38f0696785b10e9c804c5cd9b1b46c16c8b3556b1669901dac8a020b3d6fbdf4848ca7241d4a6b911753bb148d3b77c18ccd29ffa877f7c5e6f2c9600198ed3fd368f90ea72e1b163cbb7a08c335a81df059f1e65754a934f81185b02eac3d33a6203cd9771d03d60888e2811781d1ff3c9f7404b05378c253f4a522190bd63d6402430e44740fede81c151b985f368bbc4f5a8ee06a8e383a8d283961018fba4475ee15613bf723a325a9d115e86a6b1a7b17144dc2dc2269d17a464413724a76f5c463a836e41992387dfe12999338f5e86e09d99e2eb6c08a89952ca2c55672d31a806a5e10ba89fad22363cc0ebebeeee9ad52004beb9435852e76bfd7021f9f265660f492dec00ffe5c9cc1a4f23cf09befd735871823e27d2c239eac61b250ad9c95852abec2c01d8f96116d3fbce73f4e64f883f0aa88a90a7889a2f68508c0329173a5fe971eaba9a4cdea25394b89f599589174349d6120e9f562e499e468ee78d7856d7825d48c464cfd7ad7cddbdce7f3e902252ff2d6ddf87375cf6bdb332698e35de8b9a57523aded46731c30e067e35585636050c9156fd0e654b08f07df9c6cc550aadfccd1253929bcf8ae61741bdfaff87f364fd67f3314e7e3c1d587c6f94a781196734655e703024fd8bf8f72d5bb9b877826fb4077db8588621163870f934e1a155baf1dd2e83e2efee9f62b3fe3118abf5328561e1fa051ce772fb8165f2d9bc20b77e71883b28909a4204d621f2d869da1539cb006154cf0fc8779a0a41bc6759348a5dc7eccc03f36cee6ea456b371b4a996e6e123d5589c6ad8b519b331eb16bed2a1f3c5842d5ae7c0420375ba1d614666fba2216a3b20ea6a8f412c1917713d5560c2b97ef4f7e5709f532f77a3111fb034181077ef1f92653840055e0447f1154b9ff42f96a83ab1d5eca50b21aa70d11ecc1af6d2ad80f82fa9140de6914ffbd8dc0404697e65c88d065d7d65b0e780f59df49f8d1267e77f1e738da014dd0a77e70b45be7722800894d3f1e34b07e1d924b06455e1d339e5fbdd7b0a2118532cb332adf17437bf1bf4a217653765c3ed8165e2c446025ee4fe308bb5bd43b92c2399bb8651c3a0bdb7f31a8e1061fea318f7976ecb1db0567f458aa84b03ae6d5a6ef8456ca9bb530602fa45ba2360efb4e51e741aa94dfa073403e5a7e16a72c2d012603dbc6f877e6d0b84c272bc52d3fdc7e9935a30ee3e14659fd73d50a62f613b1938a442ec017f43fbd9bb281b8bf7c458be40482c7b7f2150ac8236843fd6946cd55f1aa432f89feebbd09b34a3f07032cfcf7511cf6e8fc5cbe74f836260c3862c430a1f62e2fa2fe530a61a226a5a93510bee1f6498aac62a15a758930ad25d5b91a687917172ab1de46431d4edb8f8f0d0b0c5e7206e494575d6c6306673726c5008824c21e287ab881561820e4bae6f6dfe8b710f40142249c9668940f0d8eb87c049e47633e0a32546fa7aa1c5d8dede334565390c81c285c06ed33df51357c23b1c0027bd1d080f0b2c15a2e5195b951aa487e7a44000abf08f6397d4fd038d6d4c2b2fe009182d535c6cd7ecf9e3294dd58a48192c4c40e4448dfc9e623b983062e1067e4fb500f8511784204ae1a03e4d2dbdd6ad206418fff847fbc7b5acaeec733ef0e5fa336927b8052f20c7ae14245764d3a6ad9e729f0a381ddb2a80018887797bf10c22e2e1b4ccabf47096c25b3b8c0a6b6d4a9168d3a16f4278c19b313eec3bcbe5da59bf790af9f1efc0c9f69cff85caac3330042604746133b2b69d7ae24208ca269492d137392103648fa1964a1883c7a750e1659677b", 0x1000}, {&(0x7f0000001dc0)="af4d8fe6500fbb34f676b28de0330c306eebd722648cdad9d3df5c0504cfb6ed6c819572c5789a45ee51f4793d6e691b836e98b31ee356b2bce6ec3a459411ab11f46af5cdbb5d49981f5466c2b0f52625b8cb6d5ad5cd15986f6285e3ebd93e6f5c894d6399e3ae40d3c156b697febfeafb87bbec943637e52b00fc98ce4a", 0x7f}, {&(0x7f0000001e40)="027f380c08143cde516bc16610396b620871498d764a63bf7ca756ced3725829162f9a62969e1468cd221a1356b7e4facfd09532e6cd90252efe5d498b372c3ca8f77e42", 0x44}, {&(0x7f0000001ec0)="d6097fa1d92c0ee16b0603ce84e1c6e89961d67cf510a750cef2cee319b4777e3f4a6373420a8c475fbfaa80df009a9f6f394bd65640d83f294807a0db46db1835bb029c8b5f2476f9d83b49f26a31bd2623d863994e75aa850302d443d21ef722", 0x61}, {&(0x7f0000001f40)="11dac34bde887a071cd506a9f4b92b9f036ff13f468dc02ed664accbddcaa6213c73fa6322e96b38f257f3b12c2e61f47b2cf9c46d1b0a778c2a3dbc428bbf13d1ce0d95c3ed51698bf6ea9c74b2138c32bbaf7fed76588c6c84e8f83f5a52925220f418b3bf478043cc110b765ca03cf93de4fc1d600902cc63ac11303e4c458962b1cafdaaa9f45e70dae7f432b345d4965ce6f5", 0x95}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="6b3a3633ece1aa0e264fbb3b2a547f012fd12987d51156eb7fd9d0a9f7bd49c28add4073bdd9fc78ac8a73f8554a4a78a7762e90d52bcef645", 0x39}], 0x8, &(0x7f00000040c0)=[{0x20, 0x11f, 0x4, "b92b3c7a35bd41c9677cae68"}, {0x50, 0x10e, 0x149a, "dfa4e2d30a2ffdb45ad41ec07b943a3a5e77ea38963c2857643a098d74f9e3fd441a884d7ffb3546b95ee20e377ded54e46d262cf096584b191439be2337"}, {0x78, 0x19f, 0x7fff, "3f9bd05ca3da458212c1579bf6e15e758b19014e287a0ed2a87cc5474443bd201889b8d499ad4280c6c95504d8b9612e5c82e3242e09d4836ef76b235cbe8562fc51ed12f2623811c7f68c779a03eee2411e5ae845f31ab93572d44530488503bfe792808cc4"}, {0xa0, 0x29, 0x1, "28519919e2ee074d5ee5e35771e06cf196763307c8d6562e59eb41ef61a8a9055ef96e2254113e19072ef9d163dfc00ed8a5b49164d4c3934355c033785bf76c55932cde449aad6880ba46dad4149e04ee0547f50c59c8ca24793118195182e1a5f2d5f506c0fcbabee0257840c60deeee7e0b6bc12bfac5fa481833217237f28707c75732ec0d57e8c005d4f4"}, {0x28, 0x3a, 0x5, "eb5f82c5e6c93883bbb7b6b9c5033861fb972838e4a0ad90"}], 0x1b0}, 0x9}], 0x3, 0x8000)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10)

[ 1308.226213] UBIFS error (pid: 20294): cannot open "ubi7/do0", error -22
07:36:14 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xc0, {0x10}}, 0x14}}, 0x0)

07:36:15 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7a00, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1308.445072] binder: BINDER_SET_CONTEXT_MGR already set
[ 1308.478791] binder: 20304:20317 BC_REQUEST_DEATH_NOTIFICATION death notification already set
07:36:15 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
getdents(r0, &(0x7f0000000280)=""/135, 0x74f)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x803, 0x3)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r4, 0x0, 0x4000005)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='hybla\x00', 0x6)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
pipe(&(0x7f00000004c0))
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
prctl$PR_GET_SECCOMP(0x15)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
dup3(r3, r2, 0x0)
recvmsg(r2, &(0x7f0000000240)={0x0, 0xe805, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

07:36:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1308.550749] binder: 20304:20305 ioctl 40046207 0 returned -16
07:36:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf0, {0x10}}, 0x14}}, 0x0)

07:36:15 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140))
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='Nc\f@'], 0x0, 0x0, 0x0})
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x200)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200)=0xfffffffffffffe01, 0x4)
setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/23, 0x17}, &(0x7f00000000c0), 0x2c}, 0x20)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000400)={'nat\x00', 0x0, 0x4, 0x35, [], 0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=""/53}, &(0x7f0000000380)=0x78)

07:36:15 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xa00, {0x10}}, 0x14}}, 0x0)

07:36:15 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x7fffffff, 0x30395056, 0x3, @stepwise={0x7, 0x442, 0x3f, 0xc2a8, 0x1, 0x3}})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f00000e0000/0x2000)=nil, 0x2000, 0x9, 0x100013, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
unshare(0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1})

07:36:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xe00, {0x10}}, 0x14}}, 0x0)

[ 1309.189297] binder: 20341:20355 unknown command 1074553678
[ 1309.198128] binder: 20341:20355 ioctl c0306201 20008fd0 returned -22
[ 1309.227306] binder: BINDER_SET_CONTEXT_MGR already set
07:36:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1309.259882] binder: 20341:20358 unknown command 1074553678
[ 1309.284581] binder: 20341:20350 ioctl 40046207 0 returned -16
07:36:15 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x2000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1309.310049] binder: 20341:20358 ioctl c0306201 20008fd0 returned -22
07:36:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xec0, {0x10}}, 0x14}}, 0x0)

07:36:16 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0)
getdents(r0, &(0x7f0000000280)=""/135, 0x74f)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x803, 0x3)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r4, 0x0, 0x4000005)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='hybla\x00', 0x6)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
pipe(&(0x7f00000004c0))
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
prctl$PR_GET_SECCOMP(0x15)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
dup3(r3, r2, 0x0)
recvmsg(r2, &(0x7f0000000240)={0x0, 0xe805, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

07:36:16 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x3000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:16 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00')
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000140))
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fff, 0x202000)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x0, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c4066c0b48864452e426272d1e45ccfe7eab5fd724ac58ab5ff9e06a75e8a7b67fc6784f3094193fbf7c5c9e832e9a2a39288c9cf1ad4c5be06126d7b72eea2c80917b067a7bdb98bca2119bf16802e82af37626a3a01a7c9a114dc4e6e319fee6ea921b365bc96"], 0x0, 0x0, 0x0})

07:36:16 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf00, {0x10}}, 0x14}}, 0x0)

07:36:16 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1309.760322] binder: 20383:20384 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1309.784434] binder: 20383:20384 BC_REQUEST_DEATH_NOTIFICATION invalid ref -2001420186
07:36:16 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1309.850216] binder: BINDER_SET_CONTEXT_MGR already set
[ 1309.900102] binder: 20383:20384 ioctl 40046207 0 returned -16
07:36:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
syncfs(r0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="229feecec153d96274f2a067bad5789625e35a7a3bba9056679bd0546cc55fd461d1318e07a84d2a518bb5ca7a5901850e69a50ecad76158a3462342bcf817e8b7d90b26207ae9be5f150af071bc6d4d969ffb4cde3c79b6542d830e6e1fe160d5cd8797ce7d3e1382f878cb8181ed9ac39c7f5f8f660f5522bdbfd885f894b261e4a1d2d6385e29f70a33e0d437823a23315e82184f4eb550dff2a49a0f9c2f84af8edc6f473cbc21de693c22aadb6fee40fca865b3de8ec1d19602"], 0x0, 0x0, 0x0})
r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfffffffffffffffb, 0x2100)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)={0x0, 0x0, 0x10000, &(0x7f00000000c0)=0x9})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xffffffffffffff77, 0x0, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0})
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x28001, 0x0)
ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000040)={0xf000, 0x7000, 0xfffffffffffffffc, 0x9, 0x9})

07:36:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x3f00, {0x10}}, 0x14}}, 0x0)

07:36:16 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x5000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:16 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={<r1=>0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000180)=0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r1, 0x100}, 0x8)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x8, 0x4)

07:36:16 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1310.401953] binder: 20413:20416 unknown command -823222494
[ 1310.421389] binder: 20413:20416 ioctl c0306201 20012000 returned -22
[ 1310.485063] binder: BINDER_SET_CONTEXT_MGR already set
[ 1310.517314] binder: 20413:20429 ioctl 40046207 0 returned -16
[ 1310.538334] binder: 20413:20416 unknown command -823222494
[ 1310.546692] binder: 20413:20416 ioctl c0306201 20012000 returned -22
07:36:17 executing program 2:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write(r2, &(0x7f0000000100), 0x34000)
close(r0)

07:36:17 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:17 executing program 5:
r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgid(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={<r3=>0x0, r0, 0x0, 0x4, &(0x7f0000000000)='$%!\x00'}, 0x30)
kcmp(r2, r3, 0x6, r1, r0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

07:36:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x6000, {0x10}}, 0x14}}, 0x0)

07:36:17 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:17 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x272, 0x0)
bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x6, 0x0, 0x0, 0x393}, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xc000, {0x10}}, 0x14}}, 0x0)

[ 1310.844202] binder: BINDER_SET_CONTEXT_MGR already set
07:36:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\'\x00\x00\x00\x00\x00'], 0x30}}, 0x0)

07:36:17 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1310.879074] binder: 20444:20453 ioctl 40046207 0 returned -16
07:36:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xc00e, {0x10}}, 0x14}}, 0x0)

[ 1310.922365] binder: 20444:20446 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1310.937343] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
07:36:17 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:17 executing program 2:
mkdir(&(0x7f0000000000)='./0ile/\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00')
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x80}, 0x8)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0xfffffffffffffffb, 0x0)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080))
unlink(&(0x7f0000000180)='./0ile/\x00')
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0xfff, @loopback, 0x7}, {0xa, 0x4e21, 0x4, @local, 0x8001}, 0x7f, [0x5, 0x5, 0x7, 0xd0, 0x1, 0x7, 0x52e, 0x2]}, 0x5c)

07:36:17 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:17 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = dup3(r0, r0, 0x80000)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000640)={0x0, 0x9, 0x7, @empty, 'teql0\x00'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r4 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000500)={<r5=>0x0, 0x2a0000000000}, &(0x7f0000000540)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000580)={r5, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}}, 0x84)
r6 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x72, 0x92100)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000100)={0x3, 0x8})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffe6"], 0x0, 0x0, 0x0})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x841c0, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="66142374d4fc51e485acfbd5c94f58d375e14b7abd4897a98b696d9c4eb4aac5618b2f9db0561c8113562504ad394b41efd3821e95d934e18d3e7f8003d234615c1dc74ad08c52ed88927c4db8f84c78870479b28613d7b83e17f683d38fbcde8d8835dc7c14379807b9a932e5aad030a2b73d5963fc421db5517590f34ce409618a468c30f52972a74ca8acf204a441b71418c18cc32ad1f7eb41ea00dc3c9c149ab5033b7fee42bb6a943049757602278c18e820c5282e1eda790583838d801a1d92d9e266efe2a8a2c0bdf8297cfc87045dca7c534f50b5331472", 0xdc}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000280)="1961ec6c4b8c563d52b91091fc477b6d1dd227ded998a42ab1577d4d513dcdd393a8c07e428dcae45cddc7c8c5ddbe380bc0d8ee993b6afb66d31b652a25df2fb8b6807eea995d80d6c75c714f5a43c6cb8afee712072ace922aeb240e54867b82010cfe7fdf474e561818af846421f3f7ffdf5b81e86bb54197030e46", 0x7d}], 0x3, 0x0)

07:36:17 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={{}, {r2, r3/1000+10000}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x3, 0x2)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101400, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0x0, 0x100000000}})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000100))
socket$inet6(0xa, 0x2, 0x3ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3be9acbe2a2935d5f48b6a7b753e3c34bad061f0d3f3098269900b40a38994e77b22925eb549819cd725fce8ff04c4dfb724032021c0176928109f73ed5fbd20c93bcdedde5c17619ba3e7b43fed983860afe8089a9644811d850f1ff9293532503f4d102b4764e9080806fdb070a9b77e416fb58f806d970a3ecf26d33400899838fac6093166ee7ad2fcbd5b2efdcfcae3d8a90d809de500bafed7442a0ae3ed8809cdbb2ae33ac38fd7944a93bba2a75cf57484ed4b060000000000000038782cb115686bbcfe0000000000000000000000000000"], 0x0, 0x401}, 0x48)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

07:36:17 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0xa000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf000, {0x10}}, 0x14}}, 0x0)

[ 1311.241916] binder: 20487:20492 unknown command -419430401
[ 1311.262266] binder: 20487:20492 ioctl c0306201 20008fd0 returned -22
07:36:17 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1311.314727] binder: BINDER_SET_CONTEXT_MGR already set
[ 1311.329432] binder: 20487:20492 ioctl 40046207 0 returned -16
07:36:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000340)="0adc1f023c123f3188a070")
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
times(&(0x7f0000000300))
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000180)={0x7, 0xe7a, 0x1})
r2 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226)

[ 1311.357763] binder: 20487:20492 unknown command -419430401
[ 1311.400450] binder: 20487:20492 ioctl c0306201 20008fd0 returned -22
07:36:18 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x12000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x34000, {0x10}}, 0x14}}, 0x0)

07:36:18 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={{}, {r2, r3/1000+10000}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x3, 0x2)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101400, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0x0, 0x100000000}})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000100))
socket$inet6(0xa, 0x2, 0x3ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3be9acbe2a2935d5f48b6a7b753e3c34bad061f0d3f3098269900b40a38994e77b22925eb549819cd725fce8ff04c4dfb724032021c0176928109f73ed5fbd20c93bcdedde5c17619ba3e7b43fed983860afe8089a9644811d850f1ff9293532503f4d102b4764e9080806fdb070a9b77e416fb58f806d970a3ecf26d33400899838fac6093166ee7ad2fcbd5b2efdcfcae3d8a90d809de500bafed7442a0ae3ed8809cdbb2ae33ac38fd7944a93bba2a75cf57484ed4b060000000000000038782cb115686bbcfe0000000000000000000000000000"], 0x0, 0x401}, 0x48)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

07:36:18 executing program 2:
r0 = socket$inet6(0xa, 0x5, 0x0)
io_setup(0x200000000003, &(0x7f0000000240)=<r1=>0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x1, 0x0, "a5f9cb20871468436a1a3be33708b147da17ba432625709e4813f9134e15380f61a7e5ab0c26f416c0b7fe40e286a525de027ee2e46b53099d67a8d0b8186a46d62c40c3b837a4c3d16c5126d4a4d3d2"}, 0xd8)
io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

07:36:18 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:36:18 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
fdatasync(r1)

07:36:18 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x20000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1311.685490] binder: BINDER_SET_CONTEXT_MGR already set
07:36:18 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={{}, {r2, r3/1000+10000}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(0x0, 0x3, 0x2)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x101400, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0x0, 0x100000000}})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000100))
socket$inet6(0xa, 0x2, 0x3ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3be9acbe2a2935d5f48b6a7b753e3c34bad061f0d3f3098269900b40a38994e77b22925eb549819cd725fce8ff04c4dfb724032021c0176928109f73ed5fbd20c93bcdedde5c17619ba3e7b43fed983860afe8089a9644811d850f1ff9293532503f4d102b4764e9080806fdb070a9b77e416fb58f806d970a3ecf26d33400899838fac6093166ee7ad2fcbd5b2efdcfcae3d8a90d809de500bafed7442a0ae3ed8809cdbb2ae33ac38fd7944a93bba2a75cf57484ed4b060000000000000038782cb115686bbcfe0000000000000000000000000000"], 0x0, 0x401}, 0x48)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

07:36:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x400300, {0x10}}, 0x14}}, 0x0)

07:36:18 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1311.764405] binder: 20531:20535 ioctl 40046207 0 returned -16
[ 1311.764698] binder: 20531:20533 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:18 executing program 2:
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
clock_nanosleep(0x7, 0x1, &(0x7f0000000180)={r0, r1+30000000}, &(0x7f00000001c0))
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r2 = socket$packet(0x11, 0x400000000000002, 0x300)
prctl$PR_SET_TSC(0x1a, 0x3)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0xc4, 0x0)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x9)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')

07:36:18 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x3f000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:18 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:18 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf0ffff, {0x10}}, 0x14}}, 0x0)

[ 1312.038374] binder: BINDER_SET_CONTEXT_MGR already set
07:36:18 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x48000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1312.083496] binder: 20562:20564 ioctl 40046207 0 returned -16
[ 1312.119617] protocol 88fb is buggy, dev hsr_slave_0
[ 1312.124791] protocol 88fb is buggy, dev hsr_slave_1
07:36:18 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x1000000, {0x10}}, 0x14}}, 0x0)

07:36:18 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2000, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/158, 0x9e}], 0x1, &(0x7f0000000240)=""/142, 0x8e}, 0x2001)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES64=0x0]], 0xfe94, 0x0, 0x0})

07:36:18 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x570]})
r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x1)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040))

07:36:18 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4c000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x2000000, {0x10}}, 0x14}}, 0x0)

[ 1312.344949] binder: 20590:20591 unknown command 536870912
[ 1312.364508] binder: 20590:20591 ioctl c0306201 20012000 returned -22
[ 1312.456864] binder: BINDER_SET_CONTEXT_MGR already set
[ 1312.486019] binder: 20590:20597 ioctl 40046207 0 returned -16
[ 1312.500550] binder: 20590:20597 unknown command 536870912
[ 1312.520864] binder: 20590:20597 ioctl c0306201 20012000 returned -22
[ 1312.599213] protocol 88fb is buggy, dev hsr_slave_0
[ 1312.604289] protocol 88fb is buggy, dev hsr_slave_1
[ 1312.609430] protocol 88fb is buggy, dev hsr_slave_0
[ 1312.614546] protocol 88fb is buggy, dev hsr_slave_1
07:36:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe2(&(0x7f00000004c0)={<r1=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x81, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
socket$inet_sctp(0x2, 0x5, 0x84)
fsetxattr(r3, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0)
fdatasync(r3)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6})
r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000640)={0x14, 0x69, 0x2, {0x42, 0x3, 0x1}}, 0x14)
r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001)
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4})
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"])
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
capset(&(0x7f00000001c0), &(0x7f0000000200))
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8})
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x10000003)
setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)

07:36:19 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x60000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:19 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x4000000, {0x10}}, 0x14}}, 0x0)

07:36:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffe6f, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="016340400100000000000000020000000000000000000000010000000000000000000000180000000000000038000000000000002d31ed491dc6396c002bf37abc318497d12c9eaffa07fcf0abc72802eb1892c775975076761b57b14361e7738a7a499dc417b2451bd5d7d0", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000100000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000580000000000000078000000000000001800000000000000380000000000000048000000000000006800000000000000"]], 0x0, 0x0, 0x0})

07:36:19 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x1000000000000)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SMI(r0, 0xaeb7)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="056304400000027dc537850084000000000000000000000000000001000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x212100, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000080)='./file0\x00', r2}, 0x10)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={<r3=>0x0, 0xbd1d, 0x9, 0x922, 0x8, 0x63, 0x80, 0x6, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x6, 0xfffffffffffffff7, 0x0, 0x3}}, &(0x7f0000000040)=0xb0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x9, 0x10}, 0xc)

[ 1312.919723] binder_alloc: binder_alloc_mmap_handler: 20616 20ffc000-20ffe000 already mapped failed -16
[ 1312.929553] binder: BINDER_SET_CONTEXT_MGR already set
[ 1312.943243] binder: 20619:20621 ioctl 40046207 0 returned -16
07:36:19 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x68000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x8000000, {0x10}}, 0x14}}, 0x0)

07:36:19 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1312.976320] binder: 20619:20621 ioctl aeb7 0 returned -22
[ 1312.995314] binder: 20619:20621 Acquire 1 refcount change on invalid ref 2097283072 ret -22
[ 1313.069939] binder: 20619:20636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1313.087591] Unknown ioctl 19304
07:36:19 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0}, {r0}, {r0}], 0x3, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

[ 1313.119682] relay: one or more items not logged [item size (56) > sub-buffer size (9)]
[ 1313.127049] binder: 20619:20636 ioctl aeb7 0 returned -22
07:36:19 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6c000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:19 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1313.169728] binder: 20619:20621 Acquire 1 refcount change on invalid ref 2097283072 ret -22
[ 1313.240463] binder: 20619:20636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1313.335884] Unknown ioctl 19304
07:36:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe2(&(0x7f00000004c0)={<r1=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x81, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
socket$inet_sctp(0x2, 0x5, 0x84)
fsetxattr(r3, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0)
fdatasync(r3)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6})
r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000640)={0x14, 0x69, 0x2, {0x42, 0x3, 0x1}}, 0x14)
r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001)
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4})
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa259cf6604ec2c5f112b145d42a57d14db302fae5cea607c12607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb9f439ebb4f0a1a17c30408542c1703229d6c9237a8ac784470000733738714d6b524507528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb91a264b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab8f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1ef"])
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
capset(&(0x7f00000001c0), &(0x7f0000000200))
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8})
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x10000003)
setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)

07:36:19 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xa000000, {0x10}}, 0x14}}, 0x0)

07:36:19 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05781d54690000849413ed153d823e77977bef5b32dcd8408c2511fc79e93bf40993a253d3444b5fca5a1f794198f75b00800c412bf60177037b01e469f9e61e0693c265d3a43766d542ff3ea2211fb0c9f8c28b03843704b6c96723c31dafcabc9ca4a4701d19839dc4e2e81ca439d730879f609286058b30356a5ace285a685cc29cf8ccf4a3b5c055f4f59fe0e103a8848b4918727a4824c63bd52444980b65bb569c5412bd72ff1f203f5cedb66dec99b341e6769fd071d5ea6fa21bc3980d09e82f22b340f41913ccf42f6fbdf804e7a023b120e9687acea33fcd2a48f9fbf22dc0afaa7d065925d6b9"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:19 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x74000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1313.429460] binder: 20666:20667 unknown command 1411217413
[ 1313.455002] binder: 20666:20667 ioctl c0306201 20012000 returned -22
07:36:20 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7a000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:20 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1313.494869] binder: 20666:20678 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1313.522041] binder: BINDER_SET_CONTEXT_MGR already set
07:36:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xe000000, {0x10}}, 0x14}}, 0x0)

[ 1313.568947] binder: 20666:20678 ioctl 40046207 0 returned -16
[ 1313.630708] Unknown ioctl 19304
07:36:20 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1313.684697] relay: one or more items not logged [item size (56) > sub-buffer size (9)]
07:36:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x422001, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x40, 0x1)
r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x101241)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x64, 0x28, 0x1, 0x1, 0x0, {0x4}, [@generic="974d5d34365a932fc8bd6985adb7a9cc0ec49c5d23285766d4e32dec949c3e3d682aa4307d7fedf27062eddcb0b1626de517c2d5fc4694c95c2507b5a189b4fac6b169045325ec513150fc73d7"]}, 0x64}}, 0x0)

07:36:20 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0xfdfdffff, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:20 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x280081)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe2(&(0x7f00000004c0)={<r1=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x81, r2})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
socket$inet_sctp(0x2, 0x5, 0x84)
fsetxattr(r3, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0)
fdatasync(r3)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6})
r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000640)={0x14, 0x69, 0x2, {0x42, 0x3, 0x1}}, 0x14)
r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001)
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000140)=0x6)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4})
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="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"])
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
capset(&(0x7f00000001c0), &(0x7f0000000200))
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000100)={0x3, 0x1f, 0x8})
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x10000003)
setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r4, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)

07:36:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf000000, {0x10}}, 0x14}}, 0x0)

07:36:20 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1314.137040] binder: BINDER_SET_CONTEXT_MGR already set
07:36:20 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1314.166065] binder: 20706:20716 ioctl 40046207 0 returned -16
[ 1314.183599] binder: 20706:20722 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x10000000, {0x10}}, 0x14}}, 0x0)

07:36:20 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0xfffffdfd, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:20 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080))
r2 = socket$packet(0x11, 0x800000000002, 0x300)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10)

07:36:20 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1314.343640] Unknown ioctl 19304
07:36:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x3f000000, {0x10}}, 0x14}}, 0x0)

07:36:21 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00', r2}, 0x10)
readahead(r3, 0x7f, 0x400)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d00)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4004ae99, &(0x7f0000000100))
dup2(r5, r6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1314.426048] relay: one or more items not logged [item size (56) > sub-buffer size (9)]
07:36:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0)

07:36:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x60000000, {0x10}}, 0x14}}, 0x0)

07:36:21 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x2}, 0x8)
set_thread_area(&(0x7f0000000040)={0x6, 0x100000, 0x0, 0x632, 0xfffffffffffffff8, 0x607, 0x7, 0x9, 0x78c7, 0x6})
sendmsg$netlink(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000), 0x8)

07:36:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x9effffff, {0x10}}, 0x14}}, 0x0)

07:36:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x200000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:21 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0)

07:36:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x300000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xc0000000, {0x10}}, 0x14}}, 0x0)

07:36:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000140)={0x8, 0x4, 0x80000000, 0x9, &(0x7f0000000040)=[{}, {}, {}, {}]})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

07:36:21 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x400000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x7, 0x101002)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0xb8, @dev={0xfe, 0x80, [], 0x1e}}, @in6={0xa, 0x4e22, 0x1ff, @loopback, 0x8001}, @in6={0xa, 0x4e21, 0x487, @empty, 0x1800000000000000}], 0x54)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0)
write$P9_RSYMLINK(r3, &(0x7f0000000140)={0x29a}, 0x14)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0xc)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000100)='.\x00', 0x40224000000b)
sendfile(r3, r3, &(0x7f00000000c0), 0x2000000800004c36)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0x8, 0x20, 0x8})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xffffffffffffffeb)
r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xe15, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipddp0\x00', 0x4}, 0x18)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x10000000002, 0x1})
close(r4)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1)
r6 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8, 0x101000)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x2d9])
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000280)={0x7f, 0xa, 0x1})
getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4)
ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0x0, {0x3, 0x5, 0x4, 0x5}, {0x3ff, 0x5, 0x80000000, 0x3}, {0x3f, 0x20}})
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300))
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000500)=0x1e)
setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000240), 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_team\x00'}, 0x18)
fcntl$notify(r2, 0x402, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000003c0)={0x82, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x0, 0x0, 0x200000000}, 0x2c)

07:36:21 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
clock_gettime(0x4, &(0x7f0000000000))
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={<r3=>0x0, @in={{0x2, 0x4e24}}, 0x800, 0x8, 0x8, 0x1, 0x3}, &(0x7f00000002c0)=0x98)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r3, 0x7f}, 0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={<r4=>0x0, 0x200, 0x30, 0x0, 0x4}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r4, 0x5, 0x4, [0xfffffffffffff075, 0xffffffffffffffff, 0x10000, 0x0]}, 0x10)
r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0})

07:36:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xc00e0000, {0x10}}, 0x14}}, 0x0)

[ 1315.210011] binder: BINDER_SET_CONTEXT_MGR already set
[ 1315.235585] binder: 20811:20820 ioctl 40046207 0 returned -16
07:36:21 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x500000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:21 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf0ffffff, {0x10}}, 0x14}}, 0x0)

[ 1315.369318] IPVS: set_ctl: invalid protocol: 130 172.20.20.170:0
07:36:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000140)={0x8, 0x4, 0x80000000, 0x9, &(0x7f0000000040)=[{}, {}, {}, {}]})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

[ 1315.464196] binder: BINDER_SET_CONTEXT_MGR already set
[ 1315.480480] IPVS: set_ctl: invalid protocol: 130 172.20.20.170:0
07:36:22 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:22 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x600000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1315.538653] binder: 20836:20841 ioctl 40046207 0 returned -16
[ 1315.555541] binder: 20836:20838 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xfffff000, {0x10}}, 0x14}}, 0x0)

07:36:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x7, 0x101002)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0xb8, @dev={0xfe, 0x80, [], 0x1e}}, @in6={0xa, 0x4e22, 0x1ff, @loopback, 0x8001}, @in6={0xa, 0x4e21, 0x487, @empty, 0x1800000000000000}], 0x54)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0)
write$P9_RSYMLINK(r3, &(0x7f0000000140)={0x29a}, 0x14)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0xc)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000100)='.\x00', 0x40224000000b)
sendfile(r3, r3, &(0x7f00000000c0), 0x2000000800004c36)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0x8, 0x20, 0x8})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xffffffffffffffeb)
r5 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xe15, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipddp0\x00', 0x4}, 0x18)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x10000000002, 0x1})
close(r4)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1)
r6 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8, 0x101000)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0x2d9])
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000280)={0x7f, 0xa, 0x1})
getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4)
ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0x0, {0x3, 0x5, 0x4, 0x5}, {0x3ff, 0x5, 0x80000000, 0x3}, {0x3f, 0x20}})
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300))
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000500)=0x1e)
setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000240), 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_team\x00'}, 0x18)
fcntl$notify(r2, 0x402, 0x0)
creat(&(0x7f0000000200)='./file0\x00', 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000003c0)={0x82, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x0, 0x0, 0x200000000}, 0x2c)

07:36:22 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x40202)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:22 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x700000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:22 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1315.796054] binder: BINDER_SET_CONTEXT_MGR already set
[ 1315.810943] binder: 20864:20869 ioctl 40046207 0 returned -16
07:36:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xffffff7f, {0x10}}, 0x14}}, 0x0)

[ 1315.850626] binder: 20864:20867 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:22 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563046000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:22 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1315.987633] IPVS: set_ctl: invalid protocol: 130 172.20.20.170:0
07:36:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xffffff9e, {0x10}}, 0x14}}, 0x0)

[ 1316.173086] binder: 20887:20895 unknown command 1610900229
[ 1316.193358] binder: 20887:20895 ioctl c0306201 20012000 returned -22
[ 1316.205547] binder: 20887:20895 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1316.247663] binder: BINDER_SET_CONTEXT_MGR already set
07:36:22 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00', r2}, 0x10)
readahead(r3, 0x7f, 0x400)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d00)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4004ae99, &(0x7f0000000100))
dup2(r5, r6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:22 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0xa00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:22 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00', r2}, 0x10)
readahead(r3, 0x7f, 0x400)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d00)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4004ae99, &(0x7f0000000100))
dup2(r5, r6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xfffffff0, {0x10}}, 0x14}}, 0x0)

07:36:22 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1316.319933] binder: 20887:20895 ioctl 40046207 0 returned -16
[ 1316.323066] binder: 20887:20900 unknown command 1610900229
[ 1316.344326] binder: 20887:20900 ioctl c0306201 20012000 returned -22
[ 1316.351775] binder: 20887:20891 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x40030000000000, {0x10}}, 0x14}}, 0x0)

07:36:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x80041)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000140)={0x10000}, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
recvfrom$rxrpc(r0, &(0x7f00000000c0)=""/119, 0x77, 0x10000, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)

07:36:23 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:23 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x1200000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1316.545078] binder: BINDER_SET_CONTEXT_MGR already set
07:36:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf0ffffffffffff, {0x10}}, 0x14}}, 0x0)

[ 1316.595819] binder: 20917:20918 ioctl 40046207 0 returned -16
[ 1316.639704] binder: BINDER_SET_CONTEXT_MGR already set
[ 1316.658917] binder: 20924:20925 ioctl 40046207 0 returned -16
[ 1316.676042] binder: BINDER_SET_CONTEXT_MGR already set
07:36:23 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:23 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1316.705844] binder: 20924:20936 ioctl 40046207 0 returned -16
07:36:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffc, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xfffffffffffffe01, 0x217, 0x2, 0xc66, 0x0, 0x0, 0x22021, 0x1, 0x2, 0x6, 0x4, 0xe905, 0x5, 0xa6a, 0x1000, 0x2, 0x84, 0x1000, 0x1ff, 0x100000001, 0xfffffffffffff801, 0x7fffffff, 0x8, 0x6, 0x8, 0x7, 0x9, 0x7fffffff, 0x3, 0x6, 0x7ff, 0x81, 0x7, 0x7000, 0x800, 0x9, 0x0, 0x8001, 0x2, @perf_config_ext={0xd552, 0x3}, 0x8480, 0xb40, 0x1f, 0x9, 0x6, 0x4, 0x1}, r1, 0x9, r0, 0x0)

07:36:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x100000000000000, {0x10}}, 0x14}}, 0x0)

07:36:23 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x3f00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)

07:36:23 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:23 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00', r2}, 0x10)
readahead(r3, 0x7f, 0x400)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d00)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b19eeb299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4004ae99, &(0x7f0000000100))
dup2(r5, r6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1317.196753] binder: BINDER_SET_CONTEXT_MGR already set
[ 1317.206924] binder: BINDER_SET_CONTEXT_MGR already set
[ 1317.220812] binder: 20961:20967 ioctl 40046207 0 returned -16
[ 1317.235110] binder: 20959:20966 ioctl 40046207 0 returned -16
07:36:23 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4800000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x200000000000000, {0x10}}, 0x14}}, 0x0)

[ 1317.244559] binder: 20961:20962 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:23 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

07:36:23 executing program 5:
r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
write(r0, &(0x7f0000000240)="7b560afae7b9bb6c654f42cca68b0556a9aac4fb53615e9dd96cf2f1133a34915386c68a8800660630ee74e67ae55318ad8f8420ff3eeeb7b51366d019bc6ca71ff04072a759d8c0", 0x48)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x20057, r0, 0x0)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8)

07:36:23 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:23 executing program 0:
r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000340)=""/4096, &(0x7f0000000100)=0x1000)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x5fea, 0xefee, 0x7})
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ff630c40619f5953630824e5be592ed4d893e077e0fe0176bb2b2b4b7ab29f9209"], 0x0, 0x0, 0x0})
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000140)={0x8, 0x4})

07:36:24 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x4c00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x400000000000000, {0x10}}, 0x14}}, 0x0)

07:36:24 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00')
getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x3, 0xfff, 0x7, 0x9}, 0x14)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={<r1=>0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x59, 0x3f, 0xffffffff90ee197c, 0x6a, 0x8}, &(0x7f00000001c0)=0x98)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={<r2=>r1, 0x8001}, &(0x7f0000000240)=0x8)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000280)=""/175, &(0x7f0000000340)=0xaf)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x12}, 0x116e, 0x0, 0x3, 0x3, 0x1, 0x40}, 0x20)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={<r3=>r2, @in6={{0xa, 0x4e23, 0x401, @mcast2, 0x5}}, 0x0, 0x7b3, 0xfff, 0x3, 0x2}, &(0x7f0000000480)=0x98)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000004c0)=0x5, 0x8)
setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000500)=0x9, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000540)="d3e8d895ce6229c51c0de37ac0eb8bcfde8d74f3644e0a49")
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xfffffffffffffffe)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x128, r4, 0x8, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x323a}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd0a}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x29e5d8fa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8003}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4e}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x44)
prctl$PR_SET_FPEXC(0xc, 0x20002)
r5 = gettid()
sched_setaffinity(r5, 0x8, &(0x7f00000007c0)=0x6)
rt_sigaction(0x31, &(0x7f0000000880)={&(0x7f0000000800)="c4c30578d0007a140f1b18d8ff3ef2d9e544c03eafc4820d2e6101c422c90bfc660f38f60826f3dc58f2", {}, 0x10000000, &(0x7f0000000840)="0f0d29666436efc4a1fa7e8a0600000064670f2aedd9f70f281c5ec4c2a8f39e0e000000f366430f8000000000c4230d0e88ffefffffd4c42111d2b88f000000"}, &(0x7f0000000980)={&(0x7f00000008c0)="4e0fae6741c4827978298fc878c197f500000023c403455d1838c481c9c6e04066440f6ab46700000000c4237d192ab46540a00008000000000000c4c2faf7a44b96950000440fa1", {}, 0x0, &(0x7f0000000940)="c7c70b000000c4a2793d3ec442e9bed48f092002b10850000041d9fb67f30f18fac4621d2d60fec482752d56fef30f34c4a2f0f39f1674deda"}, 0x8, &(0x7f00000009c0))
recvmsg$kcm(r0, &(0x7f0000001c40)={&(0x7f0000000ac0)=@hci={0x1f, <r6=>0x0}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, &(0x7f0000001b80)=""/190, 0xbe}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001c80)={@local, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000, 0x0, 0x9, 0x400, 0x0, 0x2, r6})
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
read$alg(r0, &(0x7f0000001d00)=""/117, 0x75)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={r3, @in={{0x2, 0x4e20, @loopback}}, 0xff, 0x8, 0x1, 0x80, 0x40}, &(0x7f0000001e40)=0x98)
r7 = syz_open_dev$mouse(&(0x7f0000001e80)='/dev/input/mouse#\x00', 0x4, 0x80440)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000001f00)={{0x6, 0x5, 0x80, 0x3, '\x00', 0xcc}, 0x4, 0x10000000, 0x4, r5, 0x1, 0x1000, 'syz0\x00', &(0x7f0000001ec0)=['/dev/input/mouse#\x00'], 0x12, [], [0x0, 0xed, 0x0, 0x9]})
setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000002040)=0x65b, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002080)={<r8=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000002100)={0x9, 0x108, 0xfa00, {r8, 0x14, "4c95f5", "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"}}, 0x110)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000002240)=0xff, 0x4)
getsockopt$inet6_mreq(r7, 0x29, 0x1f, &(0x7f0000002280)={@local}, &(0x7f00000022c0)=0x14)

07:36:24 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1317.579672] binder: 20998:21002 unknown command 1074553855
[ 1317.602453] binder: 20998:21002 ioctl c0306201 20008fd0 returned -22
[ 1317.630972] binder: BINDER_SET_CONTEXT_MGR already set
[ 1317.648692] binder: 20998:21007 ioctl 40046207 0 returned -16
[ 1317.664369] binder: 20998:21007 unknown command 1074553855
07:36:24 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6000000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

[ 1317.676140] binder: 20998:21007 ioctl c0306201 20008fd0 returned -22
07:36:24 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00', r2}, 0x10)
readahead(r3, 0x7f, 0x400)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000d00)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b19eeb299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4004ae99, &(0x7f0000000100))
dup2(r5, r6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x800000000000000, {0x10}}, 0x14}}, 0x0)

07:36:24 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:24 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x800, 0x4, 0x2b28, 0x4, 0x1, 0x5})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:24 executing program 5:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x10)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, <r2=>0x0}, &(0x7f00000003c0)=0xc)
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchownat(r1, &(0x7f0000000340)='./file0\x00', r2, r3, 0x1000)
r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7f, 0x2000)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={<r5=>0x0, 0x8}, &(0x7f0000000140)=0x8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000180)=0x84)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000002c0)=""/126, 0xb2})
writev(r6, &(0x7f0000000080), 0x1a6)
epoll_create(0x2)

[ 1317.903103] binder: BINDER_SET_CONTEXT_MGR already set
[ 1317.922898] binder: 21027:21035 ioctl 40046207 0 returned -16
[ 1317.929007] binder: BINDER_SET_CONTEXT_MGR already set
[ 1317.947557] binder: 21037:21038 ioctl 40046207 0 returned -16
07:36:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xa00000000000000, {0x10}}, 0x14}}, 0x0)

07:36:24 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6800000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:24 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:24 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:24 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x6c00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xe00000000000000, {0x10}}, 0x14}}, 0x0)

07:36:24 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa8000, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$unix(0x1, 0x801, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r5, 0x0)
accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
pipe2(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000100)={0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005})
getgid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=<r8=>0x0)
write$cgroup_pid(r6, &(0x7f0000000240)=r8, 0x12)
ioctl$FICLONE(r3, 0x40049409, r3)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x67, 0xffffffffffffc75b, 0x46461ba, 0x8, 0x0, 0x1, 0x38}, 0x1)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r9 = socket(0x1b, 0x4, 0x10200000000)
setsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r7, 0x6, 0x800000000000000, &(0x7f0000000380)=""/2, &(0x7f00000003c0)=0x2)
pipe2(&(0x7f0000000080), 0x80800)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r10, 0x74, 0x99, &(0x7f0000000080)="80d11921532b5bc127c0b07ecf74c001ba6ef91e0395309b998fcc6cf843d1fe2a226b0baf0623db879f1d53317945671bfc75a8bc4e9f4d725427669f612be8696da18bdc2d4620e8ee045facb11c75fa636aa063ad44256238c92cef87ed2ef443e7cc417292e756aab1feaf7aacbed48f6f74058ae3ea971826a4624a450a83c2b59ec6cc21126e0a1e119ff77feab557d5b919488f9c41", 0x5, 0xfffffffffffffffc, 0x2, 0x10000, 0x7fffffff, 0x3, 0x2, 'syz1\x00'})
mmap(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000579000/0x1000)=nil, 0x1000, 0x2000001)

[ 1318.242136] binder: BINDER_SET_CONTEXT_MGR already set
[ 1318.265462] binder: 21056:21066 ioctl 40046207 0 returned -16
07:36:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2d8, &(0x7f0000000100)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "7fa1cf", 0x2a2, 0x3c, 0x8001, @dev, @ipv4={[], [], @multicast1}, {[@hopopts={0x0, 0x46, [], [@generic={0x0, 0x234, "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"}]}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x10000, 0x0, 0x8, 0x1d, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x76e8}]}}, {"4454349fc99d7b187d769cb6c68e0f93a541d91158880d659debcdb5577a9628107a1fa1b5f06040f6e5100276576b441746d22b75ff85a0e0385bd0984e41d79637"}}}}}}}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

07:36:25 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf00000000000000, {0x10}}, 0x14}}, 0x0)

07:36:25 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:25 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7400000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x1000000000000000, {0x10}}, 0x14}}, 0x0)

07:36:25 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1318.591503] binder: BINDER_SET_CONTEXT_MGR already set
[ 1318.598938] binder: 21086:21087 ioctl 40046207 0 returned -16
07:36:25 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x7a00000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2d8, &(0x7f0000000100)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "7fa1cf", 0x2a2, 0x3c, 0x8001, @dev, @ipv4={[], [], @multicast1}, {[@hopopts={0x0, 0x46, [], [@generic={0x0, 0x234, "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"}]}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x10000, 0x0, 0x8, 0x1d, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x76e8}]}}, {"4454349fc99d7b187d769cb6c68e0f93a541d91158880d659debcdb5577a9628107a1fa1b5f06040f6e5100276576b441746d22b75ff85a0e0385bd0984e41d79637"}}}}}}}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

07:36:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x3f00000000000000, {0x10}}, 0x14}}, 0x0)

07:36:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2d8, &(0x7f0000000100)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "7fa1cf", 0x2a2, 0x3c, 0x8001, @dev, @ipv4={[], [], @multicast1}, {[@hopopts={0x0, 0x46, [], [@generic={0x0, 0x234, "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"}]}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x10000, 0x0, 0x8, 0x1d, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x76e8}]}}, {"4454349fc99d7b187d769cb6c68e0f93a541d91158880d659debcdb5577a9628107a1fa1b5f06040f6e5100276576b441746d22b75ff85a0e0385bd0984e41d79637"}}}}}}}, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

[ 1319.138228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
07:36:25 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa8000, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$unix(0x1, 0x801, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r5, 0x0)
accept4(r5, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0)
connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
pipe2(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000100)={0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005})
getgid()
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=<r8=>0x0)
write$cgroup_pid(r6, &(0x7f0000000240)=r8, 0x12)
ioctl$FICLONE(r3, 0x40049409, r3)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x67, 0xffffffffffffc75b, 0x46461ba, 0x8, 0x0, 0x1, 0x38}, 0x1)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r9 = socket(0x1b, 0x4, 0x10200000000)
setsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r7, 0x6, 0x800000000000000, &(0x7f0000000380)=""/2, &(0x7f00000003c0)=0x2)
pipe2(&(0x7f0000000080), 0x80800)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r10, 0x74, 0x99, &(0x7f0000000080)="80d11921532b5bc127c0b07ecf74c001ba6ef91e0395309b998fcc6cf843d1fe2a226b0baf0623db879f1d53317945671bfc75a8bc4e9f4d725427669f612be8696da18bdc2d4620e8ee045facb11c75fa636aa063ad44256238c92cef87ed2ef443e7cc417292e756aab1feaf7aacbed48f6f74058ae3ea971826a4624a450a83c2b59ec6cc21126e0a1e119ff77feab557d5b919488f9c41", 0x5, 0xfffffffffffffffc, 0x2, 0x10000, 0x7fffffff, 0x3, 0x2, 'syz1\x00'})
mmap(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000579000/0x1000)=nil, 0x1000, 0x2000001)

07:36:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x6000000000000000, {0x10}}, 0x14}}, 0x0)

07:36:25 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@loopback, @remote, @empty, 0x0, 0x80, 0x3, 0x0, 0x8})

07:36:25 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xdc, 0x42000)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000300)=0x8000)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xb2c4, 0x10000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x399400, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x4)
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)={0x0, <r4=>0x0}}, 0x10)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x6d)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)=r4, 0x4)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x220000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000280)={0x1, 0x4, 0xffffffffffffff80})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0})

07:36:25 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0xfdfdffff00000000, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})

07:36:25 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1319.378985] binder: BINDER_SET_CONTEXT_MGR already set
07:36:25 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000380)={0x1, [<r2=>0x0]}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0xbd, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, [0x66, 0x3, 0x4, 0x0, 0x7, 0x1, 0x800, 0x5, 0x7e3, 0x8, 0x660, 0x4, 0x40, 0x8]}, &(0x7f0000000500)=0x100)
r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
r4 = fcntl$getown(r3, 0x9)
timer_create(0x7, &(0x7f0000000140)={0x0, 0x24, 0x0, @tid=r4}, &(0x7f0000000200))
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000240)={0x2, 0x0, 0x300b, 0x8d, 0x56c, {0x4, 0x2}, 0x1})
write$P9_RCLUNK(r3, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7)
r5 = syz_open_dev$binder(0x0, 0x0, 0x802)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000280)=0x3f, 0x4)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe98, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="eeabde21"], 0x0, 0x0, 0x0})

07:36:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x9effffff00000000, {0x10}}, 0x14}}, 0x0)

[ 1319.414314] binder: 21128:21130 ioctl 40046207 0 returned -16
07:36:26 executing program 2:
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x8}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x3)
r1 = getpgrp(0xffffffffffffffff)
setpriority(0x3, r1, 0x7)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
add_key(&(0x7f00000003c0)='.requ\xabest_key\x18\x1duth\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
ioctl$CAPI_INSTALLED(r2, 0x80024322)
keyctl$update(0x2, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0)
getsockname(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80)
set_mempolicy(0x8003, &(0x7f0000000100)=0x3, 0x0)
readlink(0x0, 0x0, 0xffffffffffffff98)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000400)='security.capa%ility\x00', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0))
ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000002c0))

07:36:26 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:26 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x0, 0x0, 0x0})

[ 1319.611392] binder: 21156:21158 ERROR: BC_REGISTER_LOOPER called without request
[ 1319.619910] binder: BINDER_SET_CONTEXT_MGR already set
[ 1319.641725] binder: 21144:21161 ioctl 40046207 0 returned -16
07:36:26 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0x0, 0x0})

07:36:26 executing program 5:
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x8}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x3)
r1 = getpgrp(0xffffffffffffffff)
setpriority(0x3, r1, 0x7)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
add_key(&(0x7f00000003c0)='.requ\xabest_key\x18\x1duth\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
ioctl$CAPI_INSTALLED(r2, 0x80024322)
keyctl$update(0x2, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0)
getsockname(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80)
set_mempolicy(0x8003, &(0x7f0000000100)=0x3, 0x0)
readlink(0x0, 0x0, 0xffffffffffffff98)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000400)='security.capa%ility\x00', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0))
ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000002c0))

07:36:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xc000000000000000, {0x10}}, 0x14}}, 0x0)

07:36:26 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:26 executing program 2:
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x8}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x3)
r1 = getpgrp(0xffffffffffffffff)
setpriority(0x3, r1, 0x7)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
add_key(&(0x7f00000003c0)='.requ\xabest_key\x18\x1duth\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
ioctl$CAPI_INSTALLED(r2, 0x80024322)
keyctl$update(0x2, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0)
getsockname(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80)
set_mempolicy(0x8003, &(0x7f0000000100)=0x3, 0x0)
readlink(0x0, 0x0, 0xffffffffffffff98)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000400)='security.capa%ility\x00', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0))
ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000002c0))

07:36:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/150)
r2 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:26 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0x0, 0x0})

[ 1320.400211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
07:36:27 executing program 2:
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x8}, 0x90)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x3)
r1 = getpgrp(0xffffffffffffffff)
setpriority(0x3, r1, 0x7)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1)
add_key(&(0x7f00000003c0)='.requ\xabest_key\x18\x1duth\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0x0)
ioctl$CAPI_INSTALLED(r2, 0x80024322)
keyctl$update(0x2, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0)
getsockname(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0x80)
set_mempolicy(0x8003, &(0x7f0000000100)=0x3, 0x0)
readlink(0x0, 0x0, 0xffffffffffffff98)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000400)='security.capa%ility\x00', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0))
ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f00000002c0))

[ 1320.446519] binder: BINDER_SET_CONTEXT_MGR already set
[ 1320.462851] binder: 21193:21198 ioctl 40046207 0 returned -16
07:36:27 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

07:36:27 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02630440"], 0x0, 0x0, 0x0})

07:36:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xc00e000000000000, {0x10}}, 0x14}}, 0x0)

[ 1320.572590] binder: BC_ACQUIRE_RESULT not supported
07:36:27 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x15a)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xc9e3, 0xffffffff})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0)

07:36:27 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1320.613389] binder: 21212:21213 ioctl c0306201 20008fd0 returned -22
07:36:27 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000080e7"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:27 executing program 2:
signalfd(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x3)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x204)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28040, 0x4a)
clock_gettime(0xfffffffffffffffe, &(0x7f0000000080))
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f00000000c0)={0xfffffffffffffffd, {0x0, 0x989680}, 0x37, 0xffffffff})
ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000100)={0x7, 0x3, @stop_pts=0x100000000})
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40000, 0x0)
writev(r1, &(0x7f000051c000)=[{&(0x7f00000001c0)="c88b7362338fb1f28f8f480000001400190d09002aeafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000bb34aa7fb9afd1aee67270c6e7346a1b7469082ac1c505f1cd490b35ea50949c63d47349aaf0efe5376e1d", 0x7d}], 0x1)
sendfile(r2, r0, 0x0, 0x4)

07:36:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xf0ffffff00000000, {0x10}}, 0x14}}, 0x0)

07:36:27 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0})

07:36:27 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x80800)
ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000040))
r2 = accept$alg(r0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x1d, @multicast2, 0x4e21, 0x2, 'lblcr\x00', 0xa, 0x8, 0x66}, 0x2c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="d3ab27191a01002356ba602dff05000b", 0x10)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[], 0x48d)
recvmmsg(r2, &(0x7f00000062c0)=[{{&(0x7f0000002bc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003ec0), 0x3, &(0x7f0000000440)=""/190, 0xfb}}, {{&(0x7f0000004000)=@ipx, 0x80, &(0x7f0000006180), 0x17, &(0x7f00000061c0)=""/240, 0xf0}}], 0x400000000000399, 0x0, &(0x7f0000006400)={0x77359400})

07:36:27 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1320.859874] binder: 21244:21245 unknown command 0
07:36:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xffffff7f00000000, {0x10}}, 0x14}}, 0x0)

[ 1320.930882] binder: 21244:21245 ioctl c0306201 20012000 returned -22
[ 1320.930912] binder: 21244:21260 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:27 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x1, 0x0)
bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ae4086f441387ac7", 0x23d)
r2 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0xf0ff7f}], 0x1}, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040))

07:36:27 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07630440"], 0x0, 0x0, 0x0})

[ 1320.998618] binder: BINDER_SET_CONTEXT_MGR already set
[ 1321.043205] binder: 21244:21260 ioctl 40046207 0 returned -16
07:36:27 executing program 5:
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x803, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
sendto(r2, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=<r3=>0x0)
getpgrp(r3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000580)='memory.high\x00', 0x2, 0x0)
writev(r5, &(0x7f0000000700), 0x10000000000000ea)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000040))
io_setup(0x3ff, &(0x7f0000000100)=<r6=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r7=>0x0}, &(0x7f00000000c0)=0xc)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000380)={0x0, 0x0, [], {0x0, @bt={0x9, 0xfffffffffffff52c, 0x1, 0x3, 0x1f, 0x8, 0x7a, 0x2, 0xfffffffffffffc00, 0xfffffffffffff50b, 0x4, 0xffffffffffff0001, 0x5, 0x0, 0xa, 0x12}}})
capset(&(0x7f0000000140)={0x0, r7}, &(0x7f00000001c0)={0x6})
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10, 0x800)
io_submit(r6, 0x0, &(0x7f00000002c0))
semget$private(0x0, 0x5, 0x2000000001)
ioprio_set$pid(0x0, 0x0, 0x0)
request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffc)

07:36:27 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1321.083616] binder: 21244:21260 unknown command 0
[ 1321.091707] binder: 21244:21260 ioctl c0306201 20012000 returned -22
[ 1321.120365] binder: 21274:21276 DecRefs 0 refcount change on invalid ref 0 ret -22
07:36:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xffffffff00000000, {0x10}}, 0x14}}, 0x0)

07:36:27 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563045db82b4002"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

07:36:27 executing program 2:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x29, 0x3, 0x0, 0x0, {}, [@generic="e58e0a64367e1309218cf4ce06"]}, 0x24}}, 0x0)

07:36:27 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03630840"], 0x0, 0x0, 0x0})

[ 1321.321096] binder: 21289:21297 unknown command 1560568581
[ 1321.357225] binder: 21289:21297 ioctl c0306201 20012000 returned -22
[ 1321.366418] binder: 21289:21290 unknown command 0
07:36:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0xfffffffffffff000, {0x10}}, 0x14}}, 0x0)

[ 1321.386840] binder: 21289:21290 ioctl c0306201 20008fd0 returned -22
07:36:27 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

[ 1321.438121] binder: 21302:21304 BC_FREE_BUFFER u0000000000000000 no match
[ 1321.473054] binder: BINDER_SET_CONTEXT_MGR already set
[ 1321.479813] binder: 21289:21297 ioctl 40046207 0 returned -16
07:36:28 executing program 2:
r0 = dup(0xffffffffffffffff)
write$apparmor_current(r0, &(0x7f00000001c0)=@profile={'changeprofile ', 'cpusetvboxnet0\'$^\x00'}, 0x20)
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x7e)
pipe(&(0x7f0000000880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, 0x0)
write(r4, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
write$P9_RXATTRCREATE(r2, 0x0, 0x0)
clock_gettime(0x4, &(0x7f0000000340)={0x0, <r5=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000240)=0x1)
getpeername$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000180)=0x10)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sync_file_range(r1, 0x0, 0x0, 0x6934b3798b222ac3)

07:36:28 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0x0, 0x0})

[ 1321.512990] binder: 21289:21297 unknown command 1560568581
[ 1321.535281] binder: 21289:21297 ioctl c0306201 20012000 returned -22
[ 1321.585018] binder: 21289:21290 unknown command 0
07:36:28 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1321.619327] binder: 21289:21290 ioctl c0306201 20008fd0 returned -22
[ 1321.655625] binder: BC_ATTEMPT_ACQUIRE not supported
07:36:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

[ 1321.665642] binder: 21317:21321 ioctl c0306201 20008fd0 returned -22
[ 1321.759931] binder: BC_ATTEMPT_ACQUIRE not supported
[ 1321.795810] binder: 21317:21321 ioctl c0306201 20008fd0 returned -22
07:36:28 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:28 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0)
getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={<r3=>0x0, 0x3}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x4}}, 0x8, 0x8}, &(0x7f0000000340)=0x90)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e630c4082dfd4ef8c446e85bd0bb25b176238cf2fb7164cf5d969f265357ccc74881d18425d7787d6802c536eaaefaa00d64008cf46ab90fb32bc703951d87cc9aaa4fc58ddfbe8e868e5c4f80b9bd4609a25dd18ec10a71f8fb8e09e21161f7a578d8e93fd82c54b"], 0x0, 0x0, 0x0})

07:36:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

07:36:28 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10630840"], 0x0, 0x0, 0x0})

07:36:28 executing program 5:
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x803, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
sendto(r2, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=<r3=>0x0)
getpgrp(r3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000580)='memory.high\x00', 0x2, 0x0)
writev(r5, &(0x7f0000000700), 0x10000000000000ea)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000040))
io_setup(0x3ff, &(0x7f0000000100)=<r6=>0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r7=>0x0}, &(0x7f00000000c0)=0xc)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000380)={0x0, 0x0, [], {0x0, @bt={0x9, 0xfffffffffffff52c, 0x1, 0x3, 0x1f, 0x8, 0x7a, 0x2, 0xfffffffffffffc00, 0xfffffffffffff50b, 0x4, 0xffffffffffff0001, 0x5, 0x0, 0xa, 0x12}}})
capset(&(0x7f0000000140)={0x0, r7}, &(0x7f00000001c0)={0x6})
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000440)=0x10, 0x800)
io_submit(r6, 0x0, &(0x7f00000002c0))
semget$private(0x0, 0x5, 0x2000000001)
ioprio_set$pid(0x0, 0x0, 0x0)
request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffc)

[ 1322.157581] binder: 21336:21337 BC_REQUEST_DEATH_NOTIFICATION invalid ref -271261822
[ 1322.183308] binder: 21342:21344 BC_DEAD_BINDER_DONE 0000000000000000 not found
07:36:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

07:36:28 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1322.237173] binder: BINDER_SET_CONTEXT_MGR already set
[ 1322.315446] binder: 21336:21348 ioctl 40046207 0 returned -16
07:36:28 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1322.461331] binder: 21361:21362 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:29 executing program 2:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001580)=[{&(0x7f0000000400)="e4a82bcd5b007f18a28e9d46fe7f6c12d7b344eea8ca942ff7340d1c07c06d0242b50785deeacf4a77a41fc2e309aea9da03001b3772d590fcaaaf5cdbff6a597774dea45c37bcc055b91dd489028dd97152830d0d459d0e68f78bc44c4638c78b5b758d793b6f269cadfdedb04d5ff6c933f3ccd9a46e99c8e8c7db8724f0b7", 0x80}], 0x1, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="57d7efd5d48427b8bd1a8badf08b2bedd525598b4ad53828d106de0a4e2d607f647e5a45175fc4e5b52dedd0f9f59175c1c0bc328072b3eeb860493d6934594799a14cb24e5fdcb763ba1fbddab442a966519712c618a5e8f715b94e609dd98d674611aa8b4a6562723df28e3797a483617a16d1efe85d5bcfa6569d0a4cc5664afb8af63b4148aa10a519753316638b66d32d", 0x93}], 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0xced1, 0x0)

07:36:29 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fdc90200000000000000bbefc0fae1a24c75533c3d2c8854dc95bf431ca9e63d26163c32843335ea7f9153e59485682104ab840c1963a70c735764a1f1bbdf39c66234ba169efddf0de603e40be9a8d910f181d0d34fc69f272ead9a57fe502c921ea820b933d8fc0acbc490804e5d6b99eded87725eb878e359fab124ec765580639db27b138b46af83ac27dca57a9056b629903c6ca711ee36ab5016eb19bb33dcb77f9a35df218cb620243caa734bc268"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:29 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)

07:36:29 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0})

[ 1322.665848] binder: 21372:21373 unknown command 182781
[ 1322.721477] binder: 21380:21384 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1322.724787] binder: 21372:21373 ioctl c0306201 20012000 returned -22
[ 1322.728650] binder: 21372:21386 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:29 executing program 2:
rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000400), &(0x7f00000003c0), 0x8)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=<r1=>0x0)
mq_notify(r0, &(0x7f0000000540)={0x0, 0x0, 0x3, @tid=r1})
syz_genetlink_get_family_id$team(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}, 0x1}], 0x5, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semtimedop(0x0, &(0x7f0000000580)=[{0x2, 0x4, 0x1000}, {0x2, 0xfd8b, 0x1000}, {0x6, 0x6, 0x4f90fc55277a8a2d}], 0x3, &(0x7f0000000600))
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
clock_gettime(0x0, &(0x7f0000000700)={<r3=>0x0, <r4=>0x0})
setitimer(0x0, &(0x7f00000005c0)={{r3, r4/1000+10000}}, &(0x7f0000000440))
r5 = accept$alg(r2, 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x4, 0x4)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80000, 0x0)
recvmmsg(r5, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0xdc341f362a05dc0b, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x4000, 0x0)
renameat2(r7, &(0x7f0000000680)='./file0\x00', r6, &(0x7f00000006c0)='./file0\x00', 0x1)
ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, 0x0)
r8 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r8, 0xc0285629, &(0x7f0000000080)={0xfff, 0x9, 0x100000001, [], &(0x7f0000000040)=0x6})

07:36:29 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

07:36:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

[ 1322.898181] binder: BINDER_SET_CONTEXT_MGR already set
[ 1322.939515] binder: 21372:21386 ioctl 40046207 0 returned -16
[ 1322.973540] binder: 21372:21402 unknown command 182781
[ 1323.019625] binder: 21372:21402 ioctl c0306201 20012000 returned -22
[ 1323.032647] binder: 21372:21373 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:29 executing program 5:
munmap(&(0x7f000053c000/0x1000)=nil, 0x1000)
mlock2(&(0x7f000053a000/0x3000)=nil, 0x3000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42000, 0x8)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200000, 0x0)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000100)=0x1)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r1)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x9, 0x80000000, 0x10000, 0x8, 0x2, 0x401, 0x1, 0x523f9239, 0x4, 0x5}, 0xb)
mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)

07:36:29 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:29 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0})

07:36:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)

07:36:29 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0x0, 0x0, 0x0})

[ 1323.184260] binder: 21415:21416 BC_INCREFS_DONE u0000000000000000 no match
07:36:29 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0})

07:36:29 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1323.240184] binder: 21421:21424 unknown command 0
[ 1323.245102] binder: 21421:21424 ioctl c0306201 200000c0 returned -22
07:36:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

07:36:29 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7f})
gettid()
memfd_create(0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0)
r2 = socket$inet(0x2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r3=>0xffffffffffffffff}}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000340), r3, 0x1}}, 0x18)
inotify_add_watch(r1, &(0x7f0000000300)='./file0\x00', 0x1000b80)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)
bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0)

07:36:29 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1f, 0x123001)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0xd)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a", 0x4)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000380)={'veth0\x00', 0x7})
r2 = accept$alg(r1, 0x0, 0x0)
getpeername$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10)
sendmmsg$alg(r2, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, 0x7, 0x3, 0x1, 0x100, 0x0, 0x2, r3})
r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x2000000)
inotify_rm_watch(r1, r4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', r3})
accept4$alg(r1, 0x0, 0x0, 0x80000)

[ 1323.368454] binder: 21431:21432 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1323.390994] binder: BINDER_SET_CONTEXT_MGR already set
[ 1323.402697] binder: 21421:21435 ioctl 40046207 0 returned -16
07:36:30 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\n@@'], 0x0, 0x0, 0x0})

07:36:30 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

07:36:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)

07:36:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={<r3=>0x0, 0xe2, "8239223a25a72dc82c83df4c79a05b87ac7b957a92f397a55b9c48b5e3eba5bcfc26e480d978a74f20855c07074bf0d59b43c921cfd888de95548bdded3e81a82ba0274b0747d7fc36e5156b8a8ac359080b2c60c1bee889e14132995a2e2d7363261fa03cb49a045716f1cd1e24e176a90da27d7dd888dfa5c23a70a143dd2b44eec73576290921251329dd0b457e80795937012e135489c8012a0ebdb3673859ece900407c650ae9ce20cfc0af79764c0cb2a22b9d1d6ba3ac72cc71714d202a62a5e99e893629d8130c062d67cce7096c5170641e07369b837ab5afbef087bb49"}, &(0x7f0000000140)=0xea)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000380)={r3, 0xffffffffd19461cd, 0x20}, 0xc)
r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x10e, 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=r4, @ANYRES32=r4], @ANYRESHEX=r1, @ANYBLOB="51dfb8bcd6478db7b932cd69925f80201975115c5971ef1873cf6cedb4abcc8795cba3143a41897efd658ab4f570c294f12a4fefd55cd790a87ab907ca278ad7b836b9ab20013b2b584abffeffddcadfcfccb7dc4afc32d728c4731f0f7b6bf0d8e49683297122987aebef860200bcbac0b83586bd10cf97175180c3a148eb1726821aa8e60055d048a931762eddd5eb8f9da52075158f181df326740233f8a4543e2be93f26c3d76261ea78b4e00ce91a6f8b0cdade7cf3b2eecb53b1", @ANYRESOCT=r1, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRESHEX=r4, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64=r4], @ANYRESDEC=r4, @ANYRESDEC=r4, @ANYRES32=r4, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16=r0]], @ANYRES16=r4], 0x0, 0x0, 0x0})

07:36:30 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080), 0xfffffffffffffcfc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'nat\x00'}, &(0x7f00000000c0)=0x78)

07:36:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

[ 1323.700378] binder: BINDER_SET_CONTEXT_MGR already set
07:36:30 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00%@@'], 0x0, 0x0, 0x0})

07:36:30 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1323.725919] binder: 21465:21468 ioctl 40046207 0 returned -16
07:36:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0563444000000000"], 0x0, 0x0, 0x0})
ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x400)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8, 0x8000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000f543b2b35b0dabe1e59779208875df099148c2594c4c6f0c62f1f6c98411b70094325923125d41db333deb305422209754256c8eec87caea474b948673a72d56622219395247c089f5c8a08d8771e75de445fcc1"], 0x0, 0x0, 0x0})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040))

07:36:30 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400, 0x0)
fcntl$getflags(r0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0xa32, 0x22480)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000003a00)=""/4096)
write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
truncate(0x0, 0x0)
syz_emit_ethernet(0x140c117bc9625718, 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
msgget$private(0x0, 0x0)
lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
setfsgid(0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, r2, 0x80000)

07:36:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

07:36:30 executing program 2:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control/file0\x00', 0x40, 0x0)
clock_adjtime(0x7, &(0x7f00000002c0)={0x4, 0x8e0, 0x5, 0x5, 0x200, 0x7, 0x6, 0x1, 0xb83d, 0x120000000, 0x4, 0x696, 0x2, 0xffffffff, 0x5, 0x6, 0x80000001, 0x6, 0x3, 0x401, 0x0, 0x2, 0x799, 0x2, 0x558, 0x6})
rmdir(&(0x7f0000000040)='./control\x00')

[ 1323.870774] binder: 21480:21486 unknown command 1077945600
[ 1323.900981] binder: 21480:21486 ioctl c0306201 20008fd0 returned -22
07:36:30 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

[ 1323.981074] binder: 21491:21492 ioctl 1 200000c0 returned -22
07:36:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)

07:36:30 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
fcntl$lock(r0, 0xfed731c747b813d9, &(0x7f0000000040)={0x2, 0x3, 0x2, 0x7f, r1})
ioctl$FIBMAP(r0, 0x227e, &(0x7f00000003c0))
close(r0)

[ 1324.055571] binder: BINDER_SET_CONTEXT_MGR already set
07:36:30 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0})

[ 1324.085300] binder: 21491:21505 ioctl 40046207 0 returned -16
07:36:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)

07:36:30 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}, 0x45c)

[ 1324.147960] binder: 21491:21492 ioctl 1 200000c0 returned -22
07:36:30 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='io.bfq.we\v\xd8\xdb@\xa8\x13\x907M_ight\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)

07:36:30 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000200)={0x0, 0x0, {0x4, 0x1, 0xea0c, 0x5}})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x80000, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000180)={0xb92, "7b8226437911155f6ac3fd3d0b00a4cdc90ccb7450053541d26edbe0d4fbd8c9", 0x1, 0x1, 0x7fffffff, 0x2000000, 0xe})
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00')

[ 1324.225475] binder: 21520:21524 got reply transaction with no transaction stack
[ 1324.254422] binder: 21520:21524 transaction failed 29201/-71, size 0-0 line 2801
[ 1324.341152] binder: undelivered TRANSACTION_ERROR: 29201
07:36:30 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})

07:36:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0xe}}, 0x14}}, 0x0)

07:36:30 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400, 0x0)
fcntl$getflags(r0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0xa32, 0x22480)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000003a00)=""/4096)
write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
truncate(0x0, 0x0)
syz_emit_ethernet(0x140c117bc9625718, 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
msgget$private(0x0, 0x0)
lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
setfsgid(0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, r2, 0x80000)

07:36:30 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x400, 0x0)
fcntl$getflags(r0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0xa32, 0x22480)
socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000003a00)=""/4096)
write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
truncate(0x0, 0x0)
syz_emit_ethernet(0x140c117bc9625718, 0x0, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
msgget$private(0x0, 0x0)
lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
setfsgid(0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
rt_sigqueueinfo(0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup3(r3, r2, 0x80000)

07:36:30 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02634040"], 0x0, 0x0, 0x0})

07:36:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, 0x45c)

07:36:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0xf}}, 0x14}}, 0x0)

[ 1324.479565] binder: 21548:21550 unknown command 1077961474
[ 1324.489412] binder: BINDER_SET_CONTEXT_MGR already set
[ 1324.498676] binder: 21548:21550 ioctl c0306201 20008fd0 returned -22
[ 1324.517524] binder: 21552:21555 ioctl 40046207 0 returned -16
07:36:31 executing program 2:
mkdir(&(0x7f0000001b40)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0)
pread64(r0, &(0x7f0000000200)=""/121, 0x79, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
fstat(0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

07:36:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0011"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

[ 1324.580747] binder: 21548:21561 unknown command 1077961474
07:36:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x45c)

[ 1324.634602] binder: 21548:21561 ioctl c0306201 20008fd0 returned -22
07:36:31 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8)
setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @remote, r3}, 0xc)
sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000100000008005b000000100008000a00140000"], 0x125}}, 0x0)

07:36:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x15}}, 0x14}}, 0x0)

[ 1324.711576] binder: 21570:21575 unknown command 4352
[ 1324.722476] binder: 21570:21575 ioctl c0306201 20012000 returned -22
07:36:31 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03634040"], 0x0, 0x0, 0x0})

[ 1324.767089] binder: 21570:21580 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1324.806744] binder: BINDER_SET_CONTEXT_MGR already set
07:36:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}, 0x45c)

[ 1324.809528] binder: 21585:21586 unknown command 1077961475
[ 1324.833889] binder: 21570:21575 ioctl 40046207 0 returned -16
[ 1324.840304] binder: 21585:21586 ioctl c0306201 20008fd0 returned -22
[ 1324.853881] binder: 21570:21580 unknown command 4352
07:36:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070")
r1 = gettid()
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400})
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
ioctl(r0, 0x8, &(0x7f0000000040)="f12dca7c97a24836157f0b0b7cf4f79c8d868c5d44898ee1c16b3a1c73419f5897b9b66d52d5567abbc3bd292e456d851c609b682d783f4b72d50929daeceac2d7fbe3df7df3383b0ec13d61df4cdc2706def311c0d18f4ba56b564c592faa13b7094730d5b0d1acc3de785e7831c4b888ce6b1780d3f24059b386cd4b132adbb745b53c479a6434bb68a299b88695312f45c1a5e42f2680603aba1d5958d658e1d4ec75341f554d8dcb8b9e28ecf1b9d06fbdca2df261fb1bd72d345bbdf1bfdbe4e53e1ce1e519090ad4e25c6b0fda0dd979e5311c4197be1c")
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1000000000016)

[ 1324.868438] binder: 21570:21580 ioctl c0306201 20012000 returned -22
[ 1324.899999] binder: 21570:21572 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
07:36:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x6558}}, 0x14}}, 0x0)

07:36:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x911d, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x603, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x8100}}, 0x14}}, 0x0)

07:36:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x6bb420eb7166f5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr, 0xffffffff}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000440)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
getxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='trusted.overlay.opaque\x00', &(0x7f00000005c0)=""/77, 0x4d)
syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0x81, 0x2000)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80200, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

07:36:31 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04634040"], 0x0, 0x0, 0x0})

07:36:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c)

[ 1325.110928] binder: BINDER_SET_CONTEXT_MGR already set
[ 1325.119568] binder: 21604:21607 ioctl 40046207 0 returned -16
[ 1325.144603] binder: 21604:21605 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1325.183735] binder: 21615:21616 unknown command 1077961476
[ 1325.199773] binder: 21615:21616 ioctl c0306201 20008fd0 returned -22
07:36:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x20000590}}, 0x14}}, 0x0)

07:36:31 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b2d6734c"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x20000)
ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0})

07:36:31 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)

07:36:31 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05634040"], 0x0, 0x0, 0x0})

[ 1325.357181] binder: 21634:21637 unknown command 1282660018
[ 1325.365682] binder: 21634:21637 ioctl c0306201 20012000 returned -22
[ 1325.373338] ==================================================================
[ 1325.374254] binder: 21634:21637 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1325.380929] BUG: KASAN: use-after-free in __list_del_entry_valid+0xe6/0xf5
[ 1325.380949] Read of size 8 at addr ffff88809a051360 by task syz-executor.2/21626
[ 1325.380954] 
[ 1325.380971] CPU: 0 PID: 21626 Comm: syz-executor.2 Not tainted 5.0.0-rc6+ #74
[ 1325.380981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1325.380987] Call Trace:
[ 1325.381011]  dump_stack+0x172/0x1f0
[ 1325.381029]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.381052]  print_address_description.cold+0x7c/0x20d
[ 1325.381066]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.381081]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.381102]  kasan_report.cold+0x1b/0x40
[ 1325.450709]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.455393]  __asan_report_load8_noabort+0x14/0x20
[ 1325.460331]  __list_del_entry_valid+0xe6/0xf5
[ 1325.464895]  cma_cancel_operation+0x2d7/0xa10
[ 1325.469407]  rdma_destroy_id+0x8d/0xab0
[ 1325.473391]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1325.478547]  ? complete+0x61/0x80
[ 1325.482068]  ucma_close+0x115/0x320
[ 1325.485708]  ? ucma_free_ctx+0xb90/0xb90
[ 1325.489775]  __fput+0x2df/0x8d0
[ 1325.493069]  ____fput+0x16/0x20
[ 1325.496381]  task_work_run+0x14a/0x1c0
[ 1325.500314]  get_signal+0x1961/0x1d50
[ 1325.504121]  ? ucma_open+0x290/0x290
[ 1325.507843]  ? kernel_read+0x120/0x120
[ 1325.511734]  ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1325.516666]  ? common_file_perm+0x1d6/0x6f0
[ 1325.521034]  do_signal+0x87/0x1940
[ 1325.524589]  ? kick_process+0xef/0x180
[ 1325.528483]  ? setup_sigcontext+0x7d0/0x7d0
[ 1325.532812]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1325.538351]  ? fput+0x128/0x1a0
[ 1325.541641]  ? ksys_write+0x166/0x1f0
[ 1325.545448]  ? exit_to_usermode_loop+0x43/0x2c0
[ 1325.550120]  ? do_syscall_64+0x52d/0x610
[ 1325.554190]  ? exit_to_usermode_loop+0x43/0x2c0
[ 1325.558869]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1325.563499]  ? trace_hardirqs_on+0x67/0x230
[ 1325.567835]  exit_to_usermode_loop+0x244/0x2c0
[ 1325.572436]  do_syscall_64+0x52d/0x610
[ 1325.576335]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1325.581528] RIP: 0033:0x457e29
[ 1325.584727] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1325.603634] RSP: 002b:00007fac7d0c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1325.611344] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000457e29
[ 1325.618626] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000006
[ 1325.625905] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000
[ 1325.633187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac7d0c16d4
[ 1325.640464] R13: 00000000004cd7e0 R14: 00000000004dca00 R15: 00000000ffffffff
[ 1325.647762] 
[ 1325.649387] Allocated by task 21614:
[ 1325.653109]  save_stack+0x45/0xd0
[ 1325.656571]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 1325.661514]  kasan_kmalloc+0x9/0x10
[ 1325.665181]  kmem_cache_alloc_trace+0x151/0x760
[ 1325.669864]  __rdma_create_id+0x5f/0x4e0
[ 1325.673928]  ucma_create_id+0x1de/0x640
[ 1325.677906]  ucma_write+0x2da/0x3c0
[ 1325.681535]  __vfs_write+0x116/0x8e0
[ 1325.685248]  vfs_write+0x20c/0x580
[ 1325.688786]  ksys_write+0xea/0x1f0
[ 1325.692332]  __x64_sys_write+0x73/0xb0
[ 1325.696221]  do_syscall_64+0x103/0x610
[ 1325.700112]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1325.705293] 
[ 1325.706918] Freed by task 21626:
[ 1325.710289]  save_stack+0x45/0xd0
[ 1325.713747]  __kasan_slab_free+0x102/0x150
[ 1325.717984]  kasan_slab_free+0xe/0x10
[ 1325.721784]  kfree+0xcf/0x230
[ 1325.724901]  rdma_destroy_id+0x723/0xab0
[ 1325.728967]  ucma_close+0x115/0x320
[ 1325.732601]  __fput+0x2df/0x8d0
[ 1325.735891]  ____fput+0x16/0x20
[ 1325.739186]  task_work_run+0x14a/0x1c0
[ 1325.743077]  get_signal+0x1961/0x1d50
[ 1325.746878]  do_signal+0x87/0x1940
[ 1325.750432]  exit_to_usermode_loop+0x244/0x2c0
[ 1325.755017]  do_syscall_64+0x52d/0x610
[ 1325.758906]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1325.764086] 
[ 1325.765716] The buggy address belongs to the object at ffff88809a051180
[ 1325.765716]  which belongs to the cache kmalloc-2k of size 2048
[ 1325.778375] The buggy address is located 480 bytes inside of
[ 1325.778375]  2048-byte region [ffff88809a051180, ffff88809a051980)
[ 1325.790331] The buggy address belongs to the page:
[ 1325.795266] page:ffffea0002681400 count:1 mapcount:0 mapping:ffff88812c3f0c40 index:0x0 compound_mapcount: 0
[ 1325.805256] flags: 0x1fffc0000010200(slab|head)
[ 1325.809936] raw: 01fffc0000010200 ffffea0001344c08 ffffea00029e8208 ffff88812c3f0c40
[ 1325.817823] raw: 0000000000000000 ffff88809a050080 0000000100000003 0000000000000000
[ 1325.825702] page dumped because: kasan: bad access detected
[ 1325.831406] 
[ 1325.833035] Memory state around the buggy address:
[ 1325.837962]  ffff88809a051200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1325.845323]  ffff88809a051280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
07:36:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x705, 0x0, 0x0, {0x10, 0x2}}, 0x14}}, 0x0)

[ 1325.852684] >ffff88809a051300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1325.860038]                                                        ^
[ 1325.866529]  ffff88809a051380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1325.873974]  ffff88809a051400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1325.881328] ==================================================================
[ 1325.888696] Disabling lock debugging due to kernel taint
[ 1325.923025] Kernel panic - not syncing: panic_on_warn set ...
[ 1325.928960] CPU: 0 PID: 21626 Comm: syz-executor.2 Tainted: G    B             5.0.0-rc6+ #74
[ 1325.937624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1325.946974] Call Trace:
[ 1325.949574]  dump_stack+0x172/0x1f0
[ 1325.953266]  panic+0x2cb/0x65c
[ 1325.956473]  ? __warn_printk+0xf3/0xf3
[ 1325.960371]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.965046]  ? preempt_schedule+0x4b/0x60
[ 1325.969200]  ? ___preempt_schedule+0x16/0x18
[ 1325.973613]  ? trace_hardirqs_on+0x5e/0x230
[ 1325.977937]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.982615]  end_report+0x47/0x4f
[ 1325.986070]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.990743]  kasan_report.cold+0xe/0x40
[ 1325.994723]  ? __list_del_entry_valid+0xe6/0xf5
[ 1325.999397]  __asan_report_load8_noabort+0x14/0x20
[ 1326.004333]  __list_del_entry_valid+0xe6/0xf5
[ 1326.008831]  cma_cancel_operation+0x2d7/0xa10
[ 1326.013334]  rdma_destroy_id+0x8d/0xab0
[ 1326.017307]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 1326.022444]  ? complete+0x61/0x80
[ 1326.025905]  ucma_close+0x115/0x320
[ 1326.029553]  ? ucma_free_ctx+0xb90/0xb90
[ 1326.033623]  __fput+0x2df/0x8d0
[ 1326.036912]  ____fput+0x16/0x20
[ 1326.040198]  task_work_run+0x14a/0x1c0
[ 1326.044092]  get_signal+0x1961/0x1d50
[ 1326.047891]  ? ucma_open+0x290/0x290
[ 1326.051623]  ? kernel_read+0x120/0x120
[ 1326.055513]  ? debug_lockdep_rcu_enabled+0x71/0xa0
[ 1326.060447]  ? common_file_perm+0x1d6/0x6f0
[ 1326.064782]  do_signal+0x87/0x1940
[ 1326.068328]  ? kick_process+0xef/0x180
[ 1326.072221]  ? setup_sigcontext+0x7d0/0x7d0
[ 1326.076548]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1326.082114]  ? fput+0x128/0x1a0
[ 1326.085398]  ? ksys_write+0x166/0x1f0
[ 1326.089208]  ? exit_to_usermode_loop+0x43/0x2c0
[ 1326.093878]  ? do_syscall_64+0x52d/0x610
[ 1326.097937]  ? exit_to_usermode_loop+0x43/0x2c0
[ 1326.102608]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1326.107201]  ? trace_hardirqs_on+0x67/0x230
[ 1326.111529]  exit_to_usermode_loop+0x244/0x2c0
[ 1326.116118]  do_syscall_64+0x52d/0x610
[ 1326.120010]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1326.125195] RIP: 0033:0x457e29
[ 1326.128386] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1326.147291] RSP: 002b:00007fac7d0c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1326.155007] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000457e29
[ 1326.162275] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000006
[ 1326.169541] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000
[ 1326.176807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac7d0c16d4
[ 1326.184075] R13: 00000000004cd7e0 R14: 00000000004dca00 R15: 00000000ffffffff
[ 1326.192332] Kernel Offset: disabled
[ 1326.195962] Rebooting in 86400 seconds..