0xa0, 0x8, 0xd6, 0x7fffffff, 0x0, 0x7ff, 0x3, 0xfff, 0x7ff, 0x0, 0x7fff, 0x4, @perf_config_ext={0x8000, 0x800}, 0x24420, 0x9, 0x3ff, 0x1, 0x400, 0xeb, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x408002, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000200)={0x1, 0x0, 0x2080, {0x4, 0x0, 0x3}, [], "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", "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"}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x39) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000002280)={&(0x7f0000ffb000/0x2000)=nil, 0x7a1b, 0x807, 0x1000000, &(0x7f0000ff9000/0x4000)=nil, 0x1}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x10000, 0x9, 0x2}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r2, 0x80000000}, 0x8) 16:48:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 16:48:35 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x7e, &(0x7f0000000000)=[{}]}, 0x10) 16:48:35 executing program 0: memfd_create(0x0, 0x4) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r3 = dup2(r2, r0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000080)='.\x00', 0x1) 16:48:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x101000) getpeername(r0, &(0x7f00000004c0)=@ipx, &(0x7f00000001c0)=0x17) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000240)="2eabcbf8c9358d199d0a4a96d814d2b1e39b31bddee9f3670abbf95b68fa9471cc1042b4091d982e92ff665cd360d2ff5caa9c518720126ff6726084fbaef9017dfc00917b", 0x45, 0x4000000, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'s\bz\x02allar1\x00', 0x2000}) open$dir(&(0x7f0000000080)='./file0\x00', 0x202000, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}}, &(0x7f0000000380)=0x84) prctl$PR_MCE_KILL_GET(0x22) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0200080019a000020400601708000100040008009e55eb9da2e4e0af103e27698172bcb2c18afc2365843952d03d29e822861371036470765d4aa5756897"], &(0x7f0000000400)=0x18) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) r4 = getpid() ptrace$setopts(0x4206, r4, 0x4, 0x40) accept4$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={r3, @in={{0x2, 0x4e20, @empty}}, 0x6, 0x5}, &(0x7f0000000140)=0x88) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:35 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x7e, &(0x7f0000000000)=[{}]}, 0x10) [ 556.826836] binder: 20677:20678 BC_DEAD_BINDER_DONE 0000000000000000 not found 16:48:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x591002, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000002c0)=""/153) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x6040) ioctl$RTC_PLL_SET(r2, 0x401c7012, &(0x7f0000000380)={0xc7b, 0x9a1, 0x2b1, 0x7, 0x4a9a, 0xff}) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000180)=""/62) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000100)={0x5, 0x20000008000, r4, 0x0, r5, 0x0, 0x0, 0x3}) [ 556.879167] binder: 20677:20680 BC_DEAD_BINDER_DONE 0000000000000000 not found 16:48:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0xfffffffffffffffe, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffffe607106d}}, 0x0, 0x0, 0x0, "922686d0b71b2613c4668aaee409190aa756544635a19ee1d4461494b8b2e69c53709ae1a9e64878c7316bf6f19b37b0b8036962e585a2dd190f9ddd333a88d8a914d448336885113eeb1aeb5fc44493"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0xfdfdffff, 0x0}) 16:48:35 executing program 0: memfd_create(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x75a, 0x200) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000300)={0x9, 0xffffffffffffffff, {0x56, 0x8, 0x4, {0x1, 0x4}, {0x558e4fe1, 0xe478}, @ramp={0xff00000000000000, 0x100000000, {0x183d, 0x5775, 0xcf02, 0x2}}}, {0x57, 0x400, 0x0, {0xfff, 0x80000001}, {0x5, 0x9}, @period={0x59, 0x5, 0x0, 0x2, 0x7fffffff, {0x0, 0x8cf, 0x8001, 0xffffffffffffff83}, 0x3, &(0x7f00000002c0)=[0x1, 0x60807d6a, 0x9d0]}}}) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000000200)=""/145, 0x91}], 0x2, &(0x7f0000001640), 0x0, 0x0) fsync(r1) 16:48:35 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r0, &(0x7f0000000000)="fa672b325346", 0x6, 0x80, &(0x7f0000000040)=@ipx={0x4, 0x9, 0x6, "b7eb3bc5089e", 0x7}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x8f3}]}, 0x8) [ 557.112513] binder: 20709:20711 BC_REQUEST_DEATH_NOTIFICATION death notification already set 16:48:35 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0x7fffffff, 0x4, 0x4, 0x2}, {0x9, 0x0, 0x514, 0x3}, {0xfff, 0x9, 0x1c, 0x9}, {0x35de, 0x4e, 0x80000000, 0x9174}, {0x6, 0x3, 0xf5d1, 0xf05}, {0x10000, 0x7, 0x10000, 0xfffffffffffffc01}, {0x5, 0x100000001, 0x8, 0x9ab2}, {0x1, 0xfffffffffffffffd, 0x800, 0xffffffff}, {0x87, 0x1f, 0x7, 0x5}, {0x8, 0xf, 0x100}]}) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x1, 0x6, 0x45, 0x4, 0x100000000, 0x100000001, 0x8, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x1, 0x5, 0xedad, 0x5, 0x8}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x3f, 0x30}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0xfdfdffff, 0x0}) [ 557.337067] binder: 20724:20725 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 557.363637] binder_thread_write: 5 callbacks suppressed [ 557.363648] binder: 20724:20725 tried to acquire reference to desc 0, got 1 instead 16:48:35 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x82, &(0x7f0000000000)=[{}]}, 0x10) 16:48:35 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) sched_setattr(r0, &(0x7f0000000100)={0x30, 0x3, 0x0, 0x2, 0x8000, 0x20, 0x2b6800000000, 0x7f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000180)=""/70) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) ioctl$PPPIOCSPASS(r3, 0x40087447, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8001, 0x1000000, 0x7a, 0xbc}, {0x5, 0x100000000, 0x14ff, 0x1}, {0x8, 0x1, 0x8001, 0x3}, {0x4, 0xfad, 0x3, 0x9}, {0xffffffff, 0x1, 0x8}, {0x9, 0x8, 0x7f, 0xb14}, {0x1, 0xffffffff, 0x5, 0x2}]}) ioctl$TIOCNOTTY(r3, 0x5422) 16:48:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x140, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x32f0f2d5, 0x0) write$tun(r2, 0x0, 0x0) r3 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$capi20(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xa, 0x80005, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000100)={0x1ff, {{0xa, 0x4e24, 0x1a, @rand_addr="cc27557a4617cd928d947a416016a2f0", 0x15}}}, 0x84) ioctl$sock_SIOCGIFBR(r3, 0x8940, 0x0) syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0xbf, 0x608001) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\x11\x00\x00\x05\x00', 0x4ff}) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x88, 0xfffffffffffffffb, 0x6, 0x100000000}, 0x18, [0x2, 0x5, 0x0, 0x0, 0x5, 0x2b9804e6, 0xfffffffffffff46b, 0x8, 0xfffffffffffffffd, 0x1000, 0x7, 0x8, 0x9, 0x20, 0x6, 0x0, 0xfffffffffffffbff, 0xfffffffffffffc01, 0x9, 0x2, 0x4, 0x9, 0x8000, 0x3, 0x100000001, 0x9, 0xdd, 0x1, 0x2, 0x9, 0x5, 0x81b, 0x8, 0xff, 0x91, 0x2, 0x40, 0x0, 0x4264, 0x1, 0x2, 0xfffffffffffffffe, 0x3f, 0x400, 0x7fff000000000000, 0x225d, 0xfffffffffffffff8, 0x7, 0x400, 0x0, 0x2, 0xfffffffffffffffb, 0xfffffffffffffc01, 0x6, 0x1, 0x40, 0x80000000, 0x4, 0x3ff, 0x1392, 0x8, 0x4, 0xffffffff, 0x3], [0xbcc, 0x3, 0x1, 0x7, 0x0, 0x3, 0x1c0000, 0x100000001, 0x10001, 0x6e41, 0x9, 0x7, 0x1f80000, 0x1, 0x5, 0x80, 0x2, 0x9, 0x6, 0x4, 0x100000001, 0x3, 0x7f, 0x2, 0x3, 0x3f, 0x15, 0x5, 0x7fff, 0xe3, 0xb41b, 0x1, 0x3ff, 0x1, 0xff, 0x1, 0x5, 0x5, 0x3, 0x7, 0x4, 0x11e, 0x1, 0x8001, 0xfffffffffffffffc, 0x3b0d, 0x8000, 0xffffffffffffff3f, 0x4, 0x200, 0x1, 0x800, 0x0, 0x2641f114, 0xff, 0x7fffffff, 0x0, 0x7, 0x7a, 0x7ff, 0x4, 0x2, 0x3c1f, 0x4], [0x1, 0x8000, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffff9, 0x3f, 0x1000, 0x81, 0x6, 0x8000, 0x100000001, 0x7, 0x1, 0x80, 0x40, 0x10001, 0x100000001, 0x7f, 0x3ff, 0x401, 0x1f, 0x10001, 0x1, 0x1a4, 0x20, 0x3b, 0x2, 0x4, 0x5, 0x401, 0x3, 0x1f, 0x0, 0x7, 0x2, 0x3, 0xf53, 0x7, 0x100000001, 0x6, 0x8001, 0x6, 0xee5, 0x2, 0xffffffffffffffff, 0x1ff, 0x7a, 0x100, 0x0, 0x400, 0x40, 0xec, 0x4d22, 0x8000, 0x3, 0x9, 0x200, 0x6, 0x2, 0x1ff, 0x1], [0xffffffff, 0x800, 0x8000, 0x1, 0x1, 0x64b8, 0x5, 0x2, 0xfffffffffffffff9, 0x776, 0x9f2, 0x7, 0x8000, 0xffff, 0x9, 0x401, 0x5, 0x56c, 0xbb, 0x2, 0x20, 0x3, 0x8, 0x1, 0xfc7c, 0x2, 0x40, 0x3f, 0x401, 0x401, 0x3, 0x7ff, 0x6, 0x100, 0x6, 0xfffffffffffff000, 0x8, 0xe2, 0x1, 0x3, 0x1, 0x6, 0x2, 0x6, 0x2, 0x0, 0x0, 0x9, 0x7f, 0xffffffffffffffff, 0x9, 0x0, 0x1, 0x54b64ce4, 0x200, 0xf7, 0x8, 0xfffffffffffff278, 0x3, 0x8000, 0x3ff, 0x80000001, 0x61, 0x81]}, 0x45c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000500)) 16:48:35 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x82, &(0x7f0000000000)=[{}]}, 0x10) 16:48:35 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x4000, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x80, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1401000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x408, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 16:48:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="08631040"], 0x0, 0xfdfdffff, 0x0}) 16:48:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = dup(r0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000000)={0x100, "0952ea74d07f31050f2b519ee46498b24febc6b5248957bd5ceba025315e49e8", 0x3, 0x0, 0xffffffffffff89e4, 0x0, 0x10, 0x0, 0xfffffffffffffff8, 0x6}) [ 557.601252] binder: 20750:20751 BC_INCREFS_DONE u0000000000000000 no match [ 557.642599] binder: BINDER_SET_CONTEXT_MGR already set [ 557.676449] binder: 20750:20751 ioctl 40046207 0 returned -16 [ 557.679007] binder: 20750:20759 BC_INCREFS_DONE u0000000000000000 no match 16:48:35 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1, r1}) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20c00, 0x0) read$FUSE(r0, &(0x7f0000000080), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) 16:48:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x101000) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x4}]}, 0x2) 16:48:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09631040"], 0x0, 0xfdfdffff, 0x0}) 16:48:36 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000000)={0xc0, 0x0}, 0x8) [ 557.949375] binder: BINDER_SET_CONTEXT_MGR already set [ 557.980325] binder: 20776:20777 ioctl 40046207 0 returned -16 16:48:36 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x83, &(0x7f0000000000)=[{}]}, 0x10) 16:48:36 executing program 4: r0 = dup(0xffffffffffffffff) write$P9_RREADLINK(r0, &(0x7f0000000340)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x3, 0x0, [0x1, 0x8, 0x80, 0x22dfd91, 0x5, 0x3, 0x7, 0x400, 0x0, 0x0, 0x800, 0x4, 0x3, 0x4, 0x3ff, 0x2]}, {0x28, 0x0, [0xec0, 0xfffffffffffff31c, 0x8, 0x0, 0xe64, 0x0, 0xffffffffffffffe0, 0x200, 0x4ed3, 0xfff, 0x0, 0x9, 0x2b2, 0x3, 0x7, 0x4]}, {0xe, 0x0, [0x51, 0x9, 0xff, 0x7ff, 0x0, 0x0, 0x2, 0x8, 0x81, 0x8001, 0x56e, 0xfff, 0x8, 0x8f, 0x10001, 0xffffffffffffff9f]}, {0x8, 0x0, [0xffffffff, 0x5, 0x80000001, 0x5, 0x52, 0x7, 0x1, 0x7fffffff, 0x0, 0xab, 0x1, 0x10001, 0x3d1, 0xf2, 0x1000, 0x8001]}, {0x8, 0x0, [0x400, 0x7, 0x6, 0x3b6, 0x200, 0x6, 0x0, 0x6, 0x7, 0x3, 0x7f, 0x7, 0x5, 0x4e53, 0x7, 0x4]}, {0x20, 0x0, [0x6, 0x9, 0x9, 0xfffffffffffffffe, 0x9, 0x180000000000, 0x0, 0x5, 0xffffffff, 0x2, 0x2b89d6e0, 0xe03, 0x40, 0x2, 0x5, 0x9]}], r3, 0x1, 0x1, 0x1b0}}, 0x20) 16:48:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x4e20, @rand_addr=0x8df5}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0xfdfdffff, 0x0}) 16:48:36 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x0, @dev={0xac, 0x14, 0x14, 0x2b}, 0x4e24, 0x1, 'lblcr\x00', 0x1, 0x8a, 0x21}, {@remote, 0x4e24, 0x0, 0x8, 0x0, 0x6}}, 0x44) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x117, 0x3}}, 0x20) 16:48:36 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x83, &(0x7f0000000000)=[{}]}, 0x10) 16:48:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x57) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000001c0)={r3}) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x28000, 0x50) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40840) [ 558.192267] binder: BINDER_SET_CONTEXT_MGR already set 16:48:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x402) ioctl$TUNGETFILTER(r1, 0x800854db, &(0x7f0000000040)=""/108) [ 558.236946] binder: 20797:20799 ioctl 40046207 0 returned -16 [ 558.278498] binder: BINDER_SET_CONTEXT_MGR already set 16:48:36 executing program 0: memfd_create(0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="2b9138b42f1095d5feb03a85081c7884f4bdff2dab7aecc8ad70b95c63e1f9a138edb0c661d697479ac617928fe822b362d5f49e7eeaedddb3dd27ea18204d7b000efa2cb942c131b70c3ffbbd69e8926a35153f1653", 0x56}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0xffffffffffffffa4) 16:48:36 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x105480, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000000080)={0x0, @data}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) [ 558.332464] binder: 20797:20799 ioctl 40046207 0 returned -16 16:48:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x7fffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01634040"], 0x0, 0xfdfdffff, 0x0}) [ 558.513050] binder: BINDER_SET_CONTEXT_MGR already set [ 558.555594] binder: 20829:20832 ioctl 40046207 0 returned -16 [ 558.590400] binder: BINDER_SET_CONTEXT_MGR already set [ 558.614229] binder: 20829:20832 ioctl 40046207 0 returned -16 16:48:36 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x84, &(0x7f0000000000)=[{}]}, 0x10) 16:48:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x1, &(0x7f0000000040)=[{}]}, 0x8) 16:48:36 executing program 0: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd1bf, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000040)) 16:48:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x92, "ce56701ee2cd5fae902b16adff88e94607baebad11ba3171d1ab81a4c8444c30fe087d1b383fcef57dfb855fa5affdcb1afb73065207f6a20e4d3e4c03e006bc2fb60f6f44d05bfaa9107f01c023c2dd5eb106482bbe83c984378d0df2e0f19f312d1978e9f944827f377bf3c9e7191510dc99141068b4c157c313e2ae6eebf2051116099860179f93850d36aa6fadfa70b2"}, &(0x7f0000000200)=0x9a) 16:48:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="11634840"], 0x0, 0xfdfdffff, 0x0}) 16:48:37 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x84, &(0x7f0000000000)=[{}]}, 0x10) 16:48:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) [ 558.786327] binder: BINDER_SET_CONTEXT_MGR already set 16:48:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x3, 0x7ff, &(0x7f0000000040)=""/141, &(0x7f0000000100)=0x8d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 558.827633] binder: 20849:20852 ioctl 40046207 0 returned -16 16:48:37 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3f, 0x101000) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x4) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) recvfrom$unix(r0, &(0x7f0000000300)=""/55, 0x37, 0x20, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) keyctl$session_to_parent(0x12) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x4, 0x18f, 0x4, 0x8eb, 0x0, 0x8000, 0x20000, 0x2, 0x7, 0x7, 0x3, 0x78, 0x7, 0x7, 0x6, 0x5, 0x1ff, 0x7, 0x1, 0x0, 0x4, 0x61c, 0x5, 0x1000, 0x6, 0x4, 0x3, 0xfff, 0x58d, 0x40, 0xffff, 0x53cb, 0x10001, 0x10001, 0x1000, 0x100000000, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x482e, 0x6, 0x4, 0x7, 0x2, 0x8001, 0x2}, r2, 0x3, 0xffffffffffffff9c, 0x1) r3 = open(&(0x7f0000000100)='./file1\x00', 0x80, 0x400043) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000240)={0xffffffffffffffff, 0x100000}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x80000001, {{0x2, 0x4e24, @empty}}}, 0x84) 16:48:37 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f0000000100)={0x561, 0x0}, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/170) 16:48:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12634840"], 0x0, 0xfdfdffff, 0x0}) [ 559.069582] binder: 20878:20879 got reply transaction with no transaction stack [ 559.097210] binder: 20878:20879 transaction failed 29201/-71, size 0-0 line 2899 [ 559.119213] binder: 20878:20884 got reply transaction with no transaction stack [ 559.146358] binder: 20878:20884 transaction failed 29201/-71, size 0-0 line 2899 [ 559.167300] binder: undelivered TRANSACTION_ERROR: 29201 [ 559.172896] binder: undelivered TRANSACTION_ERROR: 29201 16:48:37 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85, &(0x7f0000000000)=[{}]}, 0x10) 16:48:37 executing program 0: memfd_create(0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:37 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="070a0440"], 0x0, 0xfdfdffff, 0x0}) 16:48:37 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85, &(0x7f0000000000)=[{}]}, 0x10) 16:48:37 executing program 0: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7fff, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x0, r1, 0x1}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x8) r3 = fcntl$dupfd(r2, 0x0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000000c0)=r4, 0x4) 16:48:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xcaacb35ae4d6cd94, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00', @remote}) [ 559.308099] binder: 20894:20899 unknown command 1074006535 [ 559.343672] binder: 20894:20899 ioctl c0306201 200003c0 returned -22 [ 559.372501] binder: 20894:20899 tried to acquire reference to desc 0, got 1 instead 16:48:37 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 559.423378] binder: 20894:20914 unknown command 1074006535 [ 559.442573] binder: 20894:20914 ioctl c0306201 200003c0 returned -22 16:48:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x5, {0xbb6, 0x4, 0x7ff, 0x5, 0x1f, 0x1}}) 16:48:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x3) 16:48:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07250440"], 0x0, 0xfdfdffff, 0x0}) 16:48:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0xfffffffffffffe36) finit_module(r0, &(0x7f0000000000)='trusted!)\x00', 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0x101, 0x1}, &(0x7f0000000140)=0x88) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="39000000cb95fe0db5e7ef75ff1a4456b2a50ade6bd8bd70a5895a36a6737c3230173a2dee650c2fe44c00ea6c911c62207c194611abe39d2ffff927ca"], &(0x7f0000000200)=0x41) 16:48:38 executing program 0: r0 = memfd_create(0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000040)={r1, r1, 0xffffffffffffffde, 0x18, &(0x7f0000000000)="3087506e086a0d8d1952a02705718d4a573551dcafad2047", 0x8, 0xffffffff, 0xffffffffffffffe1, 0x7, 0x4, 0x1, 0x6, 'syz0\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000000100)={0x0, 0x0}, 0x1) 16:48:38 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x86, &(0x7f0000000000)=[{}]}, 0x10) 16:48:38 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x86, &(0x7f0000000000)=[{}]}, 0x10) [ 559.863740] binder: 20944:20946 unknown command 1074013447 [ 559.892525] binder: 20944:20946 ioctl c0306201 200003c0 returned -22 16:48:38 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80002, 0x0) ioctl(r1, 0xc2b, &(0x7f0000000380)="469f968ebdcc37cd7ce2d3f49b2c62e207f8a535c416caf3ec2e17691e8bf5ab00222dcb98e6e40e2832c26fd9422fd4ccf8a197f9dec24db11e791b48c8d735243011b71489c1bbb535f9a09fc817293ea2657860d247d94b344c0e24e2fc5947e83cdaed28d6c8f0514e4d023fcd2d297852320767c81687c024e36dd8e38493bccf12204862222d2a65c32ab2b2db7883d23d7fcd8e3274a5a05769636dc5d3a8e42e7e139b439bae424e6824c46f8b2bb9b975") getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x11, 0x6, 0x1, 0x7, 0x7, 0xfff, 0x7, 0x0}, &(0x7f0000000200)=0xfffffffffffffdf1) socket$l2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000440)=""/229) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000891) close(r1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x9e, 0x5}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x31, &(0x7f000002eff0)={0xfffffffffffffecf, 0x0}, 0x8) 16:48:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x8) 16:48:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_CAP_AMBIENT(0x2f, 0x2000003, 0x0) fdatasync(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 559.940069] binder: 20944:20946 tried to acquire reference to desc 0, got 1 instead [ 560.023585] binder: 20944:20964 unknown command 1074013447 16:48:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x800, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x0, 0x8004) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 560.081531] binder: 20944:20964 ioctl c0306201 200003c0 returned -22 16:48:38 executing program 0: memfd_create(0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630540"], 0x0, 0xfdfdffff, 0x0}) 16:48:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x3fc, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x1, 0x3, 0xfffffffffffffff8, 0xc0d0}]}, 0x8) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x0, 0xffffffffffffa53b}) 16:48:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x8) pwrite64(r1, &(0x7f0000000100)="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", 0x1000, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001140)='/dev/input/mouse#\x00', 0x6, 0x88001) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) getpeername$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) 16:48:38 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 560.332480] binder: 20977:20981 unknown command 1074094855 16:48:38 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x87, &(0x7f0000000000)=[{}]}, 0x10) [ 560.384955] binder: 20977:20981 ioctl c0306201 200003c0 returned -22 16:48:38 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x87, &(0x7f0000000000)=[{}]}, 0x10) 16:48:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002180)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0x2141) setsockopt$inet6_int(r2, 0x29, 0x3f, &(0x7f00000021c0)=0x7f, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x18) 16:48:38 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 560.438456] binder: 20977:20981 tried to acquire reference to desc 0, got 1 instead [ 560.438987] binder: 20977:20995 unknown command 1074094855 16:48:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x1, 0x80000000]) [ 560.525954] binder: 20977:20995 ioctl c0306201 200003c0 returned -22 16:48:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07631240"], 0x0, 0xfdfdffff, 0x0}) 16:48:38 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x81, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x7ff, 0xffffffffffffffff, 0x0, 0x7, 0x8, 0x200, 0x9, 0x8, 0x4, 0x4, 0x8, 0x100000000, 0x6, 0x2, 0x1, 0x5, 0x3, 0x0, 0xb9, 0xffffffff, 0x1ff, 0x6, 0x0, 0x6, 0x5, 0x3, 0x5e0b, 0x9, 0x100000000, 0x100, 0x3, 0x80000000]}) 16:48:38 executing program 0: memfd_create(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) lseek(r1, 0x0, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x341303, 0x0) 16:48:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x40001, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000100)=0x2000) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r3, 0x1e}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x4, &(0x7f0000000540)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x101}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x162}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read'}}], [{@fowner_eq={'fowner', 0x3d, r7}}]}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r8, &(0x7f0000000180)=""/169, 0xa9) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) [ 560.717331] binder: 21018:21023 unknown command 1074946823 16:48:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @local}, 0x2a4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='dummy0\x00', 0xdd, 0x4942, 0x7fff}) set_mempolicy(0x4003, &(0x7f0000000000)=0x20, 0x6) [ 560.760253] binder: 21018:21023 ioctl c0306201 200003c0 returned -22 [ 560.796426] binder: 21018:21023 tried to acquire reference to desc 0, got 1 instead 16:48:39 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000040)={0xde, 0x0}, 0x4) 16:48:39 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x40) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xa) r1 = socket$kcm(0x2, 0x2000000000005, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, 0x0, 0xad3639cc0044c9f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 560.829903] binder: 21018:21037 unknown command 1074946823 [ 560.852683] binder: 21018:21037 ioctl c0306201 200003c0 returned -22 16:48:39 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x4000) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:39 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x88, &(0x7f0000000000)=[{}]}, 0x10) 16:48:39 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:39 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x88, &(0x7f0000000000)=[{}]}, 0x10) 16:48:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\acF@'], 0x0, 0xfdfdffff, 0x0}) [ 561.086402] binder: 21053:21054 unknown command 1078354695 16:48:39 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) 16:48:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3f, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 561.129437] binder: 21053:21054 ioctl c0306201 200003c0 returned -22 16:48:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0xb6, &(0x7f0000000000)=[{}]}, 0x180) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x163000) ioctl$TCFLSH(r1, 0x540b, 0x0) [ 561.194412] binder: 21053:21054 tried to acquire reference to desc 0, got 1 instead [ 561.234227] binder: 21053:21073 unknown command 1078354695 16:48:39 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e24, @multicast2}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x400) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000180)={0x5f0e9a98, 0x2, {0x1, 0x0, 0x81, 0x3, 0x7}}) 16:48:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630446"], 0x0, 0xfdfdffff, 0x0}) [ 561.297593] binder: 21053:21073 ioctl c0306201 200003c0 returned -22 16:48:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000000000000010000008100dc00060000008f030000010000000000000000000000001000000500000007000000fffffffff3ff00000f0000c0802b7389221975923e00000000080000000500004330f4c9d026d5c14c4789d98f8e38697693127af1fd6689b5c648ef210103eb50289902ffe20e6c8070fca136e12763502c3f75"]) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x50, &(0x7f0000000080)}, 0x10) 16:48:39 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000000c0)={r1, 0x3}) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 561.481029] binder: 21088:21091 unknown command 1174692615 [ 561.509876] binder: 21088:21091 ioctl c0306201 200003c0 returned -22 [ 561.561000] binder: 21088:21091 tried to acquire reference to desc 0, got 1 instead [ 561.621542] binder: 21088:21097 unknown command 1174692615 [ 561.671809] binder: 21088:21097 ioctl c0306201 200003c0 returned -22 16:48:39 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x89, &(0x7f0000000000)=[{}]}, 0x10) 16:48:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:40 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x89, &(0x7f0000000000)=[{}]}, 0x10) 16:48:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x10000}}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x800100f, 0x1, 0x3}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x305000, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080)=0xff, 0x4) 16:48:40 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x10280) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x81) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x2, 0xfdfdffff, 0x0}) 16:48:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x200, 0x5, 0x1, r1}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000140)=""/166) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) prctl$PR_MCE_KILL_GET(0x22) 16:48:40 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8a, &(0x7f0000000000)=[{}]}, 0x10) 16:48:40 executing program 0: memfd_create(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000540)=0x0) ptrace$peekuser(0x3, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x482001) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f00000005c0)={0xffffff1f, 0x0}, 0x8) r2 = getpid() r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x41, 0x9, 0x5, 0x2, 0xffffffffffff8000, 0x0, 0x1000, 0x20, 0xc, 0x3a, 0x5, 0x402, 0x8, 0xb, 0x6, 0x6, 0x101, 0x7b4, 0xb240, 0x5, 0x5, 0x7ffb, 0x6, 0xa17, 0xfff, 0x0, 0x9, 0x7, 0xfffffffffffffffb, 0x3, 0x1007, 0xdb65, 0xe5, 0x2000000000000, 0x7, 0x100000006, 0x200, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x20, 0x3f1, 0x100, 0xb, 0x0, 0x20}, r2, 0x5, 0xffffffffffffff9c, 0x1) write$binfmt_elf32(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xffc0, 0x0, 0x9, 0x80000001, 0x9, 0x3, 0x3, 0xfffffffffffffffb, 0x233, 0x38, 0x5e, 0xfff, 0x1, 0x20, 0x1, 0x1000, 0x1, 0x6}, [{0x6474e555, 0x0, 0x7d9, 0x1a17, 0x4, 0x7fffffff, 0x8001, 0xb6d}], "e42fab72b10230399ae995b9fc0d4728bfae909b5d0d55cfefdf7f6c9ae7ed2b596b07e4d2463983e688fddae4454bdbc9301cb8ade1bde6a05290f01a95a17578e2092e8f280245a65989c7cddfd9aab0dd2e1558d816145b9219e77e5fc3db1f5e896eb250edb0250f79208bae22", [[], [], []]}, 0x3c7) openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x102, 0x0) syz_open_procfs(r0, &(0x7f0000000580)='attr/fscreate\x00') [ 562.012247] binder: 21118 invalid dec weak, ref 1338 desc 0 s 1 w 0 16:48:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x94001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000080)={0x80000000, 0x8, "884c2bbcc2e4e0fbf3e8adcb2f2773a6fbfac86079da47691529ee94e5b9fd04", 0x5, 0x5, 0x3, 0x1000, 0x9, 0x1, 0x6, 0x7, [0x7, 0x0, 0x9, 0x1ff]}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000180)) 16:48:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x600, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xf41, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, [0x2, 0x5, 0x80000000, 0xfd7, 0x70ca, 0x9, 0x4, 0x10001, 0x0, 0x9, 0x5, 0x3, 0x7fffffff, 0x0, 0x4]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0xfff, 0x8}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x101040, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x8) 16:48:40 executing program 0: memfd_create(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@empty, @local, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000140)={@local, 0x0}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @remote}, &(0x7f0000000340)=0xc) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000006d80)={@loopback, @multicast2, 0x0}, &(0x7f0000006dc0)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000006e00)={@empty, @dev, 0x0}, &(0x7f0000006e40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006e80)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000006f80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006fc0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000070c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007100)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000007200)=0xe8) getpeername$packet(r0, &(0x7f0000007240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007280)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000073c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007400)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000007500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000007540)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000007640)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000007680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000076c0)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000007700)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000007800)=0xe8) getsockname(r1, &(0x7f0000007840)=@ll={0x11, 0x0, 0x0}, &(0x7f00000078c0)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007900)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000007a00)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000007a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007a80)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000007ac0)={@remote, 0x0}, &(0x7f0000007b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000007b40)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007bc0)={'lapb0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000007cc0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000007d00)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000005c0)={@rand_addr, 0x0}, &(0x7f0000000580)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007dc0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000007ec0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000007f00)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000008000)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000089c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008980)={&(0x7f0000008040)={0x930, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r6}, {0x20c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xdd08}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1cd6dcb8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r12}, {0xc0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfe1}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x220, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffae1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0x80, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r25}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r26}}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r28}, {0xbc, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffe}}, {0x8, 0x6, r30}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r31}}}]}}, {{0x8, 0x1, r32}, {0x168, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0xfffffffffffffc00, 0x1f, 0xfffffffffffffff9, 0x8536}, {0xffffffffffffffff, 0xd942, 0x3, 0x2f6}, {0x401, 0x3f, 0x800, 0xf1}, {0x9, 0x4, 0xf2, 0x9}, {0x45e, 0xff, 0xe7, 0x2}, {0x4, 0x6, 0xa9, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}]}}]}, 0x930}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:40 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x200000) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x61, "c00571e9eaca57b9461fec0ed74845893bb7b58da5e2d68e3848a467cd10349cc6cf27b3750c8889c2d969137cd462a761b21b24c5a014761808e26deb348f7419c817217c2da234175a477b141e7718ff1995595098b11678ac401669642def76"}, &(0x7f00000001c0)=0x69) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x1, 0x9, 0x0, 0x3, 0x4, 0xf79, 0x0, {r2, @in6={{0xa, 0x4e24, 0x1, @empty, 0x800}}, 0x1, 0x400, 0x7, 0x3d03, 0x80}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xa22, @empty}, @in6={0xa, 0x4e22, 0x5, @remote, 0x5}], 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:40 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:40 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8a, &(0x7f0000000000)=[{}]}, 0x10) 16:48:40 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40040, 0x68) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x5, @rand_addr="55523e4dbf27e6f5eef81b229a903b62", 0x8c000}}, 0x3, 0x5, 0x4, 0xe64, 0x4e7b}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x1}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}, @FOU_ATTR_AF={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048d5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xa33}, 0x1) 16:48:40 executing program 4: socketpair$unix(0x1, 0x7, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 16:48:40 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:40 executing program 0: memfd_create(0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x80000000, 0x1, 0x4, 0x195, 0x0, 0x0, 0x3a0a0, 0x5, 0xa300, 0x1, 0x5, 0x3ff, 0x90, 0x9, 0xf81f, 0x3, 0xfff, 0x7, 0x0, 0x6, 0x1, 0x9, 0x5, 0x0, 0x9, 0x2, 0x20, 0x2, 0x7, 0x3, 0x19, 0x97, 0x9, 0x100, 0x81, 0x38d, 0x0, 0x80000001, 0x6, @perf_bp={&(0x7f0000000100), 0xe}, 0x4000, 0xeff, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x3}, 0x0, 0x4, r0, 0x8) move_pages(r1, 0x6, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000080)=[0x4, 0xe426, 0x1, 0x6, 0x6], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:40 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x3, 0xfdfdffff, 0x0}) 16:48:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0xbb43ad6b) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fdatasync(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x323, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r1, 0x1) shutdown(r1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r4, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="f1c7f66f5416c66192d15b95af3777454978c83a8f75d0bc10b21cd707f8f1014ab30b07f9cfe0920e5ebb2172ed5d4dd306", 0x32}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0xfffffffffffffe5a) r6 = socket$inet(0x2, 0x5, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x17}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000001c0)={r7, 0x8, "c6466ba230e0a27d"}, &(0x7f0000000240)=0x10) r8 = fcntl$dupfd(r3, 0x406, r2) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000200)=0x40400, 0x4) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000000100)=""/22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) [ 562.776884] binder: 21118:21182 tried to acquire reference to desc 0, got 1 instead [ 562.781584] binder: 21118 invalid dec weak, ref 1338 desc 0 s 1 w 0 [ 562.858132] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:48:41 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x40, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000440)=""/133, &(0x7f0000000000)=0xfffffffffffffddd) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 562.913184] binder: 21200 invalid dec weak, ref 1342 desc 0 s 1 w 0 16:48:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000)={0xfffffed4, 0x0}, 0x8) 16:48:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000180)={{0x2, 0x4}, 0x10}, 0x10) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000000c0)={r2, 0x2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000100)={0x0, 0x0}, 0x8) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x2000000000, 0x101000) r4 = getpid() perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x101, 0x8, 0x1000, 0x2, 0x0, 0x4, 0x1, 0x4, 0x1f, 0x3, 0x1, 0x0, 0x7, 0x6, 0xfffffffffffffff8, 0x7f, 0xfffffffffffffffc, 0x2, 0x6, 0x7, 0x5, 0x2, 0x9, 0x6, 0xffffffffffff2bcd, 0x8, 0x7f, 0x6, 0x7, 0x6, 0x4, 0x5, 0x9, 0x1000, 0xfffffffffffff001, 0x6, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000001c0), 0xa}, 0x800, 0x7fff, 0xb25, 0x6, 0x7, 0x80000000, 0x8}, r4, 0x6, r3, 0x1) 16:48:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{}]}, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) 16:48:41 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000100)=[r0, r1]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x90c03) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) 16:48:41 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8c, &(0x7f0000000000)=[{}]}, 0x10) 16:48:41 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8c, &(0x7f0000000000)=[{}]}, 0x10) 16:48:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200080, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xc7, "4874c7dcd9ecde00936c99f0dac07b3216f647f4cdfd4a2768ca81173e824456e40ce0d550ff65ebe8a761ed7baa1584a15e56a7d21cf7f0834405b4596c86851b99056464b6494b672bfb45977444846f2d61bb9e4b6cd3600c63c80f727115e2bb162de68294976c15e5f315c689c1544217bf9799fd60f43054f69c4c0ab6a03a1adf0c1b0bb31e5193157e9c931f1b6e1b35391aad690ad50bbbc71965849ba91303e3fcc7425d7ca5d422d4567ff38d2e226a6399f5e0ebfb9e9b7bc5e9ab4a9bdcf76c56"}, &(0x7f0000000180)=0xcf) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x8f4}, &(0x7f0000000200)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4, 0xfdfdffff, 0x0}) 16:48:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @local, 0x3f}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0xfffffffffffffe00) 16:48:41 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r1, &(0x7f00000a8000)=[{&(0x7f0000000000)="580000001400192300bb4b80040d8c5628693232fba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x8000) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x101000) fcntl$addseals(r2, 0x409, 0xd) sendto$rxrpc(r2, &(0x7f0000000100)="088bc551d93002ec1d9d1d3d6312abea99f014c6a5890d7b0bcb1f30a8104cfa6c69ac6a00b53eeeacdfe91fa9c04ffc309a9cfcd2959e3b1fc1f9dfb1bb48ccc137ee9ef60d1874cbde071b1344187b2ba690f24e0d9fa10a7267ff140583d3804637e846bf8603649878eccf84022ac379f454", 0x74, 0x8000, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @mcast2, 0x4}}, 0x24) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000000c0)=""/36) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) 16:48:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x103100, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), 0x4) 16:48:41 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8d, &(0x7f0000000000)=[{}]}, 0x10) 16:48:41 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8d, &(0x7f0000000000)=[{}]}, 0x10) [ 563.706926] binder: 21200:21247 tried to acquire reference to desc 0, got 1 instead [ 563.708738] binder: 21200 invalid dec weak, ref 1342 desc 0 s 1 w 0 16:48:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffffffffff7f, 0x2) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x2, 0x2}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x4ace82, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$instantiate(0xc, r3, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '-)'}, 0x1b, r4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x4e24, @broadcast}}) [ 563.820831] binder: 21263 invalid dec weak, ref 1346 desc 0 s 1 w 0 16:48:42 executing program 0: memfd_create(0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000001200)='user\x00', &(0x7f0000001240)={'syz', 0x3}, &(0x7f0000001280)="f3f64c832caa517cd9e2bfdf73305c6ed57de04d3afb5d0020b5a40db3fae768b0eb5e1e4f64a16e371bb9043d7f520a6533cc2e19919a4be12de3777d30e1c1cf7a0107b15e04642fe03c1c08e5fc1126f1e6cd1d6f4f5f5d3e80431635cbfd26952b351db4de642c5df52f1353b3f488fecf6d7cfef28a7a3a3553b00dd2364aa475627e7d715723528d87c63ca114b1216e55de0ee2d1dbabf55d3aafc8dc21d78d529ee828d446d631ebcbf1fc2df2019a4b", 0xb4, 0xfffffffffffffffe) request_key(&(0x7f0000001340)='user\x00', &(0x7f0000001380)={'syz', 0x0}, &(0x7f00000013c0)='enc=', 0xffffffffffffffff) add_key(&(0x7f0000001480)='rxrpc_s\x00', &(0x7f00000014c0)={'syz', 0x0}, &(0x7f0000001500)="c0257cc368b9ea5495dce60adc04d1db6373c02a4334b24a9df58365148c3b05d84d3c7a13267287", 0x28, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000001440)='keyring\x00', &(0x7f0000001640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0x7, 0x5}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sm3-ce\x00'}}, &(0x7f0000000140)="28e7d6ad5a738cbea0751b6f971cfe7748823722ef9c4d189a0d425d0e627ca58cc6f0390df8f65b6d34cc5d0335e49e65e064414252b78213bc53f53729d5ccaee838fc0591d2d6ca3210115f4f08455736357bbc2ce57502854b24a3a8c4c9d986d13ea1e3e3934ab07aa1800e54bb9f369d0a11c84da4cd0574e2063f9e42cfdb20b9e4152a58fc11581ab700f184b0dbb26d6a01c8eed1a22cf1233b0bde852e6757d2fcc2b54fb6525fb6e6f9decac24bee3df8c00e586950868ebe87510a9b58174820ad4606df5940b5c7ed9545cb73c61bcd1efd73ed02a9b724f27a163b4ec78ba2892aca605367e001ab7ae890d390fd95b83ee77e7eb27049e87e2ce3969cc7c4aadd34cece567d957ce24a08350594a65aa96311758430279ddcb95623fafa69469b080034887bade292e902e1bc9d13fad5508b849519ce5fe05f7477d79b89d9c88b988a9fa60d3139986ff1625538911e6cbcbacf2f0475d1d85925a95ea3fcddcdbe42c96aa640c00af1c34f00dd87fa1b6fd9cfb08e7cdcfbcb1045259715398f1b2510d589b7ffd7fdfbff80bda13e847d6eddc96baf77f8b86678bf4331cbdaef3f4a2f874eb7c91e1f7b1d7886cf305b81728f5ff646d9362cf8593eadfefd05493aa6387fd74e3b36f5131ab54b8125a15320668335610702626512da36713ecc0ac5cb680af541e2deb9daaf29cbd4d3bb67f5062e4e69d60a7844543e414c17f69f3fceeba8ef5c8bf114fb2bfc076a8229e61c163e2f12268049ba4f4b7685146aed5a721284474ae7fae487f48fd1c2493f3045d7ea0f905049a1c9da5e69dfeda4bcc417629eae2683216c37988ec8b55bf059206f1c4bd6e2f63294872c51ec2e7cbd530f7c1546abbc96eb101c512ce74ccc87fb2ad047f738f42fe8cddd04942de1bc600d5397dd1928f6e3115d39aa5566e710f9009153936b71958ece2dd1b106ad2e3423a5a4b934512613e2f3f350283e9b5cc05e010cd07fabfc0281e31a967c76413dc1a6e37a0471e84f79447a4eb26ef41a0b3e72b25cda3f585411eb341014746d632e00acd99e30ef45d1aaee385c99b4db7b8fffe01e348aa160d4d0f1995814023852ada792d3a6b42690d8870107a5ac9f5b010b56481f49167b61e1b1f52df49e472d3d4d203d395c6771ad604bd2ec7124afe847f6b2c3f4b919d5aa7a0d25088889475911da29d622e9a8aeff6573d161553b06ee0c5e323d3a625574b1f1318b59440a0b5d78890a3513770a767e8c46c4971f9998fe0f7936ce68b8c8e342cd8880b37ee6ab64748c553437a8dc71a5a5c08082b76b6ae3eed5d9734f38237200282b64bed2a2a28960d3d893c7a18186f393f07e8933b45b1901ea5d9de5fb273f597aad91fdc016628dbc66d4d6e072962a81bdd93143524cad6e75d8ac7cf730cbb809c40389e4ec778c33b195fadb9c19e95f779488730c57d8b72d614ac05a6191c3e998a6ad061d92b153b0374fb3f1cc79de34fdde14bdf71bbf62ebdd27acaa6886cd4cdd69e4135b40ced5b86b0957e509a1665db2903f04ac9c9af084bb035ea8ca220882abb4f3517a46c9d65f4fb01af7c1cbd90439f1796efc5d5da58818f37a487c6a747cf5faac80d6d0ca1f754ad3fc1dba5ac1f17163143b5369e2e2d72f545120def90912850ba8e7ea926b8a68298ceff3e25e2cfddddd3d4f4938135bc4045df22549322f550787557d51ec4f60f698dde91f3e83376c970fe51c66d6ff3b5744d13255d6da2a0f0d367f42bedf7c766fe05443eeffd656a787ba682e972b6345aeffc86c18ed8cbf99e6db750a3613219a31d76ac94b02affcdc52c7bdc70f691837b83932ca6c576412a7032e2324475b5357362a3bc09b4146bd5983b04d08d80259321547b76705fe7a72015cf1dd517789417baf579bf99db6b38f9fba4c451a803c9b7b0fb845a4be7c9a13a2dbc0b72ba427ee5ca90504d6abd048cde0aae590d57008b4a5c5d22e6edc2a2d5fa2719441d9bd24f00758d2b244aa7d062dae639513fc824a1ba6d6914829fb9bec1e119a0f5301f8c4bb41ad51d13aee59552f8d5319e42c5ba76a5196265ad2a3177bbd899a1192b2f5daf785736ea35367ab8548cf8c30a7e42bdf0ccea4100cb575225e5bde8df4e2e3b74b35b1ae17bdc5e993bf56d85ef2254c1c6d04d695e7223a6c4119f17d6c887eff6a0aecb461d359f1bcdff22e850f0722d6c8fac6b51db4617223e704f50f671a90b0e1ae302a38a9c16542591a7801abcf5ebb7db0afd62a45137070c9010456eed37e10020c831d17c841fa70323f279cf69203727bcafdf6dca07c2f3c652aa131348c136862f4dae02922e338d38ae405c4fc69487bb297b55e0e4c9f7b4c450e41bbe2406afa44c67bd510fa390ff73abc0ad94bfd8597b786a8c470f899cbd5b08e3d995864e5b250a8dfb303782ad674dfd2c42ceab0be6d444e22b2cd009bd7c79ec3fb9459643108fdc9d6143fce3095c5cbbfc09c386e127f137f312dac9d191e3b81ca464570f97e4a0c433a29940c44baa3c7d10ea011724eea507a602920c7177841f49696426abbe8759848f30bf3e50ac688ccc40e945c0e427a1b9a2c1b8bf7df707f5a6647b3efe490009136f21f290eff68edfdc1490f2c0e140dba461dc8c4b704ac564b3f0b3b6a0f6eb0e86cd6cf1fc7c41d4d38ef0636050fc9bcabad95694d40b224326b884fe88d88e44a939eb576216fe03cbb84d7edddc7569c5dc36afeba5c89bea0d73e235fb94523bb1952e0c0198cc48ad8c9437fd78b16e6799550fd2a67400a0c3ba69568bae2c047c08eb8557e8a844b460b805a70a834349f56843f73bdfedcfb603d485cdf9cb9b94a6b89dbaf0d809145fcdef85adebb43e65314e9115ca82cc898bc2ab94ad4cb3e0a2c3a2c9bdd7e2882e93bd10dbcabfd6a477bc3e511ab4d03409b85a0125387498c1d61405ce33b9c5bb7792dd952b973a83a7469dde78a2750a13eea53bdfe733c4afefe24963e184efbdbb2e865d8c7e0230e667d31e4a9f4dd818a0adda88219dfc93e764556c4d083415e92ae12f54a2d545bc6ce30ccc5e6710d1fb9505236c28b4cfc393097bdb21cf35404f7cf3ce7e1e88be2926b8e772cc6a2d6da6f845d8d158eabbc3462c5c840d2e193da314bcbeb26cf5c46f1525613dd5535cd2c67cd6bab3e7033a9d01dd69b27e9b19c8e521468510b08e9a2ec5bcceafd64d0dfee0a44eb3d1b2088c6dae180341f7c8414bf04bb4e50d629f6e07673c98f1884e2aa277edc56d655831d30871ce6e9df3ea5c6b3f30855ad68bcbe7b1842b9692e91e5ac8215a203971afa76858f4655f375802b13d061267639c912c0ccf3bcb9a5968984a3468c220830982ef7f2875642394d2a4a5c099fa384f705e9392e0d5fe0dd5b05710c55c37ea174ebecd4c73ed6be3862b8b58e07e65e73218aa63c97d5e1695de850de507e9f13b699e9b170ddfccb6689dcdb2af2bcf1f59185f70ef69fef4cb1ac40f17ea78331bac369c87f9e1a6d1cce9b986099a6b128693bd1212cde26039d00eb7c2a96e7f15fd256ba94cbf817f363bb8b12485992d849d7eb562fd25e86ffafc5caa459ee8e80c548674af6614443df2dc1404eac410eec88473a25dbec106f75c771f3f7588feee6ce144410b816caddbf407164746389ebd2344d78fde29d5b140058b577680b8c46eaca7182a050d344e20f6bf6627407c528f1c9bb05327db066d5b5041862d25e2241ceffd7f7d36fa35b321e2334c161cf13862e165c4e82624d65fc131f0a2ee19ba0f6ac671606ea00084e142422125a941931e3685aa0d21c5bfe0f197e5f09b9fe263b310e7c12500197e8d5061b151962658fc38fca83d1189feb743fdb49e42932364acf272a9c108402e00ed663eaf05e2d2e47728ff0de7cc401a052f9a30c74aa20a4cd7cccaa7dacce8fea2b88aa33e6b7bf83e1844073c1d4b97ec1be4a8b4da286a03928b77ba40f71059cacbb298515c1c09c7199782c35bce58e2c7831ffedc5aa949d5bc4c33a2d5601bd152d8fb2f1c771dcffb788ccdbf6da1ef06558ae875879d037a381adf6c9620a53375c81d007645f937fb5672f5516fe1bbf9b7ca646407e5a97af40e1aeb4f996521c077ff0558d3b70c3e9e8b46a24c1eeead5d867c41cb7938ef9cb8d43839f3810a6dd9c963156fcc3955035e3bbba8f6bad7a1b6cc6d815a4a5a303034f46212e6cca3d7404d757da212230667222020814bb95b4bc0026ffcc519ae0baf07ff5b5ec43121771d8c3d89f46381ba07f66138dba9419971a1499e309afe1f4ebc529c0b88315b65bed89cb5b51b565855ed973b178730a3882b774a9ca726a8a7ccb4a0ad1f4ec214423ad8b72b87b57c2e5af6872c4dad4494e629b0b92ca791d7c185b9286fc2d1a7ecff84e18b178e91ac43a2003b5498e74220ac939a4f0141e792bb2675fb869ca1541bfc34e96178942105510a0a26c3eaf6a7bf2ea2b2f1144173a37d6ea86950ef5f3c5b2ac1cfac6c061ba019efaafbc1c02e321a48b45ead8bf7a931f9f1a3fb557b5054088e3eac0ab0128b970cb5a7827ac77c0c2e85ee0f021caf1787603c644d24e1d1902db6e98a723fa8c9b83f244eda0395f57961ee219b9134509fa323681b19ce60cbbd6441b6586fce5eafada514d83e8c0b460d7ef18a63492f9ecc3ae07301cd3a5d20884ad9e30f3a5e174b41bf549eea4f7829013f5acc193be8df4a4a1d54cf274a6e179ee0252fa11766317a88609583e5851419fd6eaa15b3e1807759ac24995283c03a9fcaa69fb81f94c9830a89da6bf6077761e48f2e3c813c4f1939bbeb35469e303c7dbcfb1ed7bedd3acd94adf82ef88ccd728233e97f323ea19f4bcd8b495fc9a25b3eb10b309f2415f0ec1379c61728a6bd5a5973af2487a53139e63a8f71e15cc95e4a2c0abed62c158eb4e1f3e80dd20a0217176436c133d682f9e5e4bb979315925b8bfda246b2499f231fbd317e7e47550ed1606db8a0f37be5b3a99ad470d11963eb6d6bac143c4a851089a17291b4d1bcdb695e1b93162db2026af05bd4cd795fd3c09d0369de7101ad7e0dc87bf53240c5397b72409058359b482b712c1fe5b74797e739a57c18f048c17ba3cc6a199322d16e37dbc13c3ec58f06b5539b9f4503c3303cc9e5a7bcdaade97f032c805bab1e67eab71a35a1519c998f92d93f1bd56339e41bcdda590a8408b27267467426969d3afb95c41bda35dc3d21b3ac32fd0616d416632504e5eb1c31618f4ab3a296481db5b2349e13b51ab00ff8ee06fd0dfe25d99cd3e51cb07af88dfe2d6a3650e4205ec0469415fbfe0ec1bcf0b9c63616f9c24818069d63535400f404e197e71874065eb5954ebfd721296a09252d038aa67d0f90f7ed5ceb94c624dc6eef4bb1642a42e845353305388f475c5427a2d56a3a18f43cc42f1a17d33509ddacf8b27ea397955a9c1fbda6923424568f9f3d1167ba02366726d96fc1cbc3192f62a1b5aa61298d31ff19eb721b19b74847a9acb3d70739bdc7096a0e832a5b8ff446420a0442d8452587dc8e4d8a97a6fccdcc899169bdca62cbe45bac1517fb2fad4748eaf524c72212e8d7a2186dda5801259b8119a9a0ee5fc99bcbc950247d7d70703afc7798b625abfc081ef2d3375fcb184f8c90842b2c7c948f172a88295d075f8588093bbae0a7663af93c41f52e1efde37e3eb30e78cb8153f0ea290874b8890e05935ffd2d05af3fa5002", &(0x7f0000001140)=""/178) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/58) 16:48:42 executing program 4: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) connect$l2tp(r2, &(0x7f00000012c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x0, 0x2, 0x4, 0x2}}, 0x26) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) setsockopt$sock_void(r0, 0x1, 0x200000, 0x0, 0x0) 16:48:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)) 16:48:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x5, 0xfdfdffff, 0x0}) 16:48:42 executing program 0: r0 = memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2000000007, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001640)='/dev/btrfs-control\x00', 0x2080, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001680)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x15}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 16:48:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xfff) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x1) write$P9_RSETATTR(r2, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x2, @local, 0x7}, @in={0x2, 0x4e21, @empty}], 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001300)={r3}) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001340)={0x0, 0x3, 0x0, 0x0, 0x8, 0x3, 0x4, 0xef, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x8, 0x5b, 0x2, 0x0, 0x5}}, &(0x7f0000001400)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000001440)={r5, 0x101}, &(0x7f0000001480)=0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:42 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8e, &(0x7f0000000000)=[{}]}, 0x10) 16:48:42 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8e, &(0x7f0000000000)=[{}]}, 0x10) 16:48:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@mcast1, 0x70, r3}) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x14000) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000240)={r3, @multicast2, @local}, 0xc) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000040)="db459732045ba7f7a028d4623ec36439d499d42467539178a52208f920df49861b", 0x21) [ 564.598957] binder: 21263:21301 tried to acquire reference to desc 0, got 1 instead [ 564.599487] binder: 21263 invalid dec weak, ref 1346 desc 0 s 1 w 0 [ 564.688830] QAT: Invalid ioctl 16:48:42 executing program 0: r0 = memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r0, 0x400854d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x400e1e93, 0x1, 0x6, 0x1}, {0x2, 0x81, 0x8001, 0x1}, {0x1, 0x808, 0xfffffffffffffe00, 0x2}, {0x1, 0xd0d, 0x2, 0x6}]}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 564.711442] binder: 21316 invalid dec weak, ref 1350 desc 0 s 1 w 0 16:48:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ptrace$pokeuser(0x6, r1, 0x3d5c, 0x7) [ 564.758073] QAT: Invalid ioctl 16:48:43 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x570, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x8000000000000000, 0x8, 0x147, 0x2, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x100, 0x100000001}, 0x8) perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x6bb, 0x3, 0x3, 0x1, 0x0, 0x1, 0x4000, 0x8, 0x4, 0x2, 0x100000001, 0x5, 0x1, 0xff, 0x577, 0xfffffffffffffffd, 0xbc, 0x1, 0x7, 0x800, 0x1, 0x2, 0x4000000000000, 0x8, 0x4, 0x4, 0x8, 0xffffffffffffffc0, 0x1, 0xffffffffffffffff, 0x3, 0xd2, 0x20, 0x800, 0x2, 0x7, 0x0, 0x9, 0x4, @perf_config_ext={0x0, 0x4}, 0x240, 0x5, 0x0, 0x0, 0x1de1, 0x3, 0x6eec}, r2, 0x5, r0, 0xa) 16:48:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECUREBITS(0x1c, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3f, 0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x7fff, 0x1, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0xfffffff9) 16:48:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6, 0xfdfdffff, 0x0}) 16:48:43 executing program 0: connect$caif(0xffffffffffffffff, &(0x7f0000000040)=@dbg={0x25, 0x0, 0x6}, 0x18) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={0xffffffffffffffff, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000000c0)={'s\x00'}, &(0x7f0000000100)=0x298) 16:48:43 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000080)={0x0, 0x10d002, 0x1, 0x2, 0x1b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:43 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8f, &(0x7f0000000000)=[{}]}, 0x10) 16:48:43 executing program 3: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x67, 0x80) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) 16:48:43 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x8f, &(0x7f0000000000)=[{}]}, 0x10) [ 565.488111] binder: 21316:21354 tried to acquire reference to desc 0, got 1 instead [ 565.488721] binder: 21316 invalid dec weak, ref 1350 desc 0 s 1 w 0 [ 565.526365] QAT: Invalid ioctl [ 565.553828] QAT: Invalid ioctl 16:48:43 executing program 0: memfd_create(0x0, 0x7) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)={0x7b49fbc5, 0x6, 0x1, 0x4, 0x5, [{0x11fd600000000, 0xd4, 0x800, 0x0, 0x0, 0x1188}, {0x6, 0x2, 0x4, 0x0, 0x0, 0x100}, {0x7f, 0x1fa9af06, 0x5, 0x0, 0x0, 0x2301}, {0x4, 0x7f, 0x3, 0x0, 0x0, 0x200}, {0x200, 0x5, 0x5, 0x0, 0x0, 0x404}]}) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x2, 0x380, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0xa00, 'bpq0\x00', 'ip6gretap0\x00', 'dummy0\x00', 'lo\x00', @empty, [0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xe4, 0xe4, 0x110, [@cgroup0={'cgroup\x00', 0x8, {{0x2}}}, @helper={'helper\x00', 0x24, {{0x0, 'sane-20000\x00'}}}]}}, @common=@mark={'mark\x00', 0x8, {{0xffffffe0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x19, 0x8, 0x3, 'veth0_to_bond\x00', 'rose0\x00', 'caif0\x00', 'hwsim0\x00', @random="f0c1dae12d08", [0x0, 0xff, 0xff, 0xff, 0xff, 0x528231f8f6371534], @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff], 0xfc, 0x168, 0x1b0, [@m802_3={'802_3\x00', 0x8, {{0x0, 0x3df0e312, 0x7, 0x3}}}, @rateest={'rateest\x00', 0x3c, {{'veth1\x00', 'veth1_to_hsr\x00', 0x1, 0x3, 0x3, 0x1, 0x5, 0x7ff, 0x2, 0x1}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"31581b4064feb90ad1e9302c4bd3d7f452e6f21676cf691130c5eb97058c"}}, @common=@AUDIT={'AUDIT\x00', 0x4, {{0x1}}}]}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x1, 0x58dcdea9, 0xfffffffffffff000}}}}]}]}, 0x3d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 565.597556] binder: 21369 invalid dec weak, ref 1354 desc 0 s 1 w 0 16:48:43 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x81, 0x0) memfd_create(0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x5, 0x0, 'client1\x00', 0x2, "8e2e1c8cba1a9852", "609feb309095e2707d5ed65241d3a8084935f118b7cb3292f2e5aaa94b09791c", 0x0, 0x3ff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r2, 0x400) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x18) 16:48:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_ifreq(r0, 0x891a, &(0x7f0000000040)={'hwsim0\x00', @ifru_mtu=0x2}) 16:48:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x20a, 0x45497778, 0x1, @stepwise={0xffffffffffffff00, 0x3ff, 0x7, 0x65c3, 0x4, 0x3}}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:44 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x407, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) 16:48:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000080)={0x0, 0x0, @stop_pts=0x9}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:44 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x90, &(0x7f0000000000)=[{}]}, 0x10) 16:48:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7, 0xfdfdffff, 0x0}) 16:48:44 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x90, &(0x7f0000000000)=[{}]}, 0x10) [ 566.358130] binder: 21369:21407 tried to acquire reference to desc 0, got 1 instead [ 566.361961] binder: 21369 invalid dec weak, ref 1354 desc 0 s 1 w 0 16:48:44 executing program 4: socketpair$unix(0x1, 0x36d719d8033e88c6, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:44 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x8000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x955, 0x9, 0x7, 0x401, 0x2f}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x8) 16:48:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfffffffffffffff8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0xfffffffffffffe95, 0x0}, 0x93) 16:48:44 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond_slave_1\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0x8f, &(0x7f00000000c0)=""/120, &(0x7f0000000140)=0x78) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:44 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) read(r0, &(0x7f0000ec6000)=""/50, 0xbf) timer_create(0x0, &(0x7f0000001ec0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 16:48:44 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x440600, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0xfffffffffffff800, 0xffffffff, 0x100, 0xca}) splice(r0, &(0x7f0000000040)=0xa, r1, &(0x7f00000000c0)=0xb, 0x100, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x2ec) 16:48:44 executing program 0: memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x40) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) 16:48:44 executing program 3: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="355ae313983db3cb508d051fd916c40f9dfbe39f8083df88c494704fced57f9b22c782620cd1d17f900337507ec1f29df2f38e7f114a928edf63c81c3e0e4efcfa4e6d9d5dd59afb859f9ab26ab747f1542f77086ba81a9f80c0772a7b2ab8ebfcba70dca63128755a2bab8b76c77ca165df15ef65ad8d74984e12a4f0041ec71db18305bff8b955e33d1536e4eb0124b88bbd04d5575e9fc0ced372590d40e615364c1651ab8c5fd9fa374d45682174f395a61921ae0f16ee8653cf1931fc8662d6d8709fbcf707d603e9cb114ec6eec2a4807e94", 0xd5, 0x0) clone(0x2102003ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='#p}\xb1') openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:48:45 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x91, &(0x7f0000000000)=[{}]}, 0x10) 16:48:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xa, 0xfdfdffff, 0x0}) 16:48:45 executing program 4: r0 = socket(0x100000800000011, 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') sendfile(r0, r1, &(0x7f0000000040)=0x20004, 0x7) 16:48:45 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:45 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x91, &(0x7f0000000000)=[{}]}, 0x10) 16:48:45 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000001740), 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 16:48:45 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x92, &(0x7f0000000000)=[{}]}, 0x10) [ 567.259402] binder: 21424:21475 tried to acquire reference to desc 0, got 1 instead [ 567.260936] binder_dec_ref_olocked: 1 callbacks suppressed [ 567.260950] binder: 21424 invalid dec weak, ref 1358 desc 0 s 1 w 0 16:48:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreq(r1, 0x0, 0x24, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) syz_execute_func(&(0x7f0000000140)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dcc8fc8bca237ab6f") 16:48:45 executing program 0: r0 = memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400000) ioctl$RTC_IRQP_READ(r2, 0x8004700b, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) fchmod(r0, 0x10) [ 567.384085] binder: 21495 invalid dec weak, ref 1362 desc 0 s 1 w 0 16:48:45 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x203, 0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000000)={0x0, 0x100000}) 16:48:45 executing program 0: r0 = memfd_create(0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xa}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x428, 0x174, 0x0, 0x174, 0x0, 0x0, 0x394, 0x394, 0x394, 0x394, 0x394, 0x4, &(0x7f00000000c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, 0xffffffff, 0xffffffff, 'veth1_to_bridge\x00', 'ipddp0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x8}, 0x0, 0x114, 0x174, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00'}}, @common=@unspec=@mark={0x2c, 'mark\x00', 0x1, {0x0, 0x8, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x8001, [0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffff183], 0xc, 0x5}, {0x100, [0x80000000, 0x4, 0x8001, 0x1f, 0x3, 0x49], 0x3f}}}}, {{@ip={@multicast2, @broadcast, 0xffffff00, 0xffffff00, 'dummy0\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0x3, 0x72}, 0x0, 0xe4, 0x144, 0x0, {}, [@common=@unspec=@state={0x24, 'state\x00', 0x0, {0x9}}, @common=@unspec=@cgroup0={0x28, 'cgroup\x00', 0x0, {0x3f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x9, 0xfff, 0x0, 0x4, 0x408000000000000, 0x5e1], 0x7fff, 0xfff}, {0xde2, [0x8001, 0x7f, 0x4, 0x2, 0x5, 0x200], 0x7, 0x1000}}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x484) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000780)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000000080)={0x229a1b4622a8af67, 0x0}, 0xfffffffffffffdf6) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000600)={'team0\x00', {0x2, 0x4e24, @empty}}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x406800, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000640)={0xb, @raw_data="533a6c6728891132ceede499e2fd48441c72e7b9f9b1716fc777b255a6d1ada4326e8553cb3222a985b76bb2982ee0b2768e57f466497794d676332db438d625a93b712e911e11f69e4e67b3ba519248f14b8d35cd9ae93477e7f6694921c420e944e38a11be05189c82a2cde4324333d5369fa1f868248a4be2001fc21b93b02373ca3724cfc0cac4e08e57b6a5d75d41d8009ebfe085efff6533c2b1aa4a1244494b6780d5066ce38bdb402d63c402d924e99791715c0c6b4ecc086ff468b361c8e12a4998fb68"}) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0x8029, 0x3}) 16:48:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7, 0xfdfdffff, 0x0}) 16:48:45 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x93, &(0x7f0000000000)=[{}]}, 0x10) [ 567.738769] binder: 21519 invalid dec weak, ref 1364 desc 0 s 1 w 0 16:48:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x48, 0xfdfdffff, 0x0}) 16:48:46 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:46 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x92, &(0x7f0000000000)=[{}]}, 0x10) 16:48:46 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x440600, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0xfffffffffffff800, 0xffffffff, 0x100, 0xca}) splice(r0, &(0x7f0000000040)=0xa, r1, &(0x7f00000000c0)=0xb, 0x100, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x2ec) 16:48:46 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x94, &(0x7f0000000000)=[{}]}, 0x10) [ 568.178464] binder: 21495:21528 tried to acquire reference to desc 0, got 1 instead [ 568.179026] binder: 21495 invalid dec weak, ref 1362 desc 0 s 1 w 0 16:48:46 executing program 0: r0 = signalfd(0xffffffffffffff9c, &(0x7f0000000000)={0x9f}, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000180)=0xe8) r2 = getgid() fchown(r0, r1, r2) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:46 executing program 3: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1000000000004) writev(r1, &(0x7f00000a8000)=[{&(0x7f0000000000)="580000001400192300bb4b80040d8c5628693232fba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x8000) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x101000) fcntl$addseals(r2, 0x409, 0xd) sendto$rxrpc(r2, &(0x7f0000000100)="088bc551d93002ec1d9d1d3d6312abea99f014c6a5890d7b0bcb1f30a8104cfa6c69ac6a00b53eeeacdfe91fa9c04ffc309a9cfcd2959e3b1fc1f9dfb1bb48ccc137ee9ef60d1874cbde071b1344187b2ba690f24e0d9fa10a7267ff140583d3804637e846bf8603649878eccf84022ac379f454", 0x74, 0x8000, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @mcast2, 0x4}}, 0x24) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000000c0)=""/36) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r3) [ 568.289345] binder: 21541 invalid dec weak, ref 1368 desc 0 s 1 w 0 16:48:46 executing program 0: memfd_create(0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r2, &(0x7f00000003c0)=""/72, 0xbb43ad6b) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) fdatasync(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07631240"], 0x0, 0xfdfdffff, 0x0}) 16:48:46 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x95, &(0x7f0000000000)=[{}]}, 0x10) 16:48:46 executing program 0: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0xfffffec2, 0x0}, 0xfffffe83) [ 568.637736] binder: 21562:21564 unknown command 1074946823 [ 568.658898] binder: 21562:21564 ioctl c0306201 200003c0 returned -22 16:48:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4c, 0xfdfdffff, 0x0}) 16:48:47 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd1bf, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000040)) 16:48:47 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x93, &(0x7f0000000000)=[{}]}, 0x10) 16:48:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x7fffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20c00, 0x0) read$FUSE(r0, &(0x7f0000000080), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) 16:48:47 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x96, &(0x7f0000000000)=[{}]}, 0x10) [ 569.080681] binder: 21541:21578 tried to acquire reference to desc 0, got 1 instead [ 569.081238] binder: 21541 invalid dec weak, ref 1368 desc 0 s 1 w 0 16:48:47 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1, r1}) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:47 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x591002, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000002c0)=""/153) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x6040) ioctl$RTC_PLL_SET(r2, 0x401c7012, &(0x7f0000000380)={0xc7b, 0x9a1, 0x2b1, 0x7, 0x4a9a, 0xff}) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000180)=""/62) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000100)={0x5, 0x20000008000, r4, 0x0, r5, 0x0, 0x0, 0x3}) 16:48:47 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd1bf, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000040)) [ 569.193517] binder: 21593 invalid dec weak, ref 1374 desc 0 s 1 w 0 16:48:47 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0xffffffffffffff01, 0x0) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x40000042000, 0x4d) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x104, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) 16:48:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:47 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd1bf, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000040)) 16:48:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x60, 0xfdfdffff, 0x0}) 16:48:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl(r0, 0x6, &(0x7f0000000000)="1893559b7890a3bfd85188c59865fed21785842e7a7c367c0ffe9601e1c8352934cbabd6162276f0730327f81655fc12a6115364ab7d2de944f38892e5c36fca585cc4f3fa7d57386f2a8a090c9a09254bd66331273e731f045ba2da3f1618ef9a75d1a1e48e7b7b2cf8add8fba93551181b") 16:48:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:48 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd1bf, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='scalable\x00', 0x9) 16:48:48 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x97, &(0x7f0000000000)=[{}]}, 0x10) 16:48:48 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x94, &(0x7f0000000000)=[{}]}, 0x10) [ 569.977887] binder: 21593:21621 tried to acquire reference to desc 0, got 1 instead [ 569.980756] binder: 21593 invalid dec weak, ref 1374 desc 0 s 1 w 0 16:48:48 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xd1bf, 0x80000) 16:48:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa000, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 570.070499] binder: 21635 invalid dec weak, ref 1382 desc 0 s 1 w 0 16:48:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:48 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) bind$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 16:48:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000080)={0x0, 0x0}, 0x8) r1 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x4) ioctl$TIOCCONS(r1, 0x541d) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) 16:48:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x68, 0xfdfdffff, 0x0}) 16:48:49 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x101, &(0x7f0000ffc000/0x4000)=nil, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:49 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x95, &(0x7f0000000000)=[{}]}, 0x10) 16:48:49 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x98, &(0x7f0000000000)=[{}]}, 0x10) [ 570.857265] binder: 21635:21662 tried to acquire reference to desc 0, got 1 instead [ 570.861335] binder: 21635 invalid dec weak, ref 1382 desc 0 s 1 w 0 16:48:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:49 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x220200, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {0x0}, {}, {}]}) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x3, &(0x7f0000ffd000/0x3000)=nil, 0x4) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000180)={r2, 0x2}) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x20000, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5) getpeername$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0xfffffffffffffcc9) 16:48:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:49 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) [ 571.161139] binder: 21691:21692 Release 1 refcount change on invalid ref 0 ret -22 16:48:49 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6c, 0xfdfdffff, 0x0}) 16:48:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xce2b, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:49 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:49 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x96, &(0x7f0000000000)=[{}]}, 0x10) 16:48:49 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x99, &(0x7f0000000000)=[{}]}, 0x10) [ 571.766638] binder: 21678:21704 tried to acquire reference to desc 0, got 1 instead 16:48:50 executing program 3: memfd_create(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) [ 571.814470] binder: 21716:21717 Release 1 refcount change on invalid ref 0 ret -22 16:48:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)={0x2, 0x4c7673a5, [{0x4, 0x0, 0xfff}, {0x20, 0x0, 0x1}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r1, &(0x7f0000000000)=@random={'security.', '$#nodevposix_acl_access{\x00'}, &(0x7f0000000040)=""/194, 0xc2) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:50 executing program 3: memfd_create(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x88000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) [ 571.983320] binder: 21728:21729 Release 1 refcount change on invalid ref 0 ret -22 16:48:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8, 0x800) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000000}) r2 = socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x5) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x111000) ioctl$TIOCSBRK(r4, 0x5427) 16:48:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 572.177574] binder: 21739:21740 Release 1 refcount change on invalid ref 0 ret -22 16:48:50 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9a, &(0x7f0000000000)=[{}]}, 0x10) 16:48:50 executing program 3: memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x74, 0xfdfdffff, 0x0}) 16:48:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:50 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x97, &(0x7f0000000000)=[{}]}, 0x10) [ 572.654959] binder: 21718:21745 tried to acquire reference to desc 0, got 1 instead [ 572.656087] binder_dec_ref_olocked: 3 callbacks suppressed [ 572.656101] binder: 21718 invalid dec weak, ref 1402 desc 0 s 1 w 0 16:48:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/55) [ 572.726880] binder: 21753:21755 Release 1 refcount change on invalid ref 0 ret -22 16:48:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) [ 572.778879] binder: 21761 invalid dec weak, ref 1410 desc 0 s 1 w 0 16:48:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1b, &(0x7f000002eff0)={0x0, 0x0}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2da, &(0x7f0000000180)}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0xfffffffffffeffff) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 16:48:51 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) [ 572.920734] binder: 21770:21771 Release 1 refcount change on invalid ref 0 ret -22 16:48:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:51 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:51 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7a, 0xfdfdffff, 0x0}) 16:48:51 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x65, &(0x7f0000000000)=[{}]}, 0x10) 16:48:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:51 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:51 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x98, &(0x7f0000000000)=[{}]}, 0x10) 16:48:51 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9c, &(0x7f0000000000)=[{}]}, 0x10) [ 573.577918] binder: 21761:21795 tried to acquire reference to desc 0, got 1 instead [ 573.586484] binder: 21761 invalid dec weak, ref 1410 desc 0 s 1 w 0 16:48:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x300, 0xfdfdffff, 0x0}) 16:48:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 573.870156] binder: 21827 invalid dec weak, ref 1419 desc 0 s 1 w 0 16:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) [ 573.931016] binder: 21830:21831 Acquire 1 refcount change on invalid ref 0 ret -22 [ 573.972047] binder: 21830:21831 Release 1 refcount change on invalid ref 0 ret -22 16:48:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:52 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x99, &(0x7f0000000000)=[{}]}, 0x10) 16:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) [ 574.130018] binder: 21839:21840 Acquire 1 refcount change on invalid ref 0 ret -22 16:48:52 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9d, &(0x7f0000000000)=[{}]}, 0x10) [ 574.170678] binder: 21839:21840 Release 1 refcount change on invalid ref 0 ret -22 16:48:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:52 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3e, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x500, 0xfdfdffff, 0x0}) 16:48:52 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:52 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x80) 16:48:52 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9a, &(0x7f0000000000)=[{}]}, 0x10) 16:48:52 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9e, &(0x7f0000000000)=[{}]}, 0x10) [ 574.670077] binder: 21827:21869 tried to acquire reference to desc 0, got 1 instead [ 574.670611] binder: 21827 invalid dec weak, ref 1419 desc 0 s 1 w 0 16:48:52 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:48:53 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 574.769081] binder: 21883 invalid dec weak, ref 1423 desc 0 s 1 w 0 16:48:53 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 16:48:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4600, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) [ 575.050892] binder: 21904 invalid dec weak, ref 1425 desc 0 s 1 w 0 [ 575.076775] binder: 21904:21905 unknown command 0 [ 575.090877] binder: 21904:21905 ioctl c0306201 200003c0 returned -22 16:48:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x600, 0xfdfdffff, 0x0}) 16:48:53 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 16:48:53 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:53 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9f, &(0x7f0000000000)=[{}]}, 0x10) 16:48:53 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9b, &(0x7f0000000000)=[{}]}, 0x10) [ 575.558235] binder: 21883:21910 tried to acquire reference to desc 0, got 1 instead [ 575.566800] binder: 21883 invalid dec weak, ref 1423 desc 0 s 1 w 0 16:48:53 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) [ 575.672091] binder: 21926 invalid dec weak, ref 1429 desc 0 s 1 w 0 16:48:54 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:54 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x5d, &(0x7f0000000000)=[{}]}, 0x10) 16:48:54 executing program 3: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x5b, &(0x7f0000000000)=[{}]}, 0x10) 16:48:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x700, 0xfdfdffff, 0x0}) 16:48:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:54 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa0, &(0x7f0000000000)=[{}]}, 0x10) 16:48:54 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9c, &(0x7f0000000000)=[{}]}, 0x10) 16:48:54 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:54 executing program 3: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x21, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 576.467086] binder: 21926:21954 tried to acquire reference to desc 0, got 1 instead [ 576.471746] binder: 21926 invalid dec weak, ref 1429 desc 0 s 1 w 0 16:48:54 executing program 4: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f000002eff0)={0x0, 0x0}, 0x8) [ 576.555873] binder_thread_write: 2 callbacks suppressed [ 576.555887] binder: 21957:21966 Acquire 1 refcount change on invalid ref 0 ret -22 [ 576.602525] binder: 21957:21966 Release 1 refcount change on invalid ref 0 ret -22 16:48:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:54 executing program 3: memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f000002eff0)={0x0, 0x0}, 0x8) 16:48:54 executing program 4 (fault-call:1 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) [ 576.717757] binder: 21979:21980 Acquire 1 refcount change on invalid ref 0 ret -22 [ 576.741517] binder: 21979:21980 Release 1 refcount change on invalid ref 0 ret -22 16:48:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 576.873844] binder: 21988:21989 Acquire 1 refcount change on invalid ref 0 ret -22 [ 576.908927] binder: 21988:21989 Release 1 refcount change on invalid ref 0 ret -22 16:48:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xa00, 0xfdfdffff, 0x0}) 16:48:55 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) 16:48:55 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa1, &(0x7f0000000000)=[{}]}, 0x10) 16:48:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:48:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:55 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9d, &(0x7f0000000000)=[{}]}, 0x10) [ 577.372501] binder: 21968:21997 tried to acquire reference to desc 0, got 1 instead 16:48:55 executing program 4: socketpair$unix(0x1, 0x10008, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000080)=0x30) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), 0x4) [ 577.435791] binder: 22000:22001 Release 1 refcount change on invalid ref 0 ret -22 16:48:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) getsockname(r1, 0x0, &(0x7f0000000100)=0xfffffe24) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2000, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000040)="15f240307095bf879a7e0baa2ebef559d3fd7bedf905079196ab", 0x1a) [ 577.602202] binder: 22021:22022 Release 1 refcount change on invalid ref 0 ret -22 16:48:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x82000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x8000, {{0x2, 0x4e1d, @empty}}}, 0x84) 16:48:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:55 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa2, &(0x7f0000000000)=[{}]}, 0x10) [ 577.749544] binder: 22030:22031 Release 1 refcount change on invalid ref 0 ret -22 16:48:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x2000, 0xfdfdffff, 0x0}) 16:48:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000200)="169965fb13c382353cc2964010b9bafb", 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000280)=0x3468, 0x12) getsockname(r2, &(0x7f0000000180)=@pppol2tp, &(0x7f0000000100)=0x80) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@loopback, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20, 0xf6d, 0x7, 0x500, 0x5a, 0x80000, r3}) getsockname(r0, 0x0, &(0x7f0000000140)=0xffffffffffffff16) 16:48:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:56 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9e, &(0x7f0000000000)=[{}]}, 0x10) 16:48:56 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa3, &(0x7f0000000000)=[{}]}, 0x10) 16:48:56 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) [ 578.234801] binder: 22011:22044 tried to acquire reference to desc 0, got 1 instead [ 578.245160] binder_dec_ref_olocked: 3 callbacks suppressed [ 578.245174] binder: 22011 invalid dec weak, ref 1438 desc 0 s 1 w 0 [ 578.297371] binder: 22049:22052 ioctl c0306201 0 returned -14 [ 578.328270] binder: BINDER_SET_CONTEXT_MGR already set 16:48:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x40000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240)='TIPC\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockname(r0, 0x0, &(0x7f0000000100)) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x10000000) [ 578.341557] binder: 22049:22052 Release 1 refcount change on invalid ref 0 ret -22 [ 578.348232] binder: 22059:22060 ioctl 40046207 0 returned -16 16:48:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:56 executing program 4: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000040)) [ 578.492824] binder: 22073:22074 ioctl c0306201 0 returned -14 16:48:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x6, 0x5, 0x9e, 0x100}, 0x8) 16:48:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x400, 0x4) getsockname(r0, 0x0, &(0x7f0000000100)=0x2d) [ 578.630626] binder: 22081:22082 ioctl c0306201 0 returned -14 16:48:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4800, 0xfdfdffff, 0x0}) 16:48:57 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x9f, &(0x7f0000000000)=[{}]}, 0x10) 16:48:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:57 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa4, &(0x7f0000000000)=[{}]}, 0x10) 16:48:57 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:48:57 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000000002, &(0x7f00000000c0)) [ 579.125725] binder: 22059 invalid dec weak, ref 1447 desc 0 s 1 w 0 16:48:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000040)=0xfffffffffffffef5) [ 579.220071] binder: 22105 invalid dec weak, ref 1450 desc 0 s 1 w 0 16:48:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000140)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0f4b483eb09dd3913fc85faae39179ff2371aacb1f3596933616091f68484a48fec2162ff217143bf1a4194a555d7781f0380b95fd1f9c3241990d188ce3fce6b85fd5fb9b111d2b0596c93e13ff313937e592707ce628656b3e7151323f0209d7280d55ef13f39ee5dbe16c30f787297485edfbf33a0ffa9af5645257a2bf98e7d9ebece6db540df9477cc5c0a710404c2b444f3a717e959b7ad924dcc442a3423fdd1f7db85b3b8e676ecd4bf7191bb3e8fd8e6415980df5cdec01ff4c0dec26162aaabdc8b165a293", 0xca}, {&(0x7f00000002c0)="2a788100cc0b6edaea0a30fb9e7d9c68047c242b9dc78f5dfd01118284ec1115df037421be95c1bee555fd1eb6e8d1c28d99cbae888300307269fa866d60bbd2f096f8475ed3fdee1508e21a940f2583f557cf625dfa01aed523558a58a50d188da3f839b0bbc26c551c476d7120390e41cc168f1a43f0b0866f68d5bf0f3ba9554981640b64d1057ba4da6b181262e41b8e8bd108525771b5f71e2a0ceea471393edf40233948efc482b4ac70625eaaa013d0e622833355b39737ba346427d490afc37037a23dc0b7e8fa6f0a79f88757fc1283a436c0", 0xd7}], 0x2, &(0x7f00000003c0)=[{0x34, 0x107, 0x1, "c265b27f6265e47b1e69da32cf8f5fcc81126fac11fb4a4aa6267f58ab85be9d6dab48e90178"}, {0x4c, 0x107, 0x0, "b8eacad6d62089f75cf80ba149af7bf191608460aaa4b5d9b96dcc9b0ec7869c0200a7a97a24302c869a946626a29c2454c1a57948b8c798cef7a917e1b1"}], 0x80}, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) 16:48:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:57 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa5, &(0x7f0000000000)=[{}]}, 0x10) 16:48:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4c00, 0xfdfdffff, 0x0}) 16:48:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:48:58 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa0, &(0x7f0000000000)=[{}]}, 0x10) 16:48:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:58 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa6, &(0x7f0000000000)=[{}]}, 0x10) 16:48:58 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005000, &(0x7f00000000c0)) [ 580.012217] binder: 22105:22136 tried to acquire reference to desc 0, got 1 instead [ 580.012737] binder: 22105 invalid dec weak, ref 1450 desc 0 s 1 w 0 16:48:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000000)) 16:48:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 580.165850] binder: 22154 invalid dec weak, ref 1458 desc 0 s 1 w 0 16:48:58 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005001, &(0x7f00000000c0)) 16:48:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) getsockname(r0, &(0x7f0000000000)=@caif=@dbg, &(0x7f0000000080)=0x80) 16:48:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/psched\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x2}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000640)={r2, 0x7}, &(0x7f0000000680)=0x8) 16:48:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6000, 0xfdfdffff, 0x0}) 16:48:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:59 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005008, &(0x7f00000000c0)) 16:48:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8000, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000001c0), 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000000) getsockname(r0, 0x0, &(0x7f0000000100)) 16:48:59 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa1, &(0x7f0000000000)=[{}]}, 0x10) 16:48:59 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa7, &(0x7f0000000000)=[{}]}, 0x10) [ 580.952836] binder: 22154:22185 tried to acquire reference to desc 0, got 1 instead [ 580.961030] binder: 22154 invalid dec weak, ref 1458 desc 0 s 1 w 0 16:48:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x402e8008}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x808, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'eth', 0x3a, 'eql\x00'}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004890}, 0x40) getsockname(r0, 0x0, &(0x7f0000000100)) prctl$PR_GET_TIMERSLACK(0x1e) 16:48:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 581.043492] binder: 22199 invalid dec weak, ref 1467 desc 0 s 1 w 0 16:48:59 executing program 4: socketpair$unix(0x1, 0x9, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) sendto(r0, &(0x7f0000000040)="623c4a6d86689edcb384d64ddff8bcee72fe8819aa65150ab03bb85e80ac3d279ff6d5a263167e58b019a4334d67aa2e8edd189559e6ad50f5e8555b6f892a43751c4144", 0x44, 0x14, &(0x7f0000000140)=@can, 0x80) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x3000, 0x7f, 0x4, 0x3, 0x8, 0x5, 0x2}, 0x10) 16:48:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:48:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) memfd_create(&(0x7f0000000080)='\'@],lo/\xe6lo\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80000) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/46) 16:49:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6800, 0xfdfdffff, 0x0}) 16:49:00 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa2, &(0x7f0000000000)=[{}]}, 0x10) 16:49:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:00 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa8, &(0x7f0000000000)=[{}]}, 0x10) 16:49:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101080, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x1}) 16:49:00 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x8000000000500e, &(0x7f00000000c0)) [ 581.835866] binder: 22199:22231 tried to acquire reference to desc 0, got 1 instead [ 581.837969] binder: 22199 invalid dec weak, ref 1467 desc 0 s 1 w 0 16:49:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:00 executing program 4: socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x3) [ 581.947165] binder: 22248 invalid dec weak, ref 1479 desc 0 s 1 w 0 16:49:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002880)={&(0x7f0000000040)=@caif=@util={0x25, "56f555fb572a7767953d1ede1351d50f"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="e12e30e353281a5d3b8b31f4eb5cd0bfe64b484f8c9b2faf5980130ee06948ec8e037103a3acfff7d31a9c412cc357eccc39b9556c9d3d4587d80c2bfd577d309bf765fd73f772777a2471d5a215563fb0d60df875eed20196f19aa22456f4a430d51326d4cd95bd01fc7c4a7e510830841b29e64b2f2feb26f59d36994a1d02bb7a3187bbc3e206c28dcd0479e526912c715c456c34836f7729", 0x9a}, {&(0x7f0000000200)="36da6b2ffabc2def575c959a53c63b5c6e6e9a2c0e4411ed1201dde9c0013db4aab1f9d77438033776c1cd67bf33f7c6fecded500d090e84dcb73e46395c9304acec8453eb28f311cb5036e5ede21136f6fad270dc75bf6ba3db80607a74165eb8afb6ef0b7b5edb9271b987d8ec4810d9ef169f85ca5d8bda6c7d9985f9b85c8a398343bd9927484889a1ade299be74f574f8", 0x93}, {&(0x7f00000002c0)="f1afe1d49eeda8bc0057aa1b0706706c07bc16cbcb22a06e6511aaa87318f153d4869d3be794bb690f1dea14f91941e59af549f88259033fade5458ef840284e696df74f414bdf421fac85dd3671028c5b06eb40af5f232e9f2deb0ab17f87bff8", 0x61}, {&(0x7f00000000c0)="847072f38eeffd912c1e4f15662a7b10a6583b10f889054968f89d0bd59931eac0817f14d6bc73f5703b7979ff2d1085a87b", 0x32}, {&(0x7f0000000340)="ad5a0b6b83905b6c848c73b2b158d7f60e2700a5e0fb1add609cef7f645c0035b99d", 0x22}, {&(0x7f0000000380)="22607489bd8189961b58fbaab57032c38a49b13fff9816da754186a69ccee6d2539fedbe4241904245747359d6b04a2f671e5be74d12ae5baa42f5470d574a6af3ead3c2c3411a6bff96126dda7fd86f1db87c947d2203309bffb2565302457f6d05aa269b2a1da032f7539cdb4589a149d5a7fca0fb7673c6b0556ceda9fb456290723525f852026c121f172d321cfcb12bf2166cef225be8216fe20371a9702a57f8f84330c8876c4e2bf6ab1ba6a9e58433f07a33ada9e24795a3453d42022c478b", 0xc3}, {&(0x7f0000000480)="a697f2dd344e7da97a3d0cc3e0a32eefecbdfeca9227c4a3798b645fc52f5dfcac9d19d6846ccb5cc7e5b51817306792363f7f5d51db34b82d163c418712e30b66a9c2d7946b9308099d7f5050cce6521bdc5d56b46a184f9c41079c36c340dd82d6dbb3f5315796a55b0b57d6647f0fa84f753d3b7126c401573975", 0x7c}], 0x7, &(0x7f0000000540)=[{0xa0, 0x119, 0x1, "aa3693e6fc9f12f927084d11cd0967adf0b4e4dc23206ffe827ea5b25e6a0609f151facce13d9755b2f58d7a072c8cf2e40e6ca66081691e95fc6d7e0cdfa670edb8df89d9bbbfc7a6349c2b87158c2659635ea3dad3ea0bdcca18e9781afd0a771add32140ec40e5368f6d160d69f1e3498fcba0ad12b62c76912f2647fb73f5683e8c73dd44e7ed5a9d6a0c37adc76ea"}, {0x2c, 0x13a, 0x1, "761804fb147b17c066b06f0d5ccfcbb80470777ddc4ea5ae20d263eb03"}, {0x100c, 0x187, 0x1000, "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"}, {0xb8, 0x112, 0x8, "d2b7f100eaafd283a38797999bf54e65ce5eca48b516e90b6cc8274c280e1a7a235db2456763d03b34b1ac41afbda851ad1e7097393f838bcf3e1ac599426b355ad10fad56ddd4e2545b933451ca85cb8bd24e92739d5210ea18e200b6e8bd87f16c0bb3d857e13e5b2f904c7193876e1694c6774bf36c353d544ade88f50d2404e48cbd25ba32f3abd986cd535908205c264179070235462fc52796c77eb5b858afbd55aa450b01ff"}, {0xcc, 0x116, 0x6, "16f7f9bd14f228e6652f7370197504df726f8ebe10304efc9ad5a97b245fdd813880ac30c430b6a83029b3b33a544d8363c304f1c9b6308b6e67617775e90b6818f47dca84029ba099242e70ca390ec8ffd3b94ee34771dd1ac217c0c6edf9193bd891e9bb1f76d72f1f54531e20f3abfb9e49e7eff09e8349194e54183757d69d2bc4046d66d8aaf7e007782dd1ee30ab529991e1840b463af72f65baa0f18e3820148ab60531857a0939c6b0683a891a506f11138e36575c88f042d4e5721e"}, {0x38, 0x10f, 0xfffffffffffffff7, "94d27164706c8c828afc23d3ff1e382e602e8b87ea94e366dce211ecf060e8048ebefd65db0cbc8bee93"}, {0x100c, 0x0, 0x8001, "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"}, {0x84, 0x1, 0x3, "5b60b87eb2e1b7ed1bf5d8e7f5d50ef28c76801a5335ebf823dddf211351ab0e98c9d8b96ea5d34ddd0934a918d4605c1e31857306f486f42c135260b71fa1651def269dc0b167d73107806b8d499e79fd2fb296d5ef0f8652aeaad17e85d048cb03d3b73abaff1e98979121d6c4df03ffa02123a658cf"}], 0x2324}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) 16:49:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:00 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa9, &(0x7f0000000000)=[{}]}, 0x10) 16:49:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6c00, 0xfdfdffff, 0x0}) 16:49:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40300, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockname(r1, 0x0, &(0x7f0000000100)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x1000, 0x6, 0x1, 0x80000000, 0x1000, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)={r4, 0xf2, "9245b8a94ba12e25f670c5ecd11ac30d09da2766853836977579e0cf7462e760ac2be9766f3365af0f5c96d26a0190ca648c1fa3e35a7dee46c198b174d4db88b6e8d865919ad4e48d99052cd4a8cf014c91000db18199929701986fe741b3490cb049570c0e308a1682e88be83bb8b3219805fc5543798d235f7714f2b2146c4cbbc86a0d9f33536353b22eb4dd67b7b233c8d4aa695d743cd0696b7edeefd06d6f7db4bbb54f87d25daee16519fc51a5db3815cad42aee8ff4d171deb814adfe2c65882bd3dc0a9231a42c7878d44c255337dcda8dd9619f281664ebacbb0124dea85812ad2f5bd74bf2b54d234e583b7c"}, &(0x7f00000000c0)=0xfa) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/81) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000400)=r5) 16:49:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:49:00 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa3, &(0x7f0000000000)=[{}]}, 0x10) 16:49:00 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xaa, &(0x7f0000000000)=[{}]}, 0x10) [ 582.744790] binder: 22248:22283 tried to acquire reference to desc 0, got 1 instead [ 582.752821] binder: 22248 invalid dec weak, ref 1479 desc 0 s 1 w 0 [ 582.785256] binder: 22287:22288 ioctl c0306201 0 returned -14 16:49:01 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005015, &(0x7f00000000c0)) 16:49:01 executing program 4: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x120) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:49:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='systemlo%-\xca\x00', 0xc, 0x0) [ 582.962427] binder: 22305:22307 ioctl c0306201 0 returned -14 16:49:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:49:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:01 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xab, &(0x7f0000000000)=[{}]}, 0x10) [ 583.122269] binder: 22318:22319 ioctl c0306201 0 returned -14 16:49:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7400, 0xfdfdffff, 0x0}) 16:49:01 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa4, &(0x7f0000000000)=[{}]}, 0x10) 16:49:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 16:49:01 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000140)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x1258c0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, 0x0, &(0x7f0000000100)) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x6, 0x3, 0x7, 0x3, 0x3, 0x9, 0x374, 0x40, 0x172, 0x3ff, 0x21, 0x38, 0x2, 0x1, 0x100, 0x12}, [{0x60000000, 0x7f, 0x20, 0xff, 0x3, 0x4, 0x10000, 0x3}], "68f49a18daa5e1c2694b"}, 0x82) fcntl$setstatus(r1, 0x4, 0x0) 16:49:01 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xac, &(0x7f0000000000)=[{}]}, 0x10) [ 583.644073] binder: 22296:22332 tried to acquire reference to desc 0, got 1 instead [ 583.645292] binder_dec_ref_olocked: 1 callbacks suppressed [ 583.645306] binder: 22296 invalid dec weak, ref 1491 desc 0 s 1 w 0 [ 583.711276] QAT: Invalid ioctl [ 583.732883] QAT: Invalid ioctl 16:49:01 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005016, &(0x7f00000000c0)) 16:49:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) [ 583.756043] binder: 22346 invalid dec weak, ref 1501 desc 0 s 1 w 0 16:49:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) recvfrom$unix(r0, &(0x7f0000000080)=""/72, 0x48, 0x1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 16:49:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 16:49:02 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x88000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfdfdffff, 0x0}) 16:49:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7a00, 0xfdfdffff, 0x0}) 16:49:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfdfdffff, 0x0}) 16:49:02 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:02 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xad, &(0x7f0000000000)=[{}]}, 0x10) 16:49:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) getsockname(r0, &(0x7f0000000140)=@un=@abs, &(0x7f00000000c0)=0x80) getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) [ 584.548751] binder: 22346:22380 tried to acquire reference to desc 0, got 1 instead [ 584.549287] binder: 22346 invalid dec weak, ref 1501 desc 0 s 1 w 0 [ 584.645100] binder: 22393 invalid dec weak, ref 1513 desc 0 s 1 w 0 16:49:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x8000000000541b, &(0x7f00000000c0)) 16:49:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfdfdffff, 0x0}) 16:49:02 executing program 4: r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x2, 0xc00, 0xd8c6, r1}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, 0x0, &(0x7f0000000100)) 16:49:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0xfdfdffff, 0x0}) 16:49:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001580)={@initdev, 0x0}, &(0x7f00000015c0)=0x14) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b40)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002200)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000002300)=0xe8) sendmmsg(r0, &(0x7f0000007d00)=[{{&(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0xd997, 0x40004040}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="37ab2069f98d606e63a73d5ebdf486cc94d61b6ce2c2c5a632895d5b4c0bcd50d0acddf174ba58811d7f638b6a071bfba5020a06", 0x34}], 0x2, &(0x7f0000000380)=[{0x58, 0x10f, 0x1, "290b5e24f6d16cc94688c8d57c1dcb600c8491bf72b7c6ca53db393f37e978ce52201e91af45f5bfa3b00a5c7e9bfb5e8c019b89cf6f3a96754ae0f58f87c95d7d16872c43d97b803e0b"}, {0xc0, 0x116, 0x80, "dd6a655626098ebbc06daccfaaa45080d1fd3224351739dcc0b447a98c2baa8c30edea8f35b6f0d8612fb23d495d744498cd170c283ce44a514b3a661d236f92387b6349d8bf404189360a81fe47e4ea5f399c92385e7551a04f26a14988a9bc108f6e0ae7fb38a4412268f0bac2bbdbbe3dde749dddd8cc5a98299f23666f0bb906ef49e098c1372984654ff1d7d2f1f67504214437ae566bd42675a5b8d6902bc1edb4999f14270e7f14b30a753a230cd8"}, {0x100c, 0x0, 0x4, "8bc26f463696c3e3566c6ca64e7461d6e233f37c6b1b9383f3ad4b6c1b0f174607ae814d077cbc84dc6f63e4a3bad7a1203bea4a3a0fe7cdd196e3208ffa338ed1be443d70c5994fd0625fbef761bb34b5c14574b309d44294887f633919a2469a2ea54075a39e69aea41fb7b3e39a86f560a09f2327a6e69e5cf28db56e2f01359c989ea464b5683b21798fa9d060e5bf91b39ce5aded8ccb061fd488e4f0ec14baa473005a1a241a35be96b03dcbd7609622d1414e519f648fc36cb9a2a57c46719f1cc8489305c47480e63a2e9d92a400fc53a985675dc9619890f119e06a85cb09f0fce492ac9a11f721a00e657215a78e6302e84d54063393a9a047f94688bd7184b4dd9390ea7582a1ed7c2f1f05854fcfb49a3e01411360f373e34b7c43c5f5b8239ea4f1de3fb818bdebbbf4387c69dace24fc1f0f46767fe049bce2a8723f45cbc363e70600e08f6ab80591b2c88fb106b74d62254c802a1f03e64df427790b3f06e50d81cb71f7328b39c1d74a749a001953a9c52c401a163fe4360fc5cfda35997286dc2de4bbea3285b72e7975131fe3704ded8629b32fec94f2e55517667a4f1243b2d594da95f590c096b90b2444fe8d3f59316f9b56658574648c41ae022e39e0d51b809bcee855e3c5a4e6e3b595609f2e0059cb37856904b0c76f8f8c24e9b03688a2da1927236268ccb0f34f368024e4f98648c1f03506bb9e514b749257583c026c37ebc2afea014a794c42f2bc082ec74d4efc85a5cf436cf55b89ba8a87e2dad5971df7489a6e1b97e6af98a3c53616ee0f849111319af053f9058f11b0b9ae5a9d8d5f5e6fec1dac6351a49009f1d0b924136a549154220ec548ca9aa3cf92f3ce9e80dac880e7a4e526d38ad9bacd378c0749d1416f59977b17bc9d30182811e4d4ede10472fa0f09e91d66441dbf4e73b61ec1577572b6e6d8b93240af4c452115eb2049b32bc9cb6f4e92a6cb3239cef3373b2bee3cf980c8e3673be479e9227ef1eb7bd4042c64d6a915d73dc7a8360afde98a7f5d438a476afd9bc1a790039b976a28956364553d79b1b4b6555d2abe0a14381d0c3fb04e6a5a9a5aa38f37868dc8969dde70929ac532bce8ff6e25da903ef65ca0674195d6f7807caead877d9a1749cf40bf9ee0f01853e97a6bc6b0fe62cd66770c93cb41453ed72d388e1dea0327d9295456e253e418e44d58fae587a6e62c5ea16141e5357b7e7372a6a1428a5a17a3f1c26087ccdcb72f8667b2eafc1e8e76a0c784cbc4691973e5f478c23e0abed93366a013dcac768ea7f12d91d08977b13fdbcd4d046d45fe4eb92bbbb0741f0524bc9d261b578c2f766424fb3815712d3709d2555b14723d2a6b592df8137563d6f9991c8c2c682593ff616227fb41a4de61fd4830f105218393688fb51803f571636eb7b7eb21eb5bc0ef2f89507dacc9dea54fbd648a4b30f2204ecaabf1283184aedbaab4ccc93ee69c0c022c23de8d72c1d3a607d7689a3c0e2f73049a42841cd6f6762681d679e50de69ec8113fd04bc3c9a04edc8b5485eed461cb9a166b5cc94b6629385d76fa7f53f1bfc52a74c8e839ac201a508443bd9471a731a5abe354feed6342ccc26f2c4611cec60cff7a7dea0eaeb78cc7a35ffa846b3a255d4f602891fb8007826a8689f4d9fa11d239f6b2c4955ad02c35518b00bca62415917f5d56f63efe2262237f4d04962dcb6c8638c9ebe980fe15e4ffc4b8fd15125edc5d2e16e1aaca31b42b6f686c0ddeedb6364ca454790968ed436799f551adc87e648c4db1539439b12ae62b8bbadb4a1ca0f76737670c70ab10793d7c4777392d37f68896c319242a5c79b9e7eba8f96716178e2db5ebbcd78888d7304f43631bd6abe3cf7f9ea53af8baf362decdcc87d39137cd11d9157d770f332b76940dc5747e57a43ab6128f020d7ed8d9c7b9c624e6c0cdc794fd8747ea8e9e36bd0e8e1af6942089765fd3fc8ace4898e641b94b7e6a12f05340094490e00f85abdf6b953ef828225378a2c1c8eae346b92890a5666828b8969f548ab0cd034e68b58ddacaa8e2b3cb11bcf7722d1b48855776b4d8d56ab0a5c4a4aed964a888f02bf35214811a6fe7b0ffe11e522e9ddc9729a1c64789c79e42f4f3352d42a0737f0192e3c233fc6b36fabdccde4b352d7a1583d1d24b000cbff5619e0630af76797038f88497aecb316ce325ea6ab3504a8f894b69c6c12e7351236fef1cbee54115f3427fb3c1b54d1ffe83c97b0fb041ab4cc8b00552130734f010bee8d3413b843fbfb32228d1c84407c88ce0f554395d82d908a2d52cd76059adffa6095e769471d8b28a0bae310989730d6d2ba87fe23422cdfcbbc6848f47002510cdb5bd372f71ff418cd66026a80ca11fdfd16fa90be41a837ca7414c038d62014ea28373f6cf9fc59fb215f3464976f8781750ee39fbe5f867f689a62e9fa3d2c62bd95564181ba12c20d10ab67d9f71a7036d150201cb0ee11346ab844d58778cec3dbfbb9c464f0b3125cce8cd303f15da6931c5283d925f32bcc2fa7a730261c7add86c790fd06e62303f42653433fb1bfdb13a23e20595c4b031309c22007d122ca7be9f2d1391f3e39fc08cdcfcfbac9b78619897f9bc2aa2918698791b28d82fa538997a049a8cc4321b1b9b78c41d5edc7ca6f61a2f997dd8be4444d3582e8271530b70cbbcf95733da1295ea4e03c58cabff056876c885b99160a35cb08ec4568e18f14d9b60017c493a6204de993c90c8673f111aa153d835dc3717b4ed96e4286389543a8e36445a82653cc90869a75ab79c675a9c395cddd4e7acb586a66be5cd1c6f6ec7ca8530fce73cb907e525d3cf2a0cf56c2a159b978c251d876e0354fa29ee6159b508736f309f30b47ce22623c5ffe6ab86af7db6d07fa7ca6744fc6d0af15e71eeb4342795bb88b83e61b142e3c0763206df18a70ebd24270f50c5bb3e51ec46c4914f82cbbfdd143cce6d0628f4b1d3e7d7d4eece7d707aad2e5b24cc9464f324605d65e3af48a3eeb2770ae57a115a8125d0214c4aef3d8e96d4013da5e6610561fda8aff824a2be0bbdbcd231fa2f4b7aa3c92f53d09018b9ce2bb3c61dc4e7843d5bdbb30df13a101e3e1d4360a394f18d072335451a1e7b507b8a68e3e2e65aa0c2bc2c6ced4a19bd31065f8111ef90f159286f9a3f9dda7f0c42a7158ba5c3d0ea4113553469da8db3c9d735f3561185560db5f1763e1597d310b6e35593d2213cb76bf78c317ae76e7ea595a3a6b996d6717f41b32873b1c5e964b1fb9fccf9f4ae4896f7b9a040e26672e7e7171d53d7fa5be6610da27acde410e1473dbd5cb819b5c0913c115191c91f6533f148dea8fa57ab1ad4f76ab4553426d7a0d0a4052de457d9ac725699b72cc621b51fdad0674476f57c5a2c87db53dc4299c48b05554866edeec8bab606d369969235fe20a82d0b51497caaeacf6325ddce0b0780c62aff6c097a52662470f0c0556e1db777048b3c9773aa9843b8d025d5b00d287fe753a3f69a224696b90260bba49fe596155bef5f9e252dfdc258d845caa38744777260cb49da8475b8709b4537247347f2a11a8af7f37e00653836709f4ce75bec4e2e07077cd7e42b58362ec9ae59546b598e7059dd71c3b934cce7013bfb133a87ab5b822b4d2c4300eb587ca1e1a064cf3c629e6d5d51d539b26c481a3b14b463cc87e172a5dad97c0b5dd854e8de373d2e94900c7b7f2b791b3c65b80f472a0c28fcfa1a30b43cdfad861d867484d4aebe1ea9e0618a159db5d5e946708ceffdb4572e9d0f475186e321b26c99c2796f763db484f808f21a2d27e1b8c9e08542471fb782d3df81360cb4a3fad5fd36a5ad9a659e1efa89631420b2d30166bfa879ef0e7e8f125512514ba6d259736e24e23acb9b60ec7c1a07c1b94c4fdebab71afa1c5af75ff7f1a453e894d2da14088a199a748e4a927c581f8293002654e3dc2ba93611c26109cd28fda66f1da1066caa5782063fc80d3e91cf8b6a86c159a3a72e8ae3d045ca245dd95a646aad792486da8f6df541cfa6ae2867e3f4f6983817ef51373586c88fc3f19f27f0062ba1e11fb4835cbd2f10dd7f150b54d5c36ea87cff8b2015ce20d4d23c298e89de349cadbf039465377e7a801135bd1bcc675e5f8b46d372fdb4d229c141cc73510a56d2fc81202999c3a07e6a854f830bac878f464d186d260c760689b2218ca0163e8a6cd8070559d7dd59a827ba5410521ff0ff554ac0ab1933fb833b46dcb525d31c9559e3ef97ab16d6ac27a1da5b13aaf482a1335512ad3dc0d9f57ce90b0196a5062a5a84d5c0af5a685bfdda8012056c0099fe3b53d1c63d3a0a05b1917a4fd5427ac99286de7d352526567045fc07cc9e19bf4128c9e230b5217fe2b0b841cc5b88a5291e0fee00609edbdc0e456e615e042565dd14ddd39cafd5961023300b6e529c6dbd382f10d9fa133f3533a85df699aeb4f45dd98bd86a77ad6334c885eec34455e2b62110ce4f63163439b6c8fbec47945090fb1c61b2998c582f06cbbcdc1b0d2569fdec64d6f62f3fd9ecc977d65b9d34f69cf56648bc8cb1a03c940ac578918863722e15d1dd2db49c1059ba2014e7b3dff464cd2dfc68122ffbff528a6be87581027a6b102b43900d53712cddab69d2b85d82706fa1115099c82eed8a944e833a8ff68ab97bbe312ab91979e6ac91918a64a9306691a2871a77a38afa23625073849a3ea0caad2a8188cd6555cfdbe3d2854f8f99957b537fc8a22c8b95da49ea822f7f93db37fcabd49cc4bb7f97cd71f883d23bb3e46727dfe2efa997a2bdfc9770d3c303b8723bcd671c30b3a63ae536d57ff69b1aabdf8b2b643661bcf2852d65f65f2cd0510a625269bf080e7a3f8f7c7439fddd3bbb144535f02e173bffb863ff56a832c56f1f5703f163e49de95b9c1454dc21d121f8a04cd3948aad1176b101bb1e80fb5a1d3c1f2bdb47b25d35ae57a45abc62514ad05d4f864c662e6006998a48c9d0718e874625fc689c48aac4bc37837d4ee7df4ff24c06442c7236c807c0f2acbdd8290e7c05f8bb5af94019a8ab461bd470b426f281ec05686ee30cd1eabaa2f5a70b76f8d5bbce7b846f07d6847c80d3fe9d1e2748446687f9a831773173f08efd744a4460e0a88887aa5c25fc7de6399351dbc71f3f55587dcc60ded01633f66c94df7ceee4ea73843ad27bd8759533c2110fe1e6c23a84b81b5cfcd667e016b3ab294424778a85d4b6e2867641dc8893d7bedb0ee8271e683ff01a50160b22a91c724a5b550b2c18d35512d4ecb956f67b8daaa05f201dccf93496289311557a7eef3afb8788e8879d4f1c786981b4c3e00b006481bdfdd36e04febbba8ff6181945bda5e4d7dd614ac1b83217a0f8d63d4b64623321d299350e9ab267c2563ab056264ee93a3bc9689d11c44da44df96c33d4f597811ecc2856ea86d9fab8e5c96f4607689fe55dd2b13acd53cdd1f1a75d0064bd304f7effda1701c70d8d2670c9fbd2b2161fe47c19a01842c38a572c61d4d9ae64e2177d3416a0baaf11f2accac274b0d1dfbc27fdc670739d4e6d101eda9f50355ef71f78724586a016bc8f7765b0c1a60c0907aaf59151ba60df56d8b4dafec1750804357662ae3d885d2f9c795aa6b59916ec122bcd347e33028c0b1be1fd1208c489a618158c5ff4235d97be5d46990653a2792b31423ff0e0a6e2259bb77a0d15ec94ae4848ba8b171649ca0873fbfc8c50e23dfb98f54a0a5e4f35ebbc1fd795c449186164"}, {0x3c, 0x104, 0x1000, "36496377d439e34fdafd2abad8974cb27a69592f4548fe6a368c5faf3c49de547a7ffb44423b4c02b527becd53"}, {0x84, 0x119, 0xfffffffffffeffff, "ed83fdcc5a79f943bb129b7e15f46d7663150117df8956ad83da93c5ff9cb365a966cd94085e233026e05cbc8f1fc6189e4cae7a193fc3c9f8e8811268445ae309f4956ecbb9cdfff5fcefc5599fb3dab7c0a91649a0b53b7fdc6981e0b8d4299a389582864820642932f449e7d1d939f7bbb9b0fe336577"}], 0x11e4}, 0x5}, {{&(0x7f0000001600)=@can={0x1d, r1}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001680)="8098ca5122b09e4f921259f29c0aeb069d263c4fc4f7730bf025d14d63d6f158b32f91643b7d6a325307ba9f677ca8aa8af6e837aaebd71d041abbd28ba6d8e09ce9649c0462cc72f6892ab3623e14f8b242c11eea0197e1c2b0fa0cde7636f1e16c3a1d4d58793bb5d43954654772cca2a4303018071c9e53238ffa7cac", 0x7e}, {&(0x7f0000001700)}, {&(0x7f0000001740)="ae08dd6e7a5ed54fa5c49cb1ff3c53a8f1f3be48273713f909e7399efe4eb2d5867a1aacba577474e9365fa5b44d5f76127403c63b4fe459ebb7e46db2c6bd4ab8a817f7c3fc53800f7dd68a72c0352d1ccfdc981f2d0c37e436fe73e6fa659ec5557bcaeca35bda7da4fb6b6b8a8fbb5a633e3b55df4f97fbe6bca84a352b68b6ba084a052ec17cb07d98ee4027a5d459cda52fa04d72384974bfc5055e9b4553f96ed6b92ead2f7dff4f4cfe68c8a8504da93867d23bbd2b72988aa79dffacc05004edaa630fde302364362736efb83e7d8dfeb4367a0a594563b0b02c50d70b7eafdf297d3c112227403f64dc68c66d2f9675", 0xf4}], 0x3, &(0x7f0000001880)=[{0xd4, 0x3a, 0x6, "f5611f7d033033a728bdeaa596872acb2af86b5543b342242aa3ee568a968805235a4dee8d70357d309647e8db472d065006755feff6a3762910f42cf9831ba5da7eb0855d5f8e45d1d93be1390c3fb78d74bab276d9f1c0f67292d7a151498bdba0a96f5e1ec9bf9d8d9dcb07ef5888ceec35d7877bc321f31cf0a9e585ca5284524bc04ebd24a97b04db521616eff868acb7f7105ecd7557683d420589c75b10d8a90eb181054761e3ad55488ca7bba97d2c6220a1ff876874ba09fcfd9b2e201b30eb3a91"}, {0xdc, 0x104, 0xb922, "91986a8415126ea1e5cef2881168dccc20100d291615444c01d6ec7b14ce7e899f04fbcba0e71380f36ff541a444d862ea7c8e4a85c05b5f075570f925b2cc7e2497be03bf4d009e878efa242e2ef66a62de6d66a4623f9ba0994bb47206ba3c109f877c14f36687285415647a5ec9412b33284b09be9cdd97d02ab433acf61d03a9ec590af1ae28f201d800eec06be234104b29968593239214f5f93b7f9ae8d1a67118d2a7d62c9b1abac5de03e998f02ffbefac5752c2a5f745fcddc78719870f3217106160728d18d360a7a17fa3"}, {0xc, 0x109, 0x4}, {0xc4, 0x10d, 0x3, "ea7d5f57944fad2a6d10244718057b7b7c2b64e026948bb8f6925e5785ca8a29b8ea5bdcb7cf8281ebfc4b0fd5c059e73593ab5de20c74c7e2de0e0c6d6d8345728bd50a52607132ce0e3c5543cdb22a499f37607f5c389e91f2ed11c9bcb84b76f859e607a5541dba76b6b92987a79d33e2b236c5bd7db363abbcf51e995878c0eac6f04cccea22bff1b69a668edb999e3c34a6eb05bddcd2aaf43e15d7526cfebe3bfb65594cf1aa94cc742133dc9481c8dc53be7a2ba3"}], 0x280}, 0x7}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x4, 0x2, {0xa, 0x4e24, 0xf5, @empty, 0x6}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c00)="850594014cc79283d45ccee7057d56771b2b5f84a836f95946fcce94c99c6e991c0ec6ab5ede3d49dd1ea543ef34a5bdc6adf2cdbe7be997b3431f348dcf3f9dd1ed626bd3cfd7ba881cbdee73ca", 0x4e}, {&(0x7f0000001c80)="2a52de072ddb4b3a9f75e4cd3993be5a405c7df867bead22d84b5b79bceaaa65f33e1fda965f80464851940cbcafa1849705b7468f1b4078", 0x38}, {&(0x7f0000001cc0)="c26f8e0437c8c63848fef13e7b569e615a7b81b2bc2815e1466120aa0cdfbba422d82c5a1d4350d65371a376", 0x2c}, {&(0x7f0000001d00)="df369be2816663e2b99e5ad2", 0xc}, {&(0x7f0000001d40)="9f934ef7d293d51484f9dd0f01d7d2dd27febdf1e2aff017141d47c21fde27a47cb032dc31b69ae34fe6dd4697cd797bb6633fa86997119043849a464b59ff9043657e7ca96972171989fb87472c6ca50340ffd8242ca4b6451949873ae2f1362bca8475f4c15bc1060ba73ba6c562652dd75aff96052f53c6c62d661c683b2e37831369c16d9081f09d22b7fac3", 0x8e}, {&(0x7f0000001e00)="7ba75d4806aecc7a0009743d009353a4f0604a65f89e80d4e835eef91d04a8a3d58431a746861cc2c1a0c693aa8f1c08ab7c42505bfe66a37a7e286e294ce54a897135fb630e8928386a160d2e93be24518ba31bb8123b85", 0x58}, {&(0x7f0000001e80)="530ebcd69b74f098d1864124e9a5f30ee859303d78b37d6a7e94b82b215f6c01068e176f27f80c0ee2998321e16e1c9c01b771386b03975c2d1655db1cd1f91a6c141c3c7bcf1d319b6cb2003d9bd788db64429aaf93f7c07046ebd00b6e28c62c771a257896d5d2b51d532040b683181d14b5e2e6df2e474113ecac998dda5e6cb22b7a1efe3d9e33403f18eb19f67e971dd3d94bcb4f43e83347dbed1e511b82789a55831ca7e9b8477224833c64b53bce20fa385ef8fdd563320d50223702cd83fc62e76d8ccee38106642c33c77337d73baaeb920a29", 0xd8}, {&(0x7f0000001f80)="78ea803c895e46edaf50957abbe0224861d2774955e3f64609d4be54198b338d61682f65466247cd08a2f18a1f6275f96fb87db43d8575e707311430db4237797f44c33c528e2fa182d184702d0b032bbde267ef88417e6b1d9bea689a1319614a5a296c0edb7c0d1099c57e180fe93f6abc62321ac579f3d7e09da7498bb9af02d6910d7afeef544e7ae62fd942d6a9cd8aa9c9fae87d06b9b9c68ea8658b32d71a1dc685f0eff1dce0a4d011f6312b00c9e14ff93c9356a72a51db6e54cd248ffec9608e4c11998a3c8b73b9dbfac48b5f87649d748108debb019951522b5e8cad7ec3abe1a773233a37361d2a791a77279a", 0xf3}, {&(0x7f0000002080)="bfba282d6be381903f430c70d46f6d389a3c69814692a02f1ec0ba3e17e759f29975253364ff3c2870a338fef52e44190f479f847b1b9d203a00086271a4a347f69b72f8033bf01700f6ce57ee6cad5a8a1e8addb645d821c9543b40e58acffd1e4ba92e4dc7c1880a6acf38618f5db28e64b6a70d1f63fd21a28983c5407a3c6e3a3162256999d12225c4b83c3a862881508e4cd13579d0ccde98a8c99ff6d42f2dcd02f850ad6dfb02ca2df7abcf8900ec2eb2c5d57042e9ad134636bac73c62285de07801fe274b0c47d2c3fbbc0e59d0d277478276db06ce622bd6513cf28eab481d", 0xe4}], 0x9}, 0x2}, {{&(0x7f0000002340)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=[{0x78, 0x13f, 0x4, "0917c1d0572e266653078b0b738734d18a7ad476faadd8903369d18deff842db4eb7839b95277463aa6a12390980fd7d78f0005247512a99737127435882e085d21e721d6522011f61a48496340a1de7e0344515413ebc7d6fe815eacd9c3fa909a7e3d16b3c4681b673"}, {0xa4, 0x116, 0x7, "8b830bb9e90ca2c10a77dd23ed44cb0fca92de426c7ac0fc0f8982a37cac78b0494c225ce41c2d2575b1fe5173255cb199b9e4321d80ed4ef51d87181a60e88aa334073db34495434a73c1235e9110e766b6c9aa05ddc0360131b16f1f910e2f8a09a4f33851502c47dd262f4c0d8ebaa9955579c382360e1b486048033839daa17e65bc09b787d1b2746bffd37a76a85c17ef9454fb35"}, {0x6c, 0x119, 0x7fff, "56f886f59f182496b012a88b657598015a353d2ea8ebda6baafadb2ca1e3e22743a5380f8c11865c44b7349aa3691bc96febd50b5831e16c86eec407625eb62ad6f6708c9a3ec100b650af880f5306cf8056a3d662828a0f01013ee5321887"}, {0x54, 0x11f, 0x499, "e59793e57c5d8c53985c7c70e05edd5ccc0598e9ccae1ad44b1a9a6638e954cd4105858c08e7b3194b711fe04c1934ae661b68f146c27a327bb2abc594387d5e0a2d2db8cd7d"}, {0x38, 0x10f, 0xe7fa, "6e05e58b054286907d82a59862da0e23b26e922e257f5914e01e7ffa7b89bc73c24d24920b36fa49fa261d"}, {0x1c, 0x116, 0x80000001, "54e400d1a2c1b5a4e9b290100a8e7b4d"}, {0x98, 0x109, 0x9, "2c49c3e72ec36cb3e45f8c8a2c4068fce283cf4336925ce03acd299b482e816a753d1acf239ce15fad37accbb98fcece71e3ec2f696bba93f1f8dbc932b6e5513d4a7717a6b2483588da2a5c864db4a811890da8ef728351dc4ff669cdadae7ecedcdfd90a8b1c959a2d8099982de9be7ff0cfb397f1df5df6b27d507a32279a082e539f6b8024b74e18"}], 0x2c8}, 0xce}, {{&(0x7f0000002700)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002780)="187fd158af72fd35cf2b13eb20c0bbe414e98d38e7a1d91fee8c7b5b9fc22c58072cc5eb6ddb7fa68715cb0833fa2e1e49ac263180968abf549a3158665443dbab1442a1a5dfcd12e001548262148605fe1e588ff278e10c143e5dbb33b27511b909787f4fee9051460bbf2cbd4e3ebaa83f6f573bc37d99ef2f0ce99c00f2ed4733c196e1bf64badd5f7ff2a4e37307043dc6943e732cc5ec829708e03328ad5528d07f63226c1896aa21d0e595ca56c0af910cddd832e9903b3c625bdd1340", 0xc0}, {&(0x7f0000002840)="a7e9e53f31f8835b1c7d2c09f0d94cf5f054b7dd68f16067d0d4ca34d0eab5629cd4938a4901950377cd21fd15dc06a4081e0b95c992606b377566d62771a0b2049ae5e0da5254141a0f9d6f87d89f883c8a2439cdb76cc330a0b05901caac7d73b5442d2cb84b09ec3cfe9f88250cc5afb71cf554f1a1af31411c4ffc604f31b3396749a40ac5ba", 0x88}, {&(0x7f0000002900)="89f142c77d34e8675aff8e93ad19169b92e5102b4c105c6fa5631092ba33a3c0abd744c634e68434799693cd9c3daf62e7a095b76321c6cef1a3194944ec071bfb6d7704a784e3065170f1d8a97a19c257ee2b8bf28c31b5431fafe692ebece005ca6f0accb932f43276a712f7507c920e7fbc73f81c39269b1a1853a8f047", 0x7f}, {&(0x7f0000002980)="6cdf5d848a6db483688bdf3c574b56a53808ce5f6591d2ad8c8e41c67e0c7600897a83300db87fb9b26c509769c5fcc64792ebf6466883ac6f44a9a0bf4f9033aebf545a1524f389c9c4d766f65e93d855854e070a660412d8438958cacd30f39af8953cf3a514e1c4aa2b66e2ef7cf00258345fb8e66f94c072c666805a3ae9dee49373bdb13712a924d3189bfa40a171141f2ca6e59c2a2aa27ecddad2", 0x9e}], 0x4, &(0x7f0000002a80)=[{0xdc, 0x18f, 0x2, "19b3040ab2a2c204db01ab5ed5cf37dd81304cbce8e3b7518d453d4ba1ab414bf7a782baa64d64b0183272455a0b8ea0c7560d831ae40412c1585e0da2c59e61f1bfd3e78a1ca8c2457982673eb49fbb4db7be2bcb34dfb7c08b49243d44f139a8b2d22e753e43ef2892e2e87d831fcb535be2ff9c0cd39157be2f249621faa6b9cb295af9e7527ad11664d33d352c331cbd76d99ec8ce785213e8aca7057ed38f302836673e405556eb0c25e15593004f6d254a76a2bfe8cff6723f135e23ff9e1ba8fc946acf7eef1576c722f887"}], 0xdc}, 0x8}, {{&(0x7f0000002b80)=@llc={0x1a, 0x204, 0x7, 0x2, 0x508, 0x3f}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002c00)="a951e0b35496edd21f7e34d34a534c111978df6248e0f8782a5895573fbfc9b96abeb759cda35a9017ec86d9e17f7e70214b01f5980bf75d452aca3d396effee8eb5bfb0a7c51f5f71a72185d7825a94", 0x50}, {&(0x7f0000002c80)="75d1ea184045864a38368608ce0e502158d9461fa4ed17865be26e214d9102d15adad48e114560eca720b67ab25845955f196a8b62974577ba7ee6d48bcec117b106a4c2108202ff7129d5f5142bdb85f179285b24bac73bb2d9306ef5d8ef69926a66919ceebfe972fc0f85baf1acf5d8be76eb6138a1eaa58875f3aadc3491955c84b306926a990028952c2da2234f37a182c75e8bbe84a74beae29da7bcedfa1f469ecc698a5e8a", 0xa9}, {&(0x7f0000002d40)="ebfe514c27554e3e24354049e3d79e8f015b1055f28b9720469dedaf286e42e88805bf8cc126f20b5e5b19d4855997f42972502d4c193f69c111712770b8c512f22ed383149fbcde10f8406b6bae4d8e2b957352e9db4944ed3a4327c85375e68d45ace33d645ed8723614a0fd3d4138aa90132c2303371cefdccb99b7a89f560505e28f17972575395291579429db5dc717095ec7d15fc496f1370dcdc70201b990e0826f10144688afe3f4be45105f12bcee21fe74e06710c37514f27105fca2d58fb0f5dc8fa4d58e28689b442b85c4fde0d487baa7f46e8104f4458887", 0xdf}, {&(0x7f0000002e40)="6e8b50c5801bd50039246429828e147f1df4669b75bffc8bbedb421d2489ab6b1f0e01e3cceda34b3d1a8eb366d21e2c54a738337a2f93b73590b608211532c143e04c65caab7e699d8bcad16bd7535883aea137ee1504e63c1d2d7c01f84794bf002f4245e9a48e68f4d3fb4aae404ccc5e0c7b5dfac0c603c283ada8", 0x7d}, {&(0x7f0000002ec0)="7527a680c91c646b6f17711ba0870006250f2b1d5cd602cbcb6be0bd06faa268486df9c65ec833db63a57a362610785107d828228f83bb641cce910329caec7cd6b9058df1be363e12bce54f2196780d3956545928558b0ff91c2b444ddf6e62de47fa449385552849d1f76193528da4a7e98ac96ba1e9367acf8952", 0x7c}, {&(0x7f0000002f40)="0a9240edf245098cb4f9be732c5c13e0c1942092f488909dd8ffaa4d3a1f97baf0050e6d8ff79979c4c671b4728c1a629ad5b279677469dc6335af179e3920c3ca212c66af1edc6834a2da182cfbccf16652d93cd019d03de9039db35ffe987a76a7ba5024fe4da0c36be368185e9e9f0382ba2076e012522fedf3243eda36ad9298f4b45bba81300110e699223caaf949d268b23da110b9511a9885b403288cc093e6361e28bb321ca051c577b1306cf3969586382f1fd9a502d45e4049193e4bd41b77e400a07bfbcf887ddf91555f60cec0954ed2def97965da105b", 0xdd}, {&(0x7f0000003040)="24f077bab2319b8ba0aff6596c7cf870828f014a3261826120c1007997b799587034be81b03fa4f37a8d0ff864af86f5e7685a114cb7dcfbc3c1c686752d16a3c1440330a73b104081ccbdf05e9a3153a91203834ef7085deed8b9e2b96e2eeff14bca8f090c4af704ccd0f44223fe1da39fa9e70ea48d5d6d29e762a03efb495ff2a29fbcebeed0760d67c636ee1217976a0e56c6e3fbd95f9ead008da2090abf12839ded63845e8f4a7ba78a10f962023ad1272e8b4d396591c7eebb376e6b3c291ece7ce81f7a56dce569f08c56800f6f351e25332da16e39cdcd", 0xdc}], 0x7, &(0x7f0000003180)=[{0x100c, 0x109, 0x0, "4299d5cfa8ef8a650baae197d4dfc1677ebd5335257dcad1d58775415e6a36496990d7f5b0e237b601341c9417893467570b90b460661f61b9ef88c8a9fa945ec5c53c37a0a730ea5f495ce11133fb0810491f12212e9c03cca16ee7030bed1a0d80a716a80ca523dd17995c59fcc71f399ef7023d3d089432f00d4816d34c30a6c0d01a760cfcd397dbd594faaaf58071d35523b3200108b0e38c9c2d173042562b9c13bfb41fbddd808497274d89c6d0205aa1e6cda9031da6d89e4e605cbfa0d053208da704a4e0718ceb125640e7933e611ae0abd3c3842ea180460bf482db40aaf3e98729d5bd1565efe74d26097df49044688806cd28cac0591d73d3f00d51a2e62b650ffd46e6153cb8de74039b35bd14aade9d1cfeff5e3c51560fc27765577572d07613a43e39b3e26e24876401158bf9d86ef749e76a3abdd2bc5007a8d1076590d312f74f76c1f7c8d43a6199237d81b9e57cbf7bc141e2b1aef7d799c6fea4778efcd28c36bcb9e1056680e890024d57e9c91354d24c8ef48767cf30f7637f36ae8b23343b3fa998346cf2a73967d20f646d08555c85d39e9e700e80ccbad33916e8710af5d9530a12f3041db21240d558e002e1b02cd3378d0b938e10b83b172152152029269556bd4b9859b30d8fbb97f5efaa0095f75c4d44b36333a43ddec977632d16af24d46961acc2a34a32e5d189c860b422dbd61e9c16e4bbc6337ba09e383620863c184c338eba522f883470ce10ca8402a03c3c034d17dc4824a3409f56cf268dc89f8f74543e5312ade13bb33cc20cb69c02e87b63496b061850587e677e068f6eea742b89d57598785f550007be2642e3cb7616d33768cc6d0b1ff026a0139620a3192db42acfec7b6e48648347cd9427ef2a6ef757de41e4850deafe30e8e9d6c35cde735fe458ca9e97677aabfce43a3ef7f9322edfda0e02f9c4b665376db8cfa7afba2d93eee96f3ce289dff1f8e541242073ab345a1fe5f935f79b3e09289b56c7a98a904ef644ab534222693ffae187640b68742a198b8f2ed0c43ffb40eddcbf180987e6c53ee7795aefca43c75516bf8d48d663fe51a2ae094df8dc70649ceebc7185a194dc7ebd4410d46fe699d8ec04e2dadfd78cd850409cb59658e024cf42af31bdf3f766c5cef7506d98bc226ab5fe313d9ad7b6f9c9a2b2f303c20b656ff48ed38f1e1d804827d7230241da817d2cbca1fe885d9ce71cfadf2157ce114c914b12aa0a281def84dd64ec306690930ca041bcf282eda2bcfab0034c768f6f0de3d819537c57d2686aa6bc9213638645674ae99eb08fb6f16df3ad0f78589356ac6094f47eb84077a6191f67c67f48812b3765776b0e6fc09cabd9eba8a50904ad82b208af0d89c9e8ccfeaf0226f8a1ee0f85a4cfcf887e6213d82f4e790b45cf46397ef897842d4a139ade5eeb40e4c35a1fdb27588350c91e4ed9481add3f5b17385631a490ba79cb13fe6f307dcd29c1b9b62e94de6e376ac5a3e57046b8ef699b6f82c8fb4132acf3a525d83375536e9cbd6ecaf3e4a77541011dce2d584963226b607f5a7ec48dc9215e224a2bbac14e30bd56b769ad143b4f75693bcf5b44d56e566d666b1e9b1b5e5b1c2928da6fb5ebaa7eec1612a5047ca5bacee61f4e23f8a6bfb0af7296b2ebc7dad8db13fb2872d1e4d5d8f8d89130bd9d39fcdedfaa3e9eb74ddd3350bf23254c8ffb23196cb3e4a559530dc7bd38957baa176da7a5aedbee563c55c39a04599ffce7459207c0f3ad3d72b3be8f5a8e7686dcf9b9ae1c0c4a7b84629d51cf2981a8ea20dd493343affcbb9b03e2418d1818d3d3adc95cbdb1387549af5f73fabcc512997bfd328c2940cec3a1666ac519bb0d1c2005650a71b648ae314b4c07f0d8bbe209f52a9d538d3a3c7399d0643de1ba5c18ad8336c9b9bd286eca57c1ab1704bb47b5c51a6acc525a35f266101b93cfcc4f9dcdee02668cd893ad143c794b16af33d1aebe970a1b02767c402d9ecc5ae6ce661cb078763c84aa6226e65ab90024b925d9f16f6162a37659be5137ce67aea31a46f31a0badfcfb1a6cb23ac9f59ddc6707da86d448bd55a78e3571ddda0ecd2494d0d42a36b7faf823c928874b592a99289b7eab51ed58101193c9acdfbf5fe58417c516a7196f51a3be15bced27e2585fabc23be8780facca27bcd7544bb4d1c8ec8326a3d5ba6ba8c1d69a440a3824356b2c71d421239a071803c173954c83ad3f15f3289bc1506991bebaaa1da1c4d53492ef185b86619ac51336a7021b88eec22281d74dd652f7bba522a5157cf4d4dcba1983db764813729fea731bf49ee76aaa24451e6e3361978de9bd908505cc61cc709ef69d37928483313b804ba25476bad83cc7f51ca11861141fc9828bd5e6a35d1eb1c5ab7ff514b30264472486594bed26ef6d98b7e09b628928fdd3d79daa83b9c1374a8fd5ee0a253a734bbe7441f2f2e3d8b302ab5e9ab749c4b9ce13bdeb3cdcbc769dde980fa6997c223fe74b2e1ee89f44d8ec6ca4c0dae8d1b768ec9e0e80aaa00f40f7119acdd121f716f9a06f383733d116b7b7fa6eb768b66e45d6346b92f301236bee08ebb0e60024c269c698bc27f3a714ea06069c0c765b7c88a6e72a1cdfe0179bb363cbbed01faf1652b5ac568a1b6efe56854b4fcb9dbfdd1cdb2f18df10d478f552ded8b185153063333ae942cf38b184ee18262a10aa78e8e684d8f97a529b05dd96ea0f3d18141ed042ea3f835c3e1344757640a703f414b061c581dffa1c70387605c29ea061858c7c1d6d2b0d186f4a1a0c3ef1259e485be1d4a9d2736b2fd9c6cac1d903375b4d6e4c87092104ba580b220a557e5cf4695f18e1a077b98086b0e06a468afa6fe73ee35df89799335fbf5614af48add195415e950fbbd45264f42fc5d174999a0a9b16524a0aedaf7635d8fc7deb425dc5e0c66943f491c6c8924b398b987c8e2e63b6bc2aabb6483285d8827fcf13571fa9cdbbbd54f3aa65ec21233c7124a11638cedaf49c04c296bc2a6a935b988f6262767e46f3c3490a57143b4ec463b2d647d8d9b6aa18832e771444def6e95186cd42014690ac47d072c5664004d313aa37ee6ab734fcb8a7a26b1ea22c3170a531dcb052b904402fcc63396228db41ea02598126029f31ec2c4be27cb8243cfcd48f8f0c15803464e80177e9166abcb68f436b36bb31fcb4df922c8e49a22df98401d00a3a5c8406fb6099c42ebb24ea85013143b49682031185c70ea3a8ac3493bed872ac9afd7a8446af609d6f9d3f2df83e307245fc5037cbcc6f542d5bd2542bec40542f2823c1f44d3d6fdd263678e371c8deabda8a82615ff676d4594aa50194543a5250c455c5c0cdadeefbf76381ba286115cd9237a38910db80a54bb6470fd20636d294b7b3416333cbd0c795338c35feee3101730e828124f9ce45ca49fc44a5b304341578380648bd820dadc1e9153197b2e3dde820e2c8aaba3ec616ce8152e8608466728bceb97ee61cfbbbf81e50108a8c7e9701f84045b77102e26a559ff8f210c5ded0f7ad1b5777e5175fc7be9a6e4d8b13112161fe50418f88bebed1c10e929fefcf44a368726fe3c3852c484da1fa7c3b089cb8426b85af07e02b5f25cff909d324686f2934285200e9e68b1be41787c337d4ffe5ca7e13d6cbb29ca11ec31bf9a5d0a7b07aca1edb340e450f883345cb4acc996446854f5a84e8825f328a6aeca7e9f1e5bb972e02f92cee6eb20f1b6a74087b7f833d55f89176fcb479c2c2fc75fdaa758a4062099119bfb5ad086cb3312ca69190b18dff7780c6c4b7c44cac991bfdb32832fb8673a7fbede58a0d97f7071a9fdc2bdb697e3e09dbfd9e04002592076ac1f30ca00b6b86147e1cafd006e66648e049937a01ebe1991be1a0b9e6c65bf31bfe49dc98146e22266a240abdc7e1fea124b9e75df073056be013f15316f575a98830f93ff3bb8a69b0febe91fc75130da44c93163e31887c6d5db59d3178f92d6edf312de3ca9011fc44eb50dc8cac2509b8e10dff66bf7fcd19feac4d3ebb9c59c27e0d87e39856fd564788ef72d4a9fecbeee66e6bc9168394de8f7887bd4ecc87809d387f0462431032fb4b919e1a4f560774a5c7ebe83655cacb127818beb135932903bbf905b18e8e6cca2b0548df6c4f49e649e7d86ffcbaf0a10accc70994fec7562ca14e3925aca310f056fecd3390dbadfa4cb13b4fcd65a5f616963fac9692e053d76e34428e100113acb5773a1b7311a258a936d0f03439b2370f767c1fb000d9139a8ef0233a0bbf2a38e54745203dc773563be25c100685630c4fe6a3fd8f8726e948c934d31cc0afb36f9eff7a92db1b0fcf23898c4a7b5c30095f44b2664fbb14fb045faedd762f6b30504986ccdbbda1d7da15e3fdf8e4230b2117a9cb99d50c0ae02b200e4c8ffd2ce2803ddf48f12af5ec258b2c57e5448cc2501b2ebc0cc492bf9c7b48bbf343fed368abfc5e4efe6b16349a6a75c6c66c4f3fedffc1ab0370f98d9fcaf74397d1880146c5a5dabd20ab335f137aa5cf67bba05d8ff6d21b1e3b46868a055152166318e749b55e2cb926cd9594f5acee2cd02dbdc91bac5ccda6c4d6e1257953ec383d0c8f95cc993131b78cbb769dec1880cc3532c64f6016ea011ddacb42e99c75f4a076c490d8e73a893f38bee75c346cbbed1c2badfd64d3da642ba5618fe7b965e1076b84c4ed49efc6da8681a2c010a96a01a75a38be9f296ff3925ca5c384612f93006a9db5b4eb2509d0912eb40ce95df4ef0128c5e198ddc4fc9a09ddf37f071dd105b61ffc34411583f5172d252173f86ab1a229b37e220140658a9020d88f4db6397922485ccdf442e861222f014b768d6f4b4357671127179acf7f4e5c3f53bf40781c6ea6dade85949c59509588295efcd813673423d1e723a49b55a10fc8580c56affdcbbe0e48541dd9970051664e18a23cec2119273210fb443344d384b504e2b29771d64ef9e32b897f6241c7889a7e28bf9d81b7c0bf7d5967cab37f1a9fbf5dd0dba227a6924c7d9b3d4acd1813cafd94de992f8fbcb58fc44869e768dce94d3138805a413ca13b7d4b4535ded9b9067c5af0d9873cf9dddc83ba0d59509109afd463222ba2d322e3346209a79bf88dd9eff6e534097776fa2d262568463d0a22f29e622808e9ef80f00e8e43ba4d7f53d05001c53765b62ca0b34f137981c5b240c89e5d716eead4d23ede08cb347e81f73a4324ad19b26bb6ce26342e4726593a64090b3aa6f196f827d928cc4b59478fb4276d83c07fda8d74d11b89f1c539f3617bb72cb066ec71d0ccd41c9f154c79137a028b52f04242fcafb54d83b971868c8eedf97d4a842044942fb974dc3f373bce9191b5b38ac628e6a245ba295b1fb0fb5c902638f9c559a95136befaa35665a878f8a9af968287ff2c44ccf0cb29728fdb7de885bc81128593c4a99011071aa5d49428da798adadb02780beabe0815677774547aaa11b6815dba667b0bccae2e64143f491784ab269a7f8333161827b4cd903de431e74a51d365aa11e5871d44c4b7efa35462f7791308a8966f1aabd78368f8756097a25aaa4c3720ee22345bfa0334f34c04663f49a581e969a7010bd55362269bc9abbd285cf428be36ff60a3151799709d15f9dedeeb478d88a4381c85b0e6a04e86de82bdb2a5435bf5a1e041bcd13f7cbe86064e3ee871196d556363ae82f28db98a1f0091db2082aea328bd78cba7c47303d5a8d6e3831a15c1622eeb064912ef86e2"}, {0xc, 0x115}, {0xd4, 0x10b, 0xcd, "6265adfc96d241afe7e9d617cf81b811e451a59fd7c21cca9005c88976764101e8551489001ea83cba51637580a0cb873fc0d626f4cdbc455d91d1211c173657aef455c1b092da866151c339647d1711b048b671821f012d9bcfb32ebdb3db4a65e25e8165f36dee9a97d653cd0f24f060f432137d46d4f91ba4fcab3b56e7f552445ffdcd261727ae0e0dda41325ad85f8c35144dc95c53c2ef13046566171a5d9827688d04988a7e2c59b32b5e3f18de8a6a6f813bdd87549e9a58048264e60cfa53124f"}], 0x10ec}, 0x3ff}, {{&(0x7f0000004280)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="e7ea48e239966a9abf7bbfbbfe6099b394e0aeda1654391b44f1b6b31770d873fcab8e74df0a4d9b3d76a8283eb9bc0e6ea0585f8c6752ef8dc9adf8016792f695cb63487d53cb6f05b83faa3135aa7e3ac54d79054565afbb58939e90e44e9db8f75742177e18a9f963c10ce20c4f49c87f01145c8585f1a127435568edbead6a45eb64fb5f64f7291831bca3a9032a4fb89ffb9003e407938ce7f96427f02d0e584e888e9690984e1a5bfd938bfe3d2f47c4f8fa1caf7c27165f82d5291e0de1d186cfbab64ae47c9c28272e40f2ed", 0xd0}, {&(0x7f0000005400)="98816924db7e361ff8d315f040265c3fcd0b660cc55ded90e2f0c4ac3a7c3169e0239dfe8e75bc361886a6d3a343325bcc92bd79e7bb1af20c269eb73339f779094a5036a0199cc314b5750f53ae891b1559f693a0d0100be402ae56ad93d40f7a6274d2c8fe5aa2e0cd477b8b04c164cadbd75984c440580564859ed311ea24e106236591a97144100d875d01a211b359a43138dd440c4238ce5478c81c6a9d6c292794e711eddebeed7fd3dce0", 0xae}, {&(0x7f00000054c0)="6763e1d3ea4fca", 0x7}, {&(0x7f0000005500)="92d84d5d7fd8eddd7fc50348d51b49c4a48495f8039561defc04c9962bc94e361ff4d91a998b8b6a6e40b2ebaceec73e1f9df0c73cbb58dbfd9c8987fc2eabd6bae95df5bf8aae4f32ec79b9258b373a837f09c14d35db779995bcc3b5e9ec801b3fbe28c9d01b008e5ad9f5478c4e33caf1e82021ed5cb882bb682d0c09955a19290ed007d5", 0x86}, {&(0x7f00000055c0)="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", 0x1000}], 0x6, &(0x7f0000006600)=[{0x4c, 0x111, 0xfff, "6910e760bca36e8986c877e2cdfacf42109dde4e7d02b29efcb5742dfb3e027d3acee93ebfc206911cf3ec4a643c1a9e280b8b6a38fc6016e8b05349e93c"}, {0x34, 0x88, 0x7, "9d81afa7dc03920b367c6c652ff1b13d4c9b36a5b4270f2e797e5e86ef731c882554db48fc"}], 0x80}}, {{&(0x7f0000006680)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000007980)=[{&(0x7f0000006700)="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", 0x1000}, {&(0x7f0000007700)="91c89545ce541794de0529516e175957448c032233cf573e2b453850f501d6107f1bb39102e2aaee38fd043a0b573b2cf7e29b35c2a50a7e8ffcf17f668a793e61a5c892ee3f41bda0c2ef725d9b1b2b13406fb166fc4dd191a7bccfb1c72dab9443e4533069b459f7f77a6787b5ce71a1261c5863fc625eb9ace95a882c248fccb45a0965c2c20baee222bc15eba431c03d0011bb8f3a852587a8e56186750ab5d5f565a7b9223c255a061995f5f34cc92bf7d429763f5e601a9959ac6ce5ab6d2c1fd103d8030c2df2c18229be5d5840b357dab1cf99f94b71be4afd955f7afe166a0e38c65aa88a", 0xe9}, {&(0x7f0000007800)="d30866b972b87be78037bfaecc2b6a107b08ee50f8fecabcd0f88c37fb0037dbe48d65b336d541cb808b60e0ecf4bbb7efac3ec35d91fda54787a208232b7c2b41d653a6800f8937d65620ef1d2a974f19289cbaf931dee877a45b3774d959c19252c1bb8479832284ece2405d468fe247d9b73fb039a1151e9b70280c5e626b79246655072688f4f72edfec99ea22ab461b70b45a5534bbc62d4accf57218403a9c1fbe22731e988d45c4a7878060b8904c08469684c17b690499f0b0a7192d1889683c0028b056ce6e9838bdb9f08a369e5a7a2fe45c9948fafaddb5", 0xdd}, {&(0x7f0000007900)="faa18bbf46426c1857aebb32b2490fb1f556ed5f6624c5e4ced88a", 0x1b}, {&(0x7f0000007940)}], 0x5, &(0x7f00000079c0)=[{0x70, 0x105, 0x9b, "ee6c7a6ed943de97d1cdfc1ed279d7478911b02bccc35274b65a43e031c5aabfa99a2b24b446fa54cb65fbc4b1cd9a241ce2240c910784e22aab528df699709978b76871739680152ad5fca86e16a30d84031f2a92307a651fb80c0633791e4352"}, {0xa8, 0x7, 0xffffffff, "80c1458697fefaa031fccbb45cd5e575d99b6e44af586d4f34e670bbb78ad7a21d18ea9e252d0282476896f58bf760d1acd9c8e7f27fcab3db8164ea060dd7ce03646976f2be54ab781b8605352777b6d62b976d76cbf54634fc80e57be0c083c88f3037207740050ffba14c3dbf96ab58b48a9fda72481e315873a04bd1da19ba6a14d506259d9988ad9d67358074095eaf1e24de1e4afb823cb7"}, {0x100, 0x108, 0x0, "860f64cc8fa7c3c8a1259511d73761236a5d97b26fc0a1d52b47b835d2d8b16b1c54e3129e3b07233fad934bc7e595da2d22a2f18282f995b98b535042fb3e1e953b79d950f2cda5bc7de02ec56f38ee139b3280817264e975ddfebfb01944898a7c1a064e7228c5e43fddd77c6cb6013e86aa38648e8dc959a35d877efdc7ea6ff12fc1f5b5f5faf28de1f8913a4282ed3e569f3c419975de029cbc0820b322a884d28c6f5ffbe70c8af9ba0f60abf95939980ceb2954281b53c3e8dfe28afad9f0ef5c9b3c2208da730f9f70627a53e26793b0ba6a51d60704ede1774e27a3e0140e68dc53cb9239d8179fc041ea758d9771a6"}, {0x108, 0x0, 0x3, "0e573752f7a8b238826468b6b9a548ddd1f8ac7fbdadbe47bf8c2062ea2090ef8db84a3f65fe2371b5020ded82f573678521c11d11abd071055fcd070e851de143de529eb39a29d4ec07888b3c636db23068b88d6e7e587021c0c9c38ef6b7754e80e919e05f85f537cca7c9a6a3a97f5ab370ae3fc2155b19d7248a960d78fb984fdb0dcf8e2f1b8f3ae056503dcd20f7b5305be387afd61f8af2a261a48505163d61ac7f6fd0045cf9a67b117cba005bd04aaf4a1f0edff378bb3a83267a7c55e742f754daca08b6ddb0fd00c99d844d273952463f24420cf7da93b1162db85a009f80e5e9db18505fddcd68d599bb40351a22abc8e9ea41"}], 0x320}, 0x7ff}], 0x8, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r4, 0x0, &(0x7f0000000100)) r5 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1170}, 0x18b, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x200000000101, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16:49:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0xfdfdffff, 0x0}) 16:49:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0xfdfdffff, 0x0}) 16:49:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:03 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa6, &(0x7f0000000000)=[{}]}, 0x10) 16:49:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:49:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0663"], 0x0, 0xfdfdffff, 0x0}) 16:49:03 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xae, &(0x7f0000000000)=[{}]}, 0x10) [ 585.440508] binder: 22393:22427 tried to acquire reference to desc 0, got 1 instead [ 585.441055] binder: 22393 invalid dec weak, ref 1513 desc 0 s 1 w 0 [ 585.496032] binder: 22430:22437 unknown command 25350 [ 585.525764] binder: 22430:22437 ioctl c0306201 200003c0 returned -22 [ 585.546237] binder: 22440 invalid dec weak, ref 1527 desc 0 s 1 w 0 16:49:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005421, &(0x7f00000000c0)) 16:49:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) 16:49:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0663"], 0x0, 0xfdfdffff, 0x0}) [ 585.703382] binder: 22447:22448 unknown command 25350 [ 585.724252] binder: 22447:22448 ioctl c0306201 200003c0 returned -22 16:49:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000080)=0x34c) 16:49:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0663"], 0x0, 0xfdfdffff, 0x0}) 16:49:04 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xaf, &(0x7f0000000000)=[{}]}, 0x10) 16:49:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) [ 585.943512] binder: 22463:22465 unknown command 25350 [ 585.967647] binder: 22463:22465 ioctl c0306201 200003c0 returned -22 16:49:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x2000000, 0xfdfdffff, 0x0}) 16:49:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="066304"], 0x0, 0xfdfdffff, 0x0}) 16:49:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f00000000c0)=0x1da) getsockname(r0, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x80, 0x8000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xb423}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x7fff, 0x80, 0x0, 0x6, 0xd8c, 0x5, 0x18, 0x9, r2}, &(0x7f0000000200)=0x20) r3 = syz_open_dev$radio(&(0x7f00000007c0)='/dev/radio#\x00', 0x3, 0x2) bind$bt_rfcomm(r3, &(0x7f0000000800)={0x1f, {0x7, 0x7, 0x8, 0x5, 0x5, 0xa7}, 0x8}, 0xa) 16:49:04 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb0, &(0x7f0000000000)=[{}]}, 0x10) 16:49:04 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa7, &(0x7f0000000000)=[{}]}, 0x10) [ 586.329207] binder: 22440:22474 tried to acquire reference to desc 0, got 1 instead [ 586.329932] binder: 22440 invalid dec weak, ref 1527 desc 0 s 1 w 0 [ 586.377423] binder: 22477:22478 unknown command 287494 [ 586.388978] binder: 22477:22478 ioctl c0306201 200003c0 returned -22 [ 586.434627] binder: 22488 invalid dec weak, ref 1537 desc 0 s 1 w 0 16:49:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005450, &(0x7f00000000c0)) 16:49:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x7f, 0x1]) 16:49:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="066304"], 0x0, 0xfdfdffff, 0x0}) 16:49:04 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa8, &(0x7f0000000000)=[{}]}, 0x10) [ 586.639867] binder: 22496:22498 unknown command 287494 16:49:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) ioctl$sock_ifreq(r0, 0x893b, &(0x7f0000000000)={'lo\x00', @ifru_mtu=0x10001}) syz_open_dev$cec(0xfffffffffffffffe, 0x2, 0x2) 16:49:04 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb1, &(0x7f0000000000)=[{}]}, 0x10) [ 586.663321] binder: 22496:22498 ioctl c0306201 200003c0 returned -22 16:49:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="066304"], 0x0, 0xfdfdffff, 0x0}) [ 586.796358] binder: 22516:22517 unknown command 287494 [ 586.822825] binder: 22516:22517 ioctl c0306201 200003c0 returned -22 16:49:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x3000000, 0xfdfdffff, 0x0}) 16:49:05 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x80000, 0x0) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7374416383e6d2"], 0x7) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000001c0)={0x0, 0x6, 0x9, {r1, r2+30000000}, 0x5, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r3, 0x0, &(0x7f0000000100)) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$RTC_WIE_ON(r4, 0x700f) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040)={0x4}, 0x1) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) 16:49:05 executing program 0 (fault-call:6 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:05 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb2, &(0x7f0000000000)=[{}]}, 0x10) 16:49:05 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xa9, &(0x7f0000000000)=[{}]}, 0x10) [ 587.222921] binder: 22488:22524 tried to acquire reference to desc 0, got 1 instead [ 587.226891] binder: 22488 invalid dec weak, ref 1537 desc 0 s 1 w 0 [ 587.312089] binder: 22537 invalid dec weak, ref 1547 desc 0 s 1 w 0 16:49:05 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005452, &(0x7f00000000c0)) 16:49:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5c, 0x480000) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6}, 0x10) 16:49:05 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb3, &(0x7f0000000000)=[{}]}, 0x10) 16:49:05 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xaa, &(0x7f0000000000)=[{}]}, 0x10) 16:49:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)=0x2c7) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xaf4a0eace6ad1f2, 0x0) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='em1loproc&em1vmnet1+#)posix_acl_access\'posix_acl_access{GPL$\x00'], &(0x7f0000000300)=[&(0x7f0000000140)='Tposix_acl_access\x00', &(0x7f0000000180)='-}ppp0eth0\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='*\x00', &(0x7f0000000280)='userppp1\x00', &(0x7f00000002c0)='ppp1&wlan0,\x00'], 0x1100) [ 587.718602] binder: 22563:22564 ioctl 2 200003c0 returned -22 [ 587.736404] binder: 22563:22564 tried to acquire reference to desc 0, got 1 instead [ 587.757554] binder: 22563:22569 ioctl 2 200003c0 returned -22 16:49:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4000000, 0xfdfdffff, 0x0}) 16:49:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xa86d, 0x40000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x424, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x10000, 0xc00000000000]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xbbe6, 0x6ca]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000094) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:49:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:06 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xab, &(0x7f0000000000)=[{}]}, 0x10) 16:49:06 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb4, &(0x7f0000000000)=[{}]}, 0x10) [ 588.105067] binder: 22537:22575 tried to acquire reference to desc 0, got 1 instead [ 588.147530] binder: 22582:22584 ioctl 541b 200003c0 returned -22 [ 588.162772] binder: 22582:22584 tried to acquire reference to desc 0, got 1 instead [ 588.186075] binder: 22582:22592 ioctl 541b 200003c0 returned -22 16:49:06 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000000005460, &(0x7f00000000c0)) 16:49:06 executing program 4: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80800) ioctl(r0, 0x100, &(0x7f0000000140)="201ff754d296648536efa3800066e22d6415e129b6cc6568fb03d79c02de71108021b37f09bb26b4dc482811a30b7e613088c87e148f9c0083033ab2ac0d6f0ad18d4f78db907f87544996471fc44ed093246d2c1e61de11c592d515251cc7bbaabdc104e33706d3bf602dd9fbc4b392ef0cc724af87ad164a000bf65424af40d3830b5dae438cb420c6b73e671c5d9b74a01110a8875bb9e260b667c767b63c4e1f6550535f06d5bab3790a898996fd2f43d3078f7521076ca633c901800cf0") prctl$PR_SET_FP_MODE(0x2d, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) dup2(r1, r1) 16:49:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:06 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:06 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xac, &(0x7f0000000000)=[{}]}, 0x10) 16:49:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockname(r0, 0x0, &(0x7f0000000100)) [ 588.608037] binder: 22619:22620 tried to acquire reference to desc 0, got 1 instead 16:49:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x5000000, 0xfdfdffff, 0x0}) 16:49:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80982, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f00000017c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001800)={@mcast1, @rand_addr="f39b775bf3ed124dcdc58c67812125bc", @local, 0x1c, 0x38a7, 0x3, 0x100, 0x200, 0x1, r2}) 16:49:07 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb6, &(0x7f0000000000)=[{}]}, 0x10) 16:49:07 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xad, &(0x7f0000000000)=[{}]}, 0x10) [ 588.967972] binder: 22589:22631 tried to acquire reference to desc 0, got 1 instead [ 588.969212] binder_dec_ref_olocked: 2 callbacks suppressed [ 588.969227] binder: 22589 invalid dec weak, ref 1561 desc 0 s 1 w 0 [ 589.036657] binder: 22639:22641 tried to acquire reference to desc 0, got 1 instead [ 589.053119] binder: BINDER_SET_CONTEXT_MGR already set [ 589.062492] binder: 22645:22646 ioctl 40046207 0 returned -16 [ 589.077377] binder_thread_write: 13 callbacks suppressed [ 589.077389] binder: 22645:22646 Acquire 1 refcount change on invalid ref 0 ret -22 [ 589.112880] binder: 22645:22646 DecRefs 0 refcount change on invalid ref 0 ret -22 16:49:07 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)) 16:49:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200, 0xfffffffffffff2b5, 0x1, 0x7}]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x2a, 0x9, 0x9, 0x6}, {0x8, 0x5, 0x8, 0x3}, {0x63, 0x0, 0x55f, 0x63e3bf7f}, {0x1, 0x7fffffff, 0x80, 0x9}, {0x9, 0x2, 0xe4, 0x8eeb}]}, 0x8) getsockname(r1, 0x0, &(0x7f0000000100)) 16:49:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:07 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:07 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xae, &(0x7f0000000000)=[{}]}, 0x10) [ 589.393681] binder: 22658:22661 tried to acquire reference to desc 0, got 1 instead 16:49:07 executing program 4: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6000000, 0xfdfdffff, 0x0}) 16:49:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x4, 0x3) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0xfffffffffffffff9, 0x5, 0x3, @broadcast, 'veth0\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:08 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb8, &(0x7f0000000000)=[{}]}, 0x10) 16:49:08 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xaf, &(0x7f0000000000)=[{}]}, 0x10) [ 589.845177] binder: 22645 invalid dec weak, ref 1584 desc 0 s 1 w 0 [ 589.893571] binder: BINDER_SET_CONTEXT_MGR already set [ 589.918288] binder: 22689:22690 ioctl 40046207 0 returned -16 [ 589.924657] binder: BINDER_SET_CONTEXT_MGR already set [ 589.952736] binder: 22700:22701 ioctl 40046207 0 returned -16 [ 589.952905] binder: BINDER_SET_CONTEXT_MGR already set [ 589.979050] binder: 22689:22698 ioctl 40046207 200003c0 returned -16 [ 590.003682] binder: BINDER_SET_CONTEXT_MGR already set [ 590.016948] binder: 22700:22701 ioctl 40046207 0 returned -16 16:49:08 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000040045017, &(0x7f00000000c0)) 16:49:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x2, 0x6011, r1, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffb, 0x101000) ioctl$TIOCSBRK(r3, 0x5427) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r2, 0xb) munmap(&(0x7f00001bf000/0x3000)=nil, 0x3000) getsockname(r0, 0x0, &(0x7f0000000040)=0xffffffffffffff58) 16:49:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7000000, 0xfdfdffff, 0x0}) 16:49:08 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb0, &(0x7f0000000000)=[{}]}, 0x10) 16:49:08 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb9, &(0x7f0000000000)=[{}]}, 0x10) [ 590.324555] binder: 22717 invalid dec weak, ref 1590 desc 0 s 1 w 0 16:49:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 590.454329] binder_thread_write: 3 callbacks suppressed [ 590.454342] binder: 22734:22735 tried to acquire reference to desc 0, got 1 instead 16:49:08 executing program 4: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 16:49:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) socket$inet(0x2, 0x2, 0x8) 16:49:08 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xba, &(0x7f0000000000)=[{}]}, 0x10) [ 590.615314] binder: BINDER_SET_CONTEXT_MGR already set [ 590.635866] binder: 22741:22743 tried to acquire reference to desc 0, got 1 instead 16:49:08 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb1, &(0x7f0000000000)=[{}]}, 0x10) [ 590.681801] binder: 22741:22742 ioctl 40046207 0 returned -16 [ 590.681839] binder: BINDER_SET_CONTEXT_MGR already set [ 590.705195] binder: 22741:22751 ioctl 4018620d 200003c0 returned -16 [ 591.116900] binder: 22717:22769 tried to acquire reference to desc 0, got 1 instead [ 591.119251] binder: 22717 invalid dec weak, ref 1590 desc 0 s 1 w 0 16:49:09 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000040049409, &(0x7f00000000c0)) 16:49:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x101000) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x200, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000180)={{0x0, 0x3}, 0x20}, 0x10) ioctl$TCSBRK(r2, 0x5409, 0x7) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)) 16:49:09 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:09 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb2, &(0x7f0000000000)=[{}]}, 0x10) 16:49:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xa000000, 0xfdfdffff, 0x0}) [ 591.243977] binder: 22776 invalid dec weak, ref 1606 desc 0 s 1 w 0 [ 591.251877] binder: 22775:22783 tried to acquire reference to desc 0, got 1 instead 16:49:09 executing program 4: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 16:49:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x402c5828, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:09 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x10402) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) [ 591.420304] binder: 22795:22798 tried to acquire reference to desc 0, got 1 instead 16:49:09 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb3, &(0x7f0000000000)=[{}]}, 0x10) 16:49:09 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbc, &(0x7f0000000000)=[{}]}, 0x10) 16:49:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0x402c582a, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 591.643322] binder: 22813:22814 tried to acquire reference to desc 0, got 1 instead [ 592.034696] binder: 22776:22824 tried to acquire reference to desc 0, got 1 instead [ 592.036090] binder: 22776 invalid dec weak, ref 1606 desc 0 s 1 w 0 16:49:10 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x8000004020940d, &(0x7f00000000c0)) 16:49:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200040, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/80) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:10 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb4, &(0x7f0000000000)=[{}]}, 0x10) 16:49:10 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbd, &(0x7f0000000000)=[{}]}, 0x10) 16:49:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x20000000, 0xfdfdffff, 0x0}) 16:49:10 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/223, 0xdf}], 0x3, &(0x7f0000000340)=""/181, 0xb5}, 0x8}, {{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000000800)=""/216, 0xd8}], 0x5, &(0x7f0000000940)=""/251, 0xfb}, 0x93}, {{&(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000ac0)=""/171, 0xab}, {&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/109, 0x6d}, {&(0x7f0000000d00)=""/252, 0xfc}, {&(0x7f0000000e00)=""/7, 0x7}, {&(0x7f0000000e40)=""/246, 0xf6}], 0x6, &(0x7f0000000f80)=""/66, 0x42}, 0x9}], 0x3, 0x100, &(0x7f00000010c0)={r1, r2+10000000}) r3 = syz_open_dev$mice(&(0x7f0000001100)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000100)={0x2}) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000001140)={{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x2, @empty, 0x8}, 0x6, [0x8f7, 0x800, 0x80000000, 0x2, 0x0, 0xffffffff7fffffff, 0x7, 0x4]}, 0x5c) prctl$PR_SET_SECUREBITS(0x1c, 0xc) modify_ldt$write(0x1, &(0x7f0000000000)={0xa98, 0x20000800, 0xffffffffffffffff, 0x3, 0x7b, 0x2, 0xffffffffffffffff, 0x4, 0x6, 0x4}, 0x10) [ 592.187281] binder: BINDER_SET_CONTEXT_MGR already set [ 592.224601] binder: 22837:22839 ioctl 40046207 0 returned -16 [ 592.224895] binder: BINDER_SET_CONTEXT_MGR already set 16:49:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 592.265990] binder: 22838:22840 ioctl 40046207 0 returned -16 16:49:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) getsockname(r1, 0x0, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0xf2c, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) 16:49:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x48000000, 0xfdfdffff, 0x0}) [ 592.370514] binder: 22857:22858 tried to acquire reference to desc 0, got 1 instead 16:49:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xca, 0x701201) sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) [ 592.485846] binder: 22866 invalid dec weak, ref 1629 desc 0 s 1 w 0 [ 592.498480] binder: 22869 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 592.498492] binder: 22869:22870 ioctl c018620c 200003c0 returned -22 [ 592.534181] binder: 22869:22870 tried to acquire reference to desc 0, got 1 instead [ 592.543189] binder: 22869 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 592.543203] binder: 22869:22877 ioctl c018620c 200003c0 returned -22 16:49:11 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000402c5828, &(0x7f00000000c0)) 16:49:11 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbe, &(0x7f0000000000)=[{}]}, 0x10) 16:49:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x82100, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) r3 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x4, r2, 0x25, r3}, 0x10) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:11 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 593.046229] binder: 22886:22888 tried to acquire reference to desc 0, got 1 instead 16:49:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x699, 0x1, 0x3af, 0x3}, 0x10) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x1000000, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:11 executing program 4: r0 = dup(0xffffffffffffffff) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x1300) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000100)) [ 593.262765] binder: 22866 invalid dec weak, ref 1629 desc 0 s 1 w 0 16:49:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4c000000, 0xfdfdffff, 0x0}) 16:49:11 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x420000, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000040)=""/147, &(0x7f0000000140)=0x93) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) 16:49:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0xfdfdffff, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 593.435940] binder: 22921 invalid dec weak, ref 1649 desc 0 s 1 w 0 16:49:12 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000402c582a, &(0x7f00000000c0)) 16:49:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0xfffffdfd, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:12 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbf, &(0x7f0000000000)=[{}]}, 0x10) 16:49:12 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb6, &(0x7f0000000000)=[{}]}, 0x10) 16:49:12 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20280, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, 0x0, &(0x7f0000000100)=0x1a4) 16:49:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x100000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0xfdfdffff00000000, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000000)=0xffffffe8) [ 594.235797] binder: 22921 invalid dec weak, ref 1649 desc 0 s 1 w 0 16:49:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x60000000, 0xfdfdffff, 0x0}) 16:49:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x0, 0xfdfdffff, 0x0}) [ 594.363574] binder: 22978:22979 ERROR: BC_REGISTER_LOOPER called without request [ 594.397716] binder: 22980 invalid dec weak, ref 1671 desc 0 s 1 w 0 16:49:13 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080044d76, &(0x7f00000000c0)) 16:49:13 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)=0x29f) 16:49:13 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc0, &(0x7f0000000000)=[{}]}, 0x10) 16:49:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\fc\x00\x00'], 0x0, 0xfdfdffff, 0x0}) 16:49:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\rc\x00\x00'], 0x0, 0xfdfdffff, 0x0}) 16:49:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)=0xfffffffffffffeb3) 16:49:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) 16:49:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02630440"], 0x0, 0xfdfdffff, 0x0}) [ 595.111377] binder: BC_ACQUIRE_RESULT not supported [ 595.124392] binder: 23011:23012 ioctl c0306201 200003c0 returned -22 [ 595.140230] binder: BC_ACQUIRE_RESULT not supported [ 595.149643] binder: 23011:23015 ioctl c0306201 200003c0 returned -22 [ 595.198749] binder: 22980 invalid dec weak, ref 1671 desc 0 s 1 w 0 16:49:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x68000000, 0xfdfdffff, 0x0}) 16:49:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x149000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) 16:49:13 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc1, &(0x7f0000000000)=[{}]}, 0x10) [ 595.331748] binder: 23030 invalid dec weak, ref 1689 desc 0 s 1 w 0 16:49:13 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080044df9, &(0x7f00000000c0)) 16:49:13 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb8, &(0x7f0000000000)=[{}]}, 0x10) 16:49:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="04630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff920, 0x200040) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0)=r3, 0xfffffffffffffe5b) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7, 0x8802) fcntl$setown(r0, 0x8, r2) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7, 0x400) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xbe, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/userio\x00', 0x40a000, 0x0) 16:49:13 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc2, &(0x7f0000000000)=[{}]}, 0x10) 16:49:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0x401) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x18}, @rand_addr="3e270f8efff60d4046c24805cc82af2d", @empty, 0x100, 0x0, 0x50, 0x100, 0x1, 0x400000, r2}) [ 595.849712] binder_thread_write: 13 callbacks suppressed [ 595.849724] binder: 23037:23047 tried to acquire reference to desc 0, got 1 instead 16:49:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10, 0x800) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @loopback}, 0x14c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='veth1\x00', 0xffffffffd3f6cb45, 0x3, 0x2}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x5, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x1, "bcf2570d22d0ad98db01f267f2aa2d918f935da9cb5383efc9455827785f4f676c9ed923b358059aa12b1691a649d62a3960ffd5fb545be601b55049545f21bc7fea06c5f2a90e8cfe2a0506bd6002eb28d3612a7f9df26be764f9fe1d0a14e4198179d8b6c756729a1490b37e8597c5ac2609c972665f44ed5675daf77c6b95bd15f979bc652402095cb38578572cf951937f35790ac17a3526002261c9d5062219d82303cf138e8d8d8f262f1d872c24ca6c4baab4cefcc9f25bbbdee8de28a006bb378a691c54356ba7dfed88a01ea8e006a03488bdd30471c8d3eaf39cbe6f0afedd6acc4d66217145a28d21a6bf32bc7bd4645024ddc2a64c678bca04ce", 0x3d, 0x8000, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x1}, r3}}, 0x128) getsockname(r0, 0x0, &(0x7f0000000100)) ioctl$TUNDETACHFILTER(r2, 0x400854d6, 0x0) [ 596.005049] binder: 23058 invalid dec weak, ref 1695 desc 0 s 1 w 0 16:49:14 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc3, &(0x7f0000000000)=[{}]}, 0x10) [ 596.054531] binder: 23058:23059 tried to acquire reference to desc 0, got 1 instead [ 596.128929] binder: 23030:23067 tried to acquire reference to desc 0, got 1 instead [ 596.163020] binder: 23030 invalid dec weak, ref 1689 desc 0 s 1 w 0 16:49:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6c000000, 0xfdfdffff, 0x0}) 16:49:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:14 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xb9, &(0x7f0000000000)=[{}]}, 0x10) [ 596.260196] binder: 23076:23077 unknown command 1074029330 [ 596.289805] binder: 23076:23077 ioctl c0306201 200003c0 returned -22 [ 596.313048] binder: 23080 invalid dec weak, ref 1703 desc 0 s 1 w 0 16:49:14 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080045002, &(0x7f00000000c0)) 16:49:14 executing program 4: socketpair$unix(0x1, 0x4000000007, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:14 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc4, &(0x7f0000000000)=[{}]}, 0x10) 16:49:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="03630840"], 0x0, 0xfdfdffff, 0x0}) 16:49:14 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xba, &(0x7f0000000000)=[{}]}, 0x10) 16:49:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)=0xff52) r2 = fcntl$getown(r1, 0x9) ioprio_set$pid(0x1, r2, 0x9) r3 = getpgrp(0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000)={0x22, 0x0, 0x8}) [ 596.667037] binder: 23095:23097 BC_FREE_BUFFER u0000000000000000 no match [ 596.720910] binder: 23095:23097 tried to acquire reference to desc 0, got 1 instead [ 596.753874] binder: 23095:23102 BC_FREE_BUFFER u0000000000000000 no match 16:49:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000004000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004040)=0x14, 0x800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/snapshot\x00', 0x10000, 0x0) sendmmsg(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000040)=@isdn={0x22, 0x8, 0x80000000, 0x86adf23, 0x79e4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7f8e68cae70ef2e9b0d9567390f590081b2f06f199159ce67b61a7ca33411ba6c6388083eced4cfb34e51c51330ef549e5260a34eee008e97bdb6c67af2da890aed53389e6d490b21ce6e75a5db79c79b61e37195604b612b20270eb00aaa58704c3762fc63322b5d039d5070cbe933eb88494236881e6550edc78dd42632fe8bbf1c7407b2328024b0afd77bd558b706bba9a6c6931374e778ee5ba966eb73655037326065e3f219008bd58fc8690f87ee558ef9c5eba86", 0xb8}, {&(0x7f0000000180)="b0db0c19806e6dea524e556e277612", 0xf}], 0x2, &(0x7f0000000200)=[{0xe4, 0x11f, 0xffffffffffff8000, "dc661fe24d10af728cf8a256ca13cabeca569b7a3ffb148c06a8457138dd802e0799848b3e656ecd4e9bf2c7ab202cbe661588f80108056e90c17878196108f84cc426a903974929cc76c689200bc35016dc07aa1ae68a20562e82ebea0ee895412a91d054d2c089d520caab3eb8d4ec9e67ded2015ef21463e78fe5dc1ed751c5a7b4ee016e768c031e18e482e05521a5bb8dbf335142bf427d020b2ec2d571567ab4412e12724029296097f5efb419ecad0c1d27cd87ec14be9511efa15ea19cf819f3068a075ecfbd30f5f128301c301b06d38d4c3c"}, {0x74, 0x13f, 0x8115, "8da10a264c2038742e87a001ea00d97b6826fd1e5cbbe0c3ebcc4a96cec5c2ed443f0ed8296c90c6f3164528235d7d0681dc95147c53b9af6a9709b3ec8b2cc5ab043e9bf3991d1e85bbafacdb641b9846143e1c23a2816e399229c545a018925588c5cecd"}, {0x34, 0x110, 0x6, "0b94b35b6774f0663124ad7c620feac30862712b4920beb429a3704cf3ea16cce9c06157e76c3a"}, {0x5c, 0x0, 0x3, "aecde1cec3e4f5f3088c29ea9a798c4c13973d4c82c640b63d2f0b3db1e82780f5e3679f60da4b6300524813a43c035d9fe1c17d5ce251b1b45c7cc7db7bf94afe163e16ae382b20e00c14e1703265"}, {0xcc, 0x88, 0x7, "1370d6b3e9b853e3bb167d6f9ae79c4c5f2ec2f5e7f442b0e11395755dfbed8d9b5b9c31d2abfe62be2f06d892b7b9c92512fb3a44d97c885c31a57b94114c4f73ee0614a74ee57c5a0396795b7b6c6bef176af00770c29c6739df2b72ac8546e8738dac32c24459ea646cf032ae53db65a09736500ce77777f4f9756b13de7d1eab6adc96fe8e4ce6d5eb4fd6a66f05f338ccf2ed9aec6bf20ffcf6b787852c82773e63149f0b438a4fd5e94fe974403bd6c17ec5b1c94447fa920877"}, {0xc8, 0x6, 0x6, "854f9d2a7344f69caccad7935e8d299bf61015360ef970b4ad0cecd67213bfe2f5d7493d499f4f5e4043c518430cacb89ad19bc3bef304b0a6a2ade42b2dc5f213bbfece954f77531b8c7c55edd9be187b2855129032b1c8f90e8c8957228cdde3f7cacec1a29384c9757ab01a3143c24c5d035a271fcc9941c127f4cf2b2f3501aca48d4cac4f225e89037107869183fe3c668be5f981847219478ff181badb107302f4dae951bfccbdba17fa2eae1cc31ed4528b690e8f6a34"}, {0x5c, 0x11f, 0x2, "947f6f4412c2b004ba5c0b5267b2816352f928b55dcfd5a6da2619319d143a91ab21a24b0732ee10ef0427dbd0641306728cf6af7468eb440a51e2d69d8358d645739bb15714366af6e290e451"}, {0x1c, 0x0, 0x4, "c09d135fff72876258192e68d6af5d"}, {0x14, 0x13b, 0x20, "489e7d9181d7f9"}, {0x28, 0x119, 0x7e141d01, "1815b70a59bc87929ec1e698700cbcb2f00dfd2bfa60d49cfb5f"}], 0x430}, 0x7ff}, {{&(0x7f0000000640)=@in6={0xa, 0x4e23, 0x8001, @mcast1, 0x9}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000006c0)="95122a8766456c7699df71f9da24f13ee467b953e3fb7fe01dd0d1470984d975fd8bf287986a37e53f4c68195748ccd9ac7f814ddb2b1e20c7588f469a8bb1bb4aa72fdb0b38c8189ae4f25d4a2669ffea36b60fe9e10dfcd0bee9401f", 0x5d}, {&(0x7f0000000740)="68768d5210c987e617f10a15d8b464b15449ee8c47c096c1594ef19646abb9f82c82c9d6cf12ee6bb5c392461c34aa35f843c865d0a05c8128ecf617ba77fd5b897f510f6f7d", 0x46}, {&(0x7f00000007c0)="5bea4eeec038060919392e6c93e41a80cb655c064a2b8c3f2d4f43308509495338c18230c542802ca1dd51c68010b4c281e1ed1a15bb3ab8f6aea71ab522a4ba0918d0d3e85cde546783c0222b9b7dc428fb96140324ae470da70f31357586fe9a6706f9699b33715110f81db6bdc092265cc7e7b3e309b90dbccce316ac48d92c5d5a9e2c10b659f455c0493afebcaeb5c71834898b8f260a82dc74fbf8", 0x9e}, {&(0x7f0000000880)="7f8416c5bae7bdf64cbc28b787ea7723e86364d0b8edfd279c42f5e263916fe9057831a107b256dc79822df91b46b3d4ac211006628174721e4117b1cf262c8dee42042978d8cad6e88609d75f83ea2407a408cd396591049530185103ae7b51a153e6901dd781a3b0ef23aa0fc50141a6f280dcd0270a30f50a92809a57a6767adac5f18f36dd21", 0x88}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="691076c131dfba23794c38d42298933e3412db15342a0bde77b2bb84556f64d06bd0b5ddc6b9687789caa949e810c2437efa9db40dd16942dee7094b5f8ff5449405924aabdc45eea19d85ea8ac1ced1a4baf07496c49cc4a207edfb9dae31fc4d5ee67dee2ea066829716c200efe7b0eb662aba43b79e8edb0b60d8d1041c", 0x7f}, {&(0x7f00000029c0)="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", 0x1000}], 0x8, &(0x7f0000003a00)=[{0xb4, 0x115, 0x0, "45c203c199909424888b72843aeffcf79dc021705eeff78d7c62bdc0300016bcc60885ab135af9efe8ad63a21861ea654669767004b2eb79847a4c8a29d79cd935a5c34c7032164a12a26fd63a2987d6b3861ad53dc58e0f4c48004bf78a20f1c4273aab8a48b00d08f79412eba539fb2e9f5780a401fb8ba4fb6266b5e9f7e3985950bbf6846fc4fe1e6efa5e14430c3b10f38462f2b288272fc37fb085ca636747740e5538"}, {0x38, 0x103, 0x101, "f1fd1b67cf26422b89be5031b06d9cd3cbc10b57a2441f2a1c6093c57361b5fd1a0addccc1dee7c9db"}, {0x48, 0x112, 0x1, "d6cebe8987863e7c4e2b05aae0bec6fd7d67518a906df962fb31ae980ece5b785cba293ad61caf71c5446c1dd70a844f3a8bcd99940ae7aac5db"}, {0xa0, 0x11a, 0xffff, "0b8cd25cfe8e4b1c8a07fbe170306842b554a0dcac3ac87f2b90ed8fb1ec43c0ad4cc123f67008a351716c779e1ac0bf38ef5343ae97eb080a0b670dbb1b1dc53f64f471e9cc55296482235e782a64ad41cb2032e4f4473d014baeda01c9160e2fd2e9ff47a47ae5dc0a974b11cedcebf296274492bb448394eafc5e2ef792170a84637e9b877fe2c1727ebbf881f7a53cea0c7c"}], 0x1d4}}, {{&(0x7f0000003c00)=@in6={0xa, 0x4e23, 0xddcd, @empty, 0x5}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003c80)}, {&(0x7f0000003cc0)="977f372dbe1a5dd81e40b5b4e3ced8d47928f1dc2c990933e7ab6e155747b860497871e55a1b1cbd02ed116402c8f46b1ff744a82f5c0ca959442152ad585b71351383ea68ecf3fbb8fc25f485e06a3a3b9741225b21b78ab0b0c9bb6b062efcbd59704d4bcf94b5800d0605720f655fd741ce887bee295a2a72f207e6f932a233e596f403109ffaaf35e6f103cf074af70299e46f79db4ec55520bb7a6f7869845e710b0bdccc7d0e2b31669b5a644cefedc532544d533fe6cbac1ea40af1eb18f355a9ee81a51715", 0xc9}, {&(0x7f0000003dc0)="cbad90814822fa48a62e4289a12b7627a6d533092b727f87b28d94e24b76e63a1c266c391ee09e6e4bbbd3db1bd78b27ace8f12ad1f956aa426984d31eba73f6bd818f0fbc49075f5c81990d5de8a31cfb58dc2d0ce11460b477d06000f996970654631f306fba9d6f196b4d6d6f8ae52fc4d34b0e64176fc48ff0d21dbbf91f6cb835273214fa4cc6512e7b587fa64bd9bfb639f9c51ec761d76fe28f5b9187816884954d47eade46adcbc663181bd460ea6b20891217ea38edb36ec7484afd8b3533be6fcd7aa1dbadd67ae0ab2368e76be88b0a8cedf8a82b0d", 0xdb}, {&(0x7f0000003ec0)="b21e49c68b02707f40e13c731e82d1af07dea164d98fdddd7c761f980e018ca7efa28fadad425d846af4c4ae40dd0669bd1b72b6b59b8db030b564c4f382ee969c60f4fcff988c4ed0f8b2173ad5ae6ba8ca2e63636e85ccbb9f3861c902ae04d6d3cc27cdce35684567791e55776946fe05b1020423f9b8a73656ef98a492c0673ea47b3a9e9f8a9c0de1ac1d0d4a0d7666839b714832", 0x97}, {&(0x7f0000003f80)="0a964c4bf5fdc2211b64115dddb98812f8399966", 0x14}], 0x5}, 0x8000}, {{&(0x7f0000004080)=@hci={0x1f, r2, 0x1}, 0x80, &(0x7f0000005380)=[{&(0x7f0000004100)="e8cf3ac9cd0ebe2d45f9636bceb3757d1e9c55568b18cdbb464645970db3e99af755e6a769d1f3b7e28dcfa98e77069fa84951a623234baf481960b6be97a3521e2577c2485ce1cd8bb1d0299f8fd8b47aed06c4b1d1ab66f86549f338737faed59bc150e128f3796e0563a8ef12ed5bc1", 0x71}, {&(0x7f0000004180)}, {&(0x7f00000041c0)="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", 0x1000}, {&(0x7f00000051c0)="9ceef55bc75dd94b72ae186780ecbd7d8f92a97ee501f8d025e05c29c7370d78073d4d11dbfbc6e1754821d913c859167915c2deed6e5d18108dbf636768f6b0f2f258c8145092752b3a058aa1d8eaca82f8fbd5ea3629a1334be3a90ceb10fd896e25d7c123194860ff244d747797a5ff8380afe8b3d6ed2cdf49234bfdc2c947d53133dc1fdb0e8236c954ffbf1bbbc0750f5bf5c07d4e4f98fccbf63f05db1219e541ef26f6c50fa1d338a52eb82006e2075c8915add742459a43e8873a1669019a5dcfde37c8cf4800", 0xcb}, {&(0x7f00000052c0)="eccac48745123ab04fbc32627e1ec2342a213372611920813e3e424875dced5fd4170111c77a12f48f3a16aece0b53b20eec5928ba03c4ac30016bef5b57e06d049e30787d237a8e236843ceb42d7da7a74363c401b4b9eeccb80d0b63208d10de1fef0ff574df86bfdd4577cb9e8de744118bbae18bd946838cd89121a4ef74a8183c4d5610c75bd9a0bf0293f535fd7dab0690ec541b8c6d8dfc7e82", 0x9d}], 0x5, &(0x7f00000053c0)=[{0x60, 0x1, 0x7f, "3a57312fa486bde5e44fa43eab6d8be21be15f0bcb116bf6036cbf58d7e3af7ee550699f78eaa36b142a8c4c620880a1c550767e2cb351ffe5d9f3afc7169ec545972ed908c784ac884d8272570c4721edbdfa7f"}], 0x60}, 0x1}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005440)="83ed7f287d5304d5db32484a931af753ad326d98ea59041193c19605ec3506625ea536c31cbcfb545f7b95984cec47c8fe4b9792060e5f3ad432eeef1a608c9f3def7bf31b0c0b25523b1ad098b5d41fa6d3463abb1b8d9e878f7a3cdab665a6c9090e8d1c701af6a015356aa7a17f208ee6a6", 0x73}, {&(0x7f00000054c0)="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", 0xff}, {&(0x7f00000055c0)="f8b2dcaf7c9b31b9363db4b24f230e435aca50101b06be94d91145567e7f9e8770be845423ac9109eb1b0404e7bb8936ded2", 0x32}, {&(0x7f0000005600)="bf22cc699dd179345a3e955e5278ecc0db78e0658af515a2533d9a46b9b3339c8496299c0f3a466ebc701ab851b55f94dde98c0c117e79a5efbe3449fd88bb05a02f0200b94facd7539dd4530d39e2f9d9b5aa65b2f61bc3b02c2e93ac58d276e1a3d4275507ca1dd409ae812e5739b116b3eae2db0a2073a027122bab7cceefa25c18e76795a4b7bbdeb1e008869a87bd29ca91b897a7487112f9c9e2900563796fe140f902e05b3c715ebfc8387daa146c1b42eeae6c3fed8ed40932241446029cb1c2c0a13dbe", 0xc8}], 0x4, &(0x7f0000005740)=[{0xe4, 0x10f, 0x8001, "9ba677d0a4ad8d4b299cc4643004cdd0bbc0af5de27649ba6b71a8a5fb835404616289a5f0c38b8f1d0af8cc37dd3255bf20745a10c5580e191a2e66ebd6772bedea4f51deaa93bc208e40fb06c70c876514f955df3053100ec12ff1b8129bac4cdf57fcb622e9fbd3cd358536dbe37c925b9769cc72f90b59111afdc2705961990c4ec2df57cbee8e9bfdfac9d3dbc661154b6b2b013c6f96e513a521edc8d350911f500d0ccffad9499c63c2d4664bfc61fde295af9195909165a598e56cd6f20646e51b7105c521b151cda0687b4ca34db91fd9"}, {0x14, 0x116, 0x0, "ab0a0bd89dc79c48"}, {0xe4, 0x117, 0x0, "a9aeac25264bd56368de493ef6f1f830671ee224861840f4f1f42e3153c28e3ee61c932be6307e6d8b36e36f74eaa94b49092500b843947a6409fc14807240ee1a5b608fca44b89a660e881f402f9752b065242c0ab6eb6a7510d150fd5562a76a2f814991874339bcbff931437bbed788223db0aa81632c157fc3cbc957f12acc7edf6d74a73e1f7f5e3f7051e0e8634de4ce479eb15dd41933e7666041d295f44ae32131d0b7af6914de6054c8f068b453e6b2e5b56f0c1a7b3c4230270e420c023a095ec12f8fb733286fd452e0f1ec20322c92"}, {0x44, 0x11f, 0x5b, "28abe8bffa67fb33535e960f5479e7b2865bc891a8df81e5fe107528e0e14c48caa073d28e00ce5b3ee0193675d1c1d7d0a219c506c5f731"}, {0xc, 0x119, 0x4}, {0xe4, 0x112, 0x100, "aff8155c0e7635e2e6fb18246877cb0487ba67e4c8f1c03f8fd1253f032fdf80dba83069c2ee59fe9d02c04bdfe26d5654b13e94940a93b5cd34641b6fd3f0091e3bd32fd7dcb0dffe20f0feff13367f86e505b3f965ecd5d4bb7a461fceb854b4726ea2f803c448174c951ca2a79f08d8a8f5939fadcb7802801fbdde8c2fbde546298eb4eef146f0651aa56cdb2d056209321605f6c4313c0c334fdddd74ee9909b85cf25a95fcc43c6a045350e43b8955eca4259e915db62e83d9ffb3cf25fb09837204173983bdf530cf0f19c0ab5ac0a5e9eff6"}, {0x6c, 0x108, 0x5, "074731ee5918c579bd6ef1c2a2c28add7b33586670696633aa2aac5ddc9d7c7f9cf6d06041c8f22d64197fbb273a358eb78fcfd21852283d708fa5a420cf7383a4a24e57b01ee9680d230834fb38c605892e88ce56b49852c2dde641b73cd812"}, {0x108, 0x10b, 0x3, "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"}, {0xac, 0x19e, 0xfff, "b19f68bb4ea247d4c2d03b0e7430943830372f05f8dcb4ade63bf190aeaeb8cd6f230311d32a99e0987cdf7fc42741af3a2d17eb4bb9b9904e02ac91690bdd40e574edef40f0034a52d6c0966796c7d726cef5e7967258ab399c2d54b243843ef7942b46f7cb6022bcb3dc1b6f30c8799061f0214f6384438cda15ea3b3821fb742bb05a736f4a8f2e0a986edea33402b708b241c260c505e57e315778"}, {0x1c, 0x117, 0x3, "0cacad76c3df2da7b043196d5b9a"}], 0x54c}, 0x5}], 0x5, 0x4) getsockname(r1, 0x0, &(0x7f0000000000)) 16:49:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\nc\b@'], 0x0, 0xfdfdffff, 0x0}) 16:49:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) [ 596.933254] binder: BC_ATTEMPT_ACQUIRE not supported [ 596.952853] binder: 23116:23117 ioctl c0306201 200003c0 returned -22 [ 596.984743] binder: 23116:23117 tried to acquire reference to desc 0, got 1 instead [ 597.023991] binder: BC_ATTEMPT_ACQUIRE not supported [ 597.040069] binder: 23116:23120 ioctl c0306201 200003c0 returned -22 [ 597.114554] binder: 23080:23125 tried to acquire reference to desc 0, got 1 instead 16:49:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x74000000, 0xfdfdffff, 0x0}) 16:49:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="10630840"], 0x0, 0xfdfdffff, 0x0}) 16:49:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) [ 597.154805] binder: 23080 invalid dec weak, ref 1703 desc 0 s 1 w 0 [ 597.222121] binder: 23133:23135 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 597.272805] binder: 23133:23135 tried to acquire reference to desc 0, got 1 instead [ 597.287480] binder: 23137 invalid dec weak, ref 1720 desc 0 s 1 w 0 16:49:15 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080045005, &(0x7f00000000c0)) 16:49:15 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:15 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:15 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="03004000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r1, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r2, 0x0, &(0x7f0000000100)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x401, 0x4, 0x6}, &(0x7f0000000140)=0x10) 16:49:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0xfdfdffff, 0x0}) 16:49:15 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) [ 597.626038] binder: 23149:23150 tried to acquire reference to desc 0, got 1 instead 16:49:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0xfdfdffff, 0x0}) 16:49:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) getsockname(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f00000000c0)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) [ 597.807020] binder: 23166:23167 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 597.847034] binder: 23166:23167 tried to acquire reference to desc 0, got 1 instead 16:49:16 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc6, &(0x7f0000000000)=[{}]}, 0x10) [ 597.881331] binder: 23166:23173 BC_CLEAR_DEATH_NOTIFICATION death notification not active 16:49:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7a000000, 0xfdfdffff, 0x0}) 16:49:16 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbc, &(0x7f0000000000)=[{}]}, 0x10) 16:49:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0xd5, 0x101, &(0x7f0000000080)=0x3}) [ 598.073943] binder: 23137:23183 tried to acquire reference to desc 0, got 1 instead [ 598.086527] binder: 23137 invalid dec weak, ref 1720 desc 0 s 1 w 0 16:49:16 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080045006, &(0x7f00000000c0)) 16:49:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="08631040"], 0x0, 0xfdfdffff, 0x0}) 16:49:16 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, 0x0, &(0x7f0000000100)) ioctl$void(r0, 0xc0045878) 16:49:16 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbd, &(0x7f0000000000)=[{}]}, 0x10) [ 598.573437] binder: 23199:23207 BC_INCREFS_DONE u0000000000000000 no match 16:49:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x30040) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000df840000000000000000000000000400000000000072a92790cde56a15c8c8132fdb13fbc87d585455d973b7bca706c2f342540dd3e2dacbdb9d97ab7d950f41cf02b9d28a62395612f9abcaa8497fdc419ddcbc02529d28481412c5aaac12b1ab87f510689c5bfe4f64a67ca2f1a23c1c0d553784edb71327753199030d92fa20da3852993720afb1515d19000000000000002000000000000020acdab1278e3f697a023428e71346f74b82297e1056af9b00000000000000000000000000"]) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) getsockname(r0, 0x0, &(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) [ 598.615405] binder: 23199:23213 BC_INCREFS_DONE u0000000000000000 no match 16:49:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09631040"], 0x0, 0xfdfdffff, 0x0}) 16:49:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x378, 0x181000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) [ 598.762551] binder: 23220:23221 BC_ACQUIRE_DONE u0000000000000000 no match [ 598.780894] binder: 23220:23223 BC_ACQUIRE_DONE u0000000000000000 no match 16:49:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0xfdfdffff, 0x0}) 16:49:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xfdfdffff, 0xfdfdffff, 0x0}) 16:49:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000080)) 16:49:17 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc8, &(0x7f0000000000)=[{}]}, 0x10) [ 598.928051] binder: 23229:23230 transaction failed 29189/-22, size 0-0 line 2994 [ 598.937505] binder: 23229:23231 transaction failed 29189/-22, size 0-0 line 2994 [ 598.947192] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.959171] binder: undelivered TRANSACTION_ERROR: 29189 16:49:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01634040"], 0x0, 0xfdfdffff, 0x0}) 16:49:17 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbe, &(0x7f0000000000)=[{}]}, 0x10) 16:49:17 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080045007, &(0x7f00000000c0)) 16:49:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x700, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x220000, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x3, r2}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) kcmp(r4, r5, 0x4, r1, r3) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000200)=0x2, 0x4) fsetxattr$security_capability(r0, &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v2={0x2000000, [{0xfffffffffffffff8, 0xffff}, {0x7f2, 0x81}]}, 0x14, 0x3) write$9p(r2, &(0x7f0000000140)="24f4bef61671be286f86a1a3ce77ad4971a872bb5c630a295a8bd9d97583b4daeeeb71a3d75e0403315b253b134ca50fcba44992ba52ebdcb00c647223b90c2f6b3e16c249cc663d559c9d3bf85028748f7a0fbe4f2617e972d9b9d33f3f0c01c94018d460d7fa64ccf4ea605d2e03d75a495e18bb732642b47c68f261d3c8f75c758d42526b49c8f0a76ee5974596ecfcc759bd7bb95abc671ebd9de0e41dfac26a2d3a44c3e215888f89d1bf62", 0xae) getsockname(r0, 0x0, &(0x7f0000000040)=0x46) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000340)="d17c72b09fc02bd5333d0068b4ec2fdd221459b71e554f855bda3591c2e8e7e17e80f7762e2a07d97c2b38f170efed7234cf4f70815949a2b62d268d6984ba9931b085d8942382fdad3022709b3e5b656fbdbbc503db4ca562b20e34e5d6fa7ba2fdb78bd059cadc5a94ad7e147b5b53a2de44488fef94f5375ff88cf2de88fd63", 0x81, 0x8, &(0x7f0000000440)={r6, r7+10000000}) 16:49:17 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc9, &(0x7f0000000000)=[{}]}, 0x10) [ 599.481795] binder: 23254:23255 got reply transaction with no transaction stack [ 599.512100] binder: 23254:23255 transaction failed 29201/-71, size 0-0 line 2899 16:49:17 executing program 4: lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000080)='@\x00', 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="11634840"], 0x0, 0xfdfdffff, 0x0}) [ 599.538982] binder: 23254:23263 got reply transaction with no transaction stack [ 599.553616] binder: 23254:23263 transaction failed 29201/-71, size 0-0 line 2899 [ 599.573933] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.579801] binder: undelivered TRANSACTION_ERROR: 29201 16:49:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) [ 599.658855] binder: 23270:23271 transaction failed 29189/-22, size 0-0 line 2994 [ 599.684428] binder: undelivered TRANSACTION_ERROR: 29189 16:49:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="12634840"], 0x0, 0xfdfdffff, 0x0}) [ 599.828320] binder: 23280:23281 got reply transaction with no transaction stack [ 599.842022] binder: 23280:23281 transaction failed 29201/-71, size 0-0 line 2899 [ 599.852705] binder: BINDER_SET_CONTEXT_MGR already set [ 599.864121] binder: 23280:23282 got reply transaction with no transaction stack [ 599.872794] binder_dec_ref_olocked: 3 callbacks suppressed 16:49:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xfffffdfd, 0xfdfdffff, 0x0}) 16:49:18 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x101000, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000a0000000209a500d7c0d26b20be09e997f8d49e2aa02168fd8e727197168788e8cc87a9a6d89c82ec042227bbe43e1974dc20f5be61df06b408c5f1e09814eb6909a142b6df38cc99acf140ac28daefb850eaac811f13e1312be5c02faac8cf4359fc9e3bb2f6620bed0de8e2bd7d0ed686a5a524752d47d713951aca060da8ca9dc65adaf5a29fc435b80976ad0ad641cdb8668b44e6996965270d2200d729"], 0xb1) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r3, 0x0, &(0x7f0000000100)) 16:49:18 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xca, &(0x7f0000000000)=[{}]}, 0x10) 16:49:18 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xbf, &(0x7f0000000000)=[{}]}, 0x10) 16:49:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 599.872808] binder: 23243 invalid dec weak, ref 1749 desc 0 s 1 w 0 [ 599.895670] binder: 23280:23282 transaction failed 29201/-71, size 0-0 line 2899 [ 599.903322] binder: 23243:23283 ioctl 40046207 0 returned -16 [ 599.912238] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.920726] binder: undelivered TRANSACTION_ERROR: 29201 [ 600.018207] binder: 23300 invalid dec weak, ref 1767 desc 0 s 1 w 0 16:49:18 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x8000008004500b, &(0x7f00000000c0)) 16:49:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) getsockname(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff73) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000400)={0x1, 0x2, 0x4, 0x3, 0x101, 0x80000000}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x21c, r2, 0x504, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x237f}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9f1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50b51f4e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x205}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x50000000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 16:49:18 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:18 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc0, &(0x7f0000000000)=[{}]}, 0x10) 16:49:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040)) 16:49:18 executing program 4: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 16:49:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @mcast1, 0x1}, {0xa, 0x4e24, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, r2, 0xcd64}}, 0x48) getsockname(r0, 0x0, &(0x7f0000000100)) fgetxattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)=""/63, 0x3f) connect$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) 16:49:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x100000000000000, 0xfdfdffff, 0x0}) 16:49:19 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc1, &(0x7f0000000000)=[{}]}, 0x10) 16:49:19 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcc, &(0x7f0000000000)=[{}]}, 0x10) 16:49:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7d04, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)="9d8d43d6", &(0x7f0000000140)=""/163}, 0x18) getsockname(r0, 0x0, &(0x7f0000000100)) 16:49:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0xfdfdffff, 0xfdfdffff, 0x0}) [ 600.917456] binder: 23353 invalid dec weak, ref 1775 desc 0 s 1 w 0 16:49:19 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x8000008004500f, &(0x7f00000000c0)) 16:49:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000ff5000/0xa000)=nil, 0xa000, &(0x7f0000000140)=""/254) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) 16:49:19 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc2, &(0x7f0000000000)=[{}]}, 0x10) 16:49:19 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcd, &(0x7f0000000000)=[{}]}, 0x10) 16:49:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x4) 16:49:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) getsockname(r1, 0x0, &(0x7f0000000100)) 16:49:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x200000000000000, 0xfdfdffff, 0x0}) 16:49:19 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xce, &(0x7f0000000000)=[{}]}, 0x10) 16:49:19 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc3, &(0x7f0000000000)=[{}]}, 0x10) 16:49:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0xfffffdfd, 0xfdfdffff, 0x0}) [ 601.716175] binder_thread_write: 4 callbacks suppressed [ 601.716186] binder: 23353:23392 tried to acquire reference to desc 0, got 1 instead [ 601.719598] binder: 23353 invalid dec weak, ref 1775 desc 0 s 1 w 0 [ 601.823730] binder: 23402 invalid dec weak, ref 1785 desc 0 s 1 w 0 16:49:20 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc4, &(0x7f0000000000)=[{}]}, 0x10) 16:49:20 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080045010, &(0x7f00000000c0)) 16:49:20 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcf, &(0x7f0000000000)=[{}]}, 0x10) 16:49:20 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:20 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd0, &(0x7f0000000000)=[{}]}, 0x10) 16:49:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:20 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc6, &(0x7f0000000000)=[{}]}, 0x10) 16:49:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x100000000000000, 0xfdfdffff, 0x0}) [ 602.610347] binder: 23402:23437 tried to acquire reference to desc 0, got 1 instead [ 602.630778] binder: BINDER_SET_CONTEXT_MGR already set [ 602.644968] binder: 23440:23441 ioctl 40046207 0 returned -16 16:49:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x300000000000000, 0xfdfdffff, 0x0}) 16:49:20 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd1, &(0x7f0000000000)=[{}]}, 0x10) [ 602.672422] binder: 23440:23441 Acquire 1 refcount change on invalid ref 0 ret -22 [ 602.699012] binder: 23440:23441 Release 1 refcount change on invalid ref 0 ret -22 [ 602.727458] binder: 23445 invalid dec weak, ref 1793 desc 0 s 1 w 0 16:49:21 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:21 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd2, &(0x7f0000000000)=[{}]}, 0x10) 16:49:21 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc8, &(0x7f0000000000)=[{}]}, 0x10) 16:49:21 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x80000080045017, &(0x7f00000000c0)) 16:49:21 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd3, &(0x7f0000000000)=[{}]}, 0x10) 16:49:21 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xc9, &(0x7f0000000000)=[{}]}, 0x10) 16:49:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0xfdfdffff00000000, 0xfdfdffff, 0x0}) 16:49:21 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd4, &(0x7f0000000000)=[{}]}, 0x10) [ 603.528927] binder: 23445:23487 tried to acquire reference to desc 0, got 1 instead [ 603.543799] binder: BINDER_SET_CONTEXT_MGR already set [ 603.562365] binder: 23485:23488 ioctl 40046207 0 returned -16 16:49:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x400000000000000, 0xfdfdffff, 0x0}) [ 603.597332] binder: 23485:23488 Acquire 1 refcount change on invalid ref 0 ret -22 [ 603.623451] binder: 23485:23488 Release 1 refcount change on invalid ref 0 ret -22 16:49:21 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xca, &(0x7f0000000000)=[{}]}, 0x10) [ 603.692606] binder: 23495 invalid dec weak, ref 1801 desc 0 s 1 w 0 16:49:22 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:22 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:22 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000800c5011, &(0x7f00000000c0)) 16:49:22 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd6, &(0x7f0000000000)=[{}]}, 0x10) 16:49:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:22 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:22 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcc, &(0x7f0000000000)=[{}]}, 0x10) 16:49:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x10b, 0x2, 0xf5e, 0x9f, 0x36e, 0x80, 0x27d, 0x8}, "cb0ceabc4893f5ed59c19196d572637f6ce5a5380d6f2f5a08944e022d94ad6915e113d127bd4dfaa7c6fc2278df4b3288d596b6c0922f08fcc96280b8dc195fc7838432be63a55f8b1cdad266ceec02bec0dff6f5670949d68ed6387cce1b96c464739b24111792e2ad6a30b94d4fcd546a32dbced1fb1d22b0", [[]]}, 0x19a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="d7eaea8344c55087c619a510ab5068e321b4fa2cffb269ef7a9e6eefa5db8c572a67d2df32777fc47a15118d30da0edaeb668dffd9826f830c5022144cf5ae24511444a67f29835465af6171b8af5ea502c510268a91229ac722427a17c97f53ee7ba68534bae170ea"], 0x0, 0xfdfdffff, 0x0}) 16:49:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 604.399095] binder: 23538:23539 unknown command -2081756457 [ 604.405181] binder: 23538:23539 ioctl c0306201 200003c0 returned -22 [ 604.414563] binder: 23538:23540 tried to acquire reference to desc 0, got 1 instead [ 604.472262] binder: BINDER_SET_CONTEXT_MGR already set [ 604.480453] binder: 23495 invalid dec weak, ref 1801 desc 0 s 1 w 0 [ 604.491617] binder: 23538:23539 unknown command -2081756457 [ 604.500837] binder: 23495:23545 tried to acquire reference to desc 0, got 1 instead [ 604.508479] binder: 23538:23539 ioctl c0306201 200003c0 returned -22 [ 604.532307] binder: 23495:23544 ioctl 40046207 0 returned -16 16:49:22 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440004b832969939555c571115aa4000000"], 0x0, 0x0, 0x0}) close(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x106, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setfsgid(r3) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0x2c048f37, 0x4, 0xfffffffffffff800, 0x9}, {0x100000000, 0x0, 0x10001000000000}, {0x1, 0x9, 0x1f}, {0x5, 0x3f, 0x1, 0x7}, {0x1, 0x3, 0x6, 0xff}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2000000000000005, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}, {0xa, 0x4e22, 0xc8, @empty, 0x81}, r2, 0x2}}, 0x48) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f0000000280)={0x2, &(0x7f0000000040)=[{0xffffffff, 0x1, 0x7f, 0x2}, {0xa8, 0x1, 0xbe1, 0xf8a}]}) r4 = dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="70cdad808e5cdafb4ab23fcf93c44a78d707d8c57341debd3301924935148992b1f729e2cc87f4d43b9d8ffba299e4ff015eb13a3b2ca05f0fbf885da289a890eeea0deff850c1a30490b574cfe3753495f74ad6"], 0x0, 0xfdfdffff, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000340)="6a45db1c911b8a04363100cb37f73d5c5c09d5253d32b7c75bfd2e02873962f973c6e6f0b6b460382b422b58fe3aa4e66ca040816f", &(0x7f0000000400)="da8ecd147c6068427149bb137880cef0d6935958b1452d3a60b1b6a3796f80e6191b735ba952fa105e131737f516db63c85286cc96e831df96497cffcb12c74136", 0x2}, 0x20) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) 16:49:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x500000000000000, 0xfdfdffff, 0x0}) 16:49:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 604.630322] binder: 23553:23555 Release 1 refcount change on invalid ref 0 ret -22 16:49:22 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd8, &(0x7f0000000000)=[{}]}, 0x10) [ 604.673227] binder: BINDER_SET_CONTEXT_MGR already set [ 604.682680] binder: 23559:23560 ioctl 40046207 0 returned -16 [ 604.702200] binder: 23559 invalid dec weak, ref 1817 desc 0 s 1 w 0 16:49:23 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000800c5012, &(0x7f00000000c0)) 16:49:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/229, 0xe5}], 0x1}, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:23 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcd, &(0x7f0000000000)=[{}]}, 0x10) 16:49:23 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd9, &(0x7f0000000000)=[{}]}, 0x10) [ 604.967557] binder: BINDER_SET_CONTEXT_MGR already set [ 604.986757] binder: 23570:23575 ioctl 40046207 0 returned -16 16:49:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0xffffffffffffff2e, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 605.019306] binder: BINDER_SET_CONTEXT_MGR already set [ 605.024637] binder: 23570:23575 ioctl 40046207 0 returned -16 16:49:23 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xce, &(0x7f0000000000)=[{}]}, 0x10) [ 605.131218] binder: BINDER_SET_CONTEXT_MGR already set [ 605.152620] binder: 23584:23585 ioctl 40046207 0 returned -16 [ 605.171501] binder: 23584:23585 ioctl c0306201 20000080 returned -14 [ 605.187769] binder: BINDER_SET_CONTEXT_MGR already set [ 605.202263] binder: 23584:23588 ioctl 40046207 0 returned -16 [ 605.214376] binder: 23584:23588 ioctl c0306201 20000080 returned -14 [ 605.229050] binder: 23584:23585 Release 1 refcount change on invalid ref 0 ret -22 16:49:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r2) getsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) dup(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06631194"], 0x0, 0xfdfdffff, 0x0}) 16:49:23 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xda, &(0x7f0000000000)=[{}]}, 0x10) [ 605.318474] binder: BINDER_SET_CONTEXT_MGR already set [ 605.328742] binder: 23593:23594 ioctl 40046207 0 returned -16 [ 605.337838] binder: 23593:23594 unknown command -1810799866 [ 605.344941] binder: 23593:23594 ioctl c0306201 200003c0 returned -22 [ 605.363337] binder: BINDER_SET_CONTEXT_MGR already set 16:49:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000000c0)) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) fanotify_init(0x20, 0x2) [ 605.370770] binder: 23593:23594 ioctl 40046207 0 returned -16 [ 605.460667] binder: 23559:23604 tried to acquire reference to desc 0, got 1 instead [ 605.475345] binder: 23606:23607 Release 1 refcount change on invalid ref 0 ret -22 [ 605.489761] binder: 23559 invalid dec weak, ref 1817 desc 0 s 1 w 0 [ 605.500969] binder: BINDER_SET_CONTEXT_MGR already set 16:49:23 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x600000000000000, 0xfdfdffff, 0x0}) 16:49:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:23 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xcf, &(0x7f0000000000)=[{}]}, 0x10) [ 605.506111] binder: 23606:23611 Release 1 refcount change on invalid ref 0 ret -22 [ 605.528671] binder: 23606:23607 ioctl 40046207 0 returned -16 [ 605.581352] binder: 23614:23615 Release 1 refcount change on invalid ref 0 ret -22 [ 605.640548] binder: BINDER_SET_CONTEXT_MGR already set [ 605.650335] binder: 23620:23621 ioctl 40046207 0 returned -16 [ 605.672258] binder: 23620 invalid dec weak, ref 1830 desc 0 s 1 w 0 16:49:24 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x8000008010500c, &(0x7f00000000c0)) 16:49:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0163a640"], 0x0, 0xfdfdffff, 0x0}) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000)) 16:49:24 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:24 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd0, &(0x7f0000000000)=[{}]}, 0x10) [ 605.862908] binder: BINDER_SET_CONTEXT_MGR already set [ 605.884510] binder: 23628:23629 ioctl 40046207 0 returned -16 [ 605.911220] binder: 23628:23629 unknown command 1084646145 [ 605.923764] binder: 23628:23629 ioctl c0306201 200003c0 returned -22 [ 605.943603] binder: 23628:23629 ioctl 800454d7 20000000 returned -22 [ 605.971597] binder: BINDER_SET_CONTEXT_MGR already set [ 605.985325] binder: 23628:23629 ioctl 40046207 0 returned -16 [ 606.005165] binder: 23628:23640 unknown command 1084646145 [ 606.021198] binder: 23628:23640 ioctl c0306201 200003c0 returned -22 16:49:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c6c4d733e480c5bc7323dda79b07adf7541acfede39d6b9bf958a0e9493d17c30642f25baeaef9ab331e0f79e855a56d7e1b7ebf15143ee9ae087f964e93897310233f7afd10d6df85f4840e5a287b41ca67c262e8270d77a943f359eaa339650c9e416e3d349c0a2fe9019f43fb3896d7679a9b4e88908186db0683a496c3dff6db6e219fcea65326e057eab7eabd640935614d3f6ff814122f0c240d330a0a0e9150648991b445607fb3ddaf09adc8ca0ccf2206e7bf38337eb0239139e29e17a87b3e3548cbb601a57a9f5be4f8e5c88bdea3cd7184bd7b5d6d373cc10bbd8ec1c25338661"], 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xc0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:24 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd1, &(0x7f0000000000)=[{}]}, 0x10) 16:49:24 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdc, &(0x7f0000000000)=[{}]}, 0x10) [ 606.111412] binder: BINDER_SET_CONTEXT_MGR already set [ 606.122944] binder: 23643:23644 ioctl 40046207 0 returned -16 [ 606.134343] binder: 23643:23644 unknown command 1934453772 [ 606.150065] binder: 23643:23644 ioctl c0306201 20000080 returned -22 [ 606.163631] binder: 23643:23644 Release 1 refcount change on invalid ref 0 ret -22 [ 606.177941] binder: BINDER_SET_CONTEXT_MGR already set [ 606.196316] binder: 23643:23649 unknown command 1934453772 [ 606.209035] binder: 23643:23644 ioctl 40046207 0 returned -16 [ 606.220644] binder: 23643:23649 ioctl c0306201 20000080 returned -22 16:49:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000002cd2984220403440b7dc3b24262d12d36c4ab31ee74f9ee7a43db180c2efda6208042f81a38095fa28d2f7332d8b702e56dfe3e24f90"], 0x0, 0x0, 0x0}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x4000) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0643378ed68e4fddbe0a76e011891a04406ef5103a0541896b4a8673729e3eaffbff4296c69b05eb3d458c100a647d21"], 0x0, 0xfdfdffff, 0x0}) [ 606.332503] binder: BINDER_SET_CONTEXT_MGR already set [ 606.343619] binder: 23657:23658 ioctl 40046207 0 returned -16 [ 606.362320] binder: 23657:23658 unknown command 0 16:49:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 606.384788] binder: 23657:23658 ioctl c0306201 20000080 returned -22 [ 606.402229] binder: 23657:23658 unknown command -1908980986 [ 606.424650] binder: 23657:23658 ioctl c0306201 200003c0 returned -22 [ 606.438363] binder: BINDER_SET_CONTEXT_MGR already set [ 606.443671] binder: 23620:23662 ioctl 40046207 0 returned -16 [ 606.443680] binder: 23620:23663 tried to acquire reference to desc 0, got 1 instead [ 606.479733] binder: BINDER_SET_CONTEXT_MGR already set [ 606.498707] binder: 23657:23666 unknown command 0 [ 606.519349] binder: 23657:23658 ioctl 40046207 0 returned -16 16:49:24 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x700000000000000, 0xfdfdffff, 0x0}) 16:49:24 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdd, &(0x7f0000000000)=[{}]}, 0x10) 16:49:24 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd2, &(0x7f0000000000)=[{}]}, 0x10) [ 606.520590] binder: 23657:23666 ioctl c0306201 20000080 returned -22 [ 606.577480] binder: BINDER_SET_CONTEXT_MGR already set [ 606.594440] binder: 23675:23676 ioctl 40046207 0 returned -16 [ 606.621211] binder: 23675 invalid dec weak, ref 1835 desc 0 s 1 w 0 16:49:24 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x8000008010500d, &(0x7f00000000c0)) 16:49:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:24 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xde, &(0x7f0000000000)=[{}]}, 0x10) [ 606.771145] binder: BINDER_SET_CONTEXT_MGR already set [ 606.786850] binder: 23682:23683 ioctl 40046207 0 returned -16 16:49:25 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd3, &(0x7f0000000000)=[{}]}, 0x10) [ 606.822924] binder: BINDER_SET_CONTEXT_MGR already set [ 606.837250] binder: 23682:23683 ioctl 40046207 0 returned -16 16:49:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc0000, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e6f45666299245e4ed6a9958126bc8f2518091e4a4fdd5bcaa4b177cf76a83e2e6dc26fa26c468fce127c3b3ef6b8cc3e624fec18e7edaa51855e42dbcbe6f8cd668c9ebebb9abc2a3248beec6c514c98faa5f4e9d4867cb13f67a520403208284d448ed1be4689b3bc8085f585f0776c07a9ead7780ca9714f84e0930021a87d2636817ab7"], 0x0, 0x0, 0x0}) close(r0) readahead(r0, 0x7, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 606.940632] binder: BINDER_SET_CONTEXT_MGR already set [ 606.950336] binder: 23699:23700 ioctl 40046207 0 returned -16 [ 606.964039] binder: BINDER_SET_CONTEXT_MGR already set [ 606.971211] binder: 23699:23700 ioctl 40046207 0 returned -16 [ 607.067200] binder: BINDER_SET_CONTEXT_MGR already set [ 607.075017] binder: 23704:23705 ioctl 40046207 0 returned -16 [ 607.090806] binder: 23704:23705 unknown command 1715826446 [ 607.103004] binder: 23704:23705 ioctl c0306201 20000080 returned -22 [ 607.121364] binder: BINDER_SET_CONTEXT_MGR already set [ 607.131902] binder: 23704:23706 unknown command 1715826446 [ 607.145199] binder: 23704:23705 ioctl 40046207 0 returned -16 [ 607.160094] binder: 23704:23706 ioctl c0306201 20000080 returned -22 16:49:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="e1e9044000ffff00"], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:25 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdf, &(0x7f0000000000)=[{}]}, 0x10) 16:49:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 607.265064] binder: 23712:23713 unknown command 1074063841 [ 607.304247] binder: 23712:23713 ioctl c0306201 20000080 returned -22 [ 607.333804] binder: BINDER_SET_CONTEXT_MGR already set [ 607.341782] binder: 23712:23720 unknown command 1074063841 [ 607.349445] binder: 23717:23718 ioctl 40046207 0 returned -16 [ 607.367501] binder: 23712:23720 ioctl c0306201 20000080 returned -22 [ 607.378969] binder: 23675:23723 tried to acquire reference to desc 0, got 1 instead [ 607.379615] binder: 23675 invalid dec weak, ref 1835 desc 0 s 1 w 0 16:49:25 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd4, &(0x7f0000000000)=[{}]}, 0x10) 16:49:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xa00000000000000, 0xfdfdffff, 0x0}) 16:49:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 607.527059] binder: 23734 invalid dec weak, ref 1844 desc 0 s 1 w 0 16:49:25 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xecbd, 0x202800) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) r3 = dup(r2) getpeername(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a4643ecd11c4314706b341acefa71ff352e70e316f86af5397cad56fcfe321dc03b4f8c8beb5625e3a7a2bc25bfd9a37d923294227c2ee10c731be9005d269aced5946f33d340cf16e09ae96b2a65a43f0d1dbcaedab909c113b048beaa32a8a4ec97f69d1e2be065b544d37369fe2a2483539ca62eac6184c8bc2dce68eeae2dbcc6aea8e24764dfd31f0f4426ef3f6508db99e6e4faeaab4b40d10ca853041e6f0ab644bef459d601c2566e0a1adcfcf15d0a76337a81e9d3e"], 0x0, 0xfdfdffff, 0x0}) 16:49:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:25 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045003, &(0x7f00000000c0)) 16:49:25 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe0, &(0x7f0000000000)=[{}]}, 0x10) [ 607.702548] binder: BINDER_SET_CONTEXT_MGR already set [ 607.708393] binder_thread_write: 6 callbacks suppressed [ 607.708407] binder: 23743:23744 Release 1 refcount change on invalid ref 0 ret -22 [ 607.721142] binder: 23742:23745 ioctl 40046207 0 returned -16 16:49:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:25 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630540"], 0x0, 0xfdfdffff, 0x0}) 16:49:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 607.887189] binder: 23760:23761 unknown command 1074094854 [ 607.893123] binder: 23760:23761 ioctl c0306201 200003c0 returned -22 16:49:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06df5296eba3c74000"], 0x0, 0xfdfdffff, 0x0}) 16:49:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 608.019125] binder: 23769:23770 unknown command -1772953850 [ 608.034333] binder: 23769:23770 ioctl c0306201 200003c0 returned -22 [ 608.048693] binder: 23769:23770 tried to acquire reference to desc 0, got 1 instead [ 608.057628] binder: 23769:23772 unknown command -1772953850 [ 608.071953] binder: 23769:23772 ioctl c0306201 200003c0 returned -22 16:49:26 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x2000000000000000, 0xfdfdffff, 0x0}) 16:49:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="48b9ff0000000000"], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:26 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe1, &(0x7f0000000000)=[{}]}, 0x10) [ 608.325440] binder: 23734:23780 tried to acquire reference to desc 0, got 1 instead [ 608.331733] binder: 23734 invalid dec weak, ref 1844 desc 0 s 1 w 0 [ 608.372977] binder: 23783:23786 unknown command 16759112 [ 608.390505] binder: 23783:23786 ioctl c0306201 20000080 returned -22 [ 608.401926] binder: BINDER_SET_CONTEXT_MGR already set [ 608.413273] binder: 23790:23791 ioctl 40046207 0 returned -16 [ 608.413349] binder: 23783:23786 Release 1 refcount change on invalid ref 0 ret -22 [ 608.426220] binder: 23790:23791 Acquire 1 refcount change on invalid ref 0 ret -22 [ 608.436987] binder: 23783:23786 unknown command 16759112 [ 608.443280] binder: 23783:23786 ioctl c0306201 20000080 returned -22 [ 608.448097] binder: 23790:23791 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 608.467891] binder: 23783:23794 Release 1 refcount change on invalid ref 0 ret -22 16:49:26 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045004, &(0x7f00000000c0)) 16:49:26 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd6, &(0x7f0000000000)=[{}]}, 0x10) 16:49:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/mcfilter\x00') getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x6, 0x3, 0x7}, &(0x7f00000001c0)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:26 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe2, &(0x7f0000000000)=[{}]}, 0x10) 16:49:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) [ 608.729229] binder: 23813:23814 ioctl 4004af61 20000000 returned -22 [ 608.751986] binder: 23813:23815 ioctl 4004af61 20000000 returned -22 16:49:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8004700d, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r1, r1, 0x9, 0xc1, &(0x7f00000000c0)="89f50fa0ceeb259d0538ad679a5c1deb83645f16db5a79f128afd1e88f0a2d21574b0f8be7365e9583e7f79d4650b05402287e55395d7a23b18c1cb0e6648b141cf70fd4d3ddd3f78dff30e4094cb4ab4ea44149ba4f0fd8ad352fa0f7a75ae8b47ab9897b6683958950c56d94b352187dbc0e9f274089a52731a2b14741825b48e36cff766b32e3f8554b9440e1635b7ba617a7cf396aa8dafdeee1b3448e11ee28d1b14a954daa4345a3be17324419a3e994fc64e5444acf1667fbd9d9201270", 0xcf, 0x20, 0x5, 0xfffffffffffff61b, 0x7, 0x1, 0x2, 'syz0\x00'}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:27 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:27 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4800000000000000, 0xfdfdffff, 0x0}) 16:49:27 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe3, &(0x7f0000000000)=[{}]}, 0x10) 16:49:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffc33, 0x0, &(0x7f0000005fd4), 0x3d4, 0x0, 0x0}) close(r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x100, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) r4 = getegid() fchownat(r2, &(0x7f00000000c0)='./file0\x00', r3, r4, 0x1900) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="85a30000"], 0x23c, 0xfdfdffff, 0x0}) 16:49:27 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd8, &(0x7f0000000000)=[{}]}, 0x10) [ 609.244969] binder: 23841:23843 ioctl c0306201 20000000 returned -14 [ 609.257327] binder: BINDER_SET_CONTEXT_MGR already set [ 609.273957] binder: 23846:23847 ioctl 40046207 0 returned -16 [ 609.280454] binder: 23841:23843 unknown command 41861 [ 609.288436] binder: 23846:23847 Acquire 1 refcount change on invalid ref 0 ret -22 [ 609.292614] binder: 23841:23843 ioctl c0306201 20000040 returned -22 [ 609.316455] binder: 23841:23850 ioctl c0306201 20000000 returned -14 [ 609.320003] binder: 23846:23847 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 609.332913] binder: 23841:23850 unknown command 41861 [ 609.343946] binder: 23841:23850 ioctl c0306201 20000040 returned -22 16:49:27 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045005, &(0x7f00000000c0)) 16:49:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1ff, 0x600000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000380)={0x2, 0xb6, 0x1}) close(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x38, 0x10, &(0x7f00000000c0)=[@flat={0x77622a85, 0xa, r3, 0x1}, @fda={0x66646185, 0x9, 0x1, 0x12}], &(0x7f0000000100)=[0x48, 0x28]}, 0x5}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r1}, @flat={0x77682a85, 0x10b, r4}], &(0x7f00000001c0)=[0x28, 0x48]}}}, @increfs={0x40046304, 0x4}, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x4, 0x14}], &(0x7f0000000240)=[0x38, 0x48]}}, @transaction={0x40406300, {0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=[0x70, 0x18, 0x0, 0x38]}}, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, r5, 0x2}, @register_looper], 0x9c, 0x0, &(0x7f0000000600)="73f90366f375d7ce4a254a87f4db5e770db75bfa45c73d863eae6faf798409ddcbfba3d85eefc35c5ef57c66dbf35a3e98634f0ea69fbbb04532ceaead4246d1faae27f587a3f8c144543e406639b0a7b3d3c56b5e5615da90ce899834382cf22792091a37e1d47b4cc777fa4437ea1f3168fe47931362e67513be11486c9282a90c78e326de7fac53a19f660040c35becc9fb3b236008a3ce1e900a"}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="43e46b311f0d13a345f7b2d374a9cfa08f542264c279ae59cd20f26c3ca73b4520f453bf1e35a32514b2483df423168a049346869aea1a9e32767bdca1e947b8cbd8cdae7f29901b7b9d78e9f26fc7f9877bdffa40d5dd03f51cf7c0c66b194aa1cd99fe8db3b6e8"], 0x0, 0xfdfdffff, 0x0}) 16:49:27 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xd9, &(0x7f0000000000)=[{}]}, 0x10) 16:49:27 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe4, &(0x7f0000000000)=[{}]}, 0x10) [ 609.544581] binder: 23856:23857 Acquire 1 refcount change on invalid ref 0 ret -22 [ 609.547288] binder: 23860:23862 unknown command 829154371 [ 609.593880] binder: 23860:23862 ioctl c0306201 200003c0 returned -22 [ 609.604137] binder: 23856:23857 Release 1 refcount change on invalid ref 0 ret -22 [ 609.624803] binder: 23860:23862 tried to acquire reference to desc 0, got 1 instead [ 609.625825] binder: 23860:23870 unknown command 829154371 16:49:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000180)={0x9, 'syz0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r3 = dup(r2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x3ff}, &(0x7f0000000100)=0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 609.651404] binder: 23860:23870 ioctl c0306201 200003c0 returned -22 16:49:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) 16:49:28 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xda, &(0x7f0000000000)=[{}]}, 0x10) [ 609.817179] binder: 23877:23878 ioctl 5411 20000000 returned -22 [ 609.825069] binder: 23877:23878 tried to acquire reference to desc 0, got 1 instead [ 609.840024] binder: 23877:23880 ioctl 5411 20000000 returned -22 16:49:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x4c00000000000000, 0xfdfdffff, 0x0}) 16:49:28 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="2d63044000000008"], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:28 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdb, &(0x7f0000000000)=[{}]}, 0x10) [ 610.057141] binder: 23846:23888 Acquire 1 refcount change on invalid ref 0 ret -22 [ 610.093249] binder: 23894:23895 unknown command 1074029357 [ 610.110502] binder: 23894:23895 ioctl c0306201 20000080 returned -22 [ 610.134367] binder: BINDER_SET_CONTEXT_MGR already set [ 610.143825] binder: 23894:23901 unknown command 1074029357 [ 610.162175] binder: 23898:23899 ioctl 40046207 0 returned -16 [ 610.167167] binder: 23894:23901 ioctl c0306201 20000080 returned -22 16:49:28 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045006, &(0x7f00000000c0)) 16:49:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="2c70aed0"], 0x0, 0xfdfdffff, 0x0}) 16:49:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6000000000000000, 0xfdfdffff, 0x0}) 16:49:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:28 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdc, &(0x7f0000000000)=[{}]}, 0x10) 16:49:28 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe6, &(0x7f0000000000)=[{}]}, 0x10) [ 610.475824] binder: 23915:23916 unknown command -793874388 [ 610.479912] binder: BINDER_SET_CONTEXT_MGR already set [ 610.505580] binder: 23915:23916 ioctl c0306201 200003c0 returned -22 [ 610.513282] binder: 23912:23913 ioctl 40046207 0 returned -16 [ 610.533635] binder: BINDER_SET_CONTEXT_MGR already set [ 610.543817] binder: 23915:23916 ioctl 40046207 0 returned -16 16:49:28 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6800000000000000, 0xfdfdffff, 0x0}) 16:49:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xe56, 0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000240)={0x0, 0x1, @stop_pts=0x100000000}) write$UHID_INPUT2(r1, &(0x7f00000000c0)={0xc, 0xfd, "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"}, 0x103) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) fallocate(r2, 0x10, 0x81, 0x401) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:28 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06055c8, &(0x7f00000000c0)={0x10, 0xff, {0x0, 0x3e, 0x1, {0x5, 0x2}, {0x2, 0x3}, @rumble={0x1}}, {0x57, 0x1, 0x40, {0x800, 0x8}, {0x1}, @const={0x7, {0x7f, 0x1000, 0x100000000}}}}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 610.687018] binder: 23935 invalid dec weak, ref 1900 desc 0 s 1 w 0 16:49:28 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:28 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdd, &(0x7f0000000000)=[{}]}, 0x10) 16:49:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) close(r0) r3 = dup(r2) fsync(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f00000000c0)=0x5) [ 610.898407] binder: 23952:23954 ioctl 5419 20000040 returned -22 [ 610.912350] binder: 23952:23954 ioctl 40045612 200000c0 returned -22 [ 610.930534] binder: BINDER_SET_CONTEXT_MGR already set [ 610.944597] binder: 23952:23954 ioctl 40046207 0 returned -16 [ 610.944685] binder: 23952:23957 ioctl 5419 20000040 returned -22 [ 610.990608] binder: 23952:23956 ioctl 40045612 200000c0 returned -22 16:49:29 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045007, &(0x7f00000000c0)) 16:49:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400202, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x40100) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:29 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xde, &(0x7f0000000000)=[{}]}, 0x10) 16:49:29 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe8, &(0x7f0000000000)=[{}]}, 0x10) 16:49:29 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="ff030440"], 0x0, 0xfdfdffff, 0x0}) [ 611.484392] binder: 23935:23984 tried to acquire reference to desc 0, got 1 instead [ 611.498699] binder: BINDER_SET_CONTEXT_MGR already set [ 611.509211] binder: 23935 invalid dec weak, ref 1900 desc 0 s 1 w 0 [ 611.514103] binder: 23986:23987 ioctl 40046207 0 returned -16 16:49:29 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x6c00000000000000, 0xfdfdffff, 0x0}) 16:49:29 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 611.535954] binder: 23986:23987 unknown command 1074004991 [ 611.549936] binder: 23986:23987 ioctl c0306201 200003c0 returned -22 [ 611.570529] binder: 23986:23990 unknown command 1074004991 16:49:29 executing program 4: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 611.605472] binder: 23986:23990 ioctl c0306201 200003c0 returned -22 [ 611.641364] binder: 23994 invalid dec weak, ref 1918 desc 0 s 1 w 0 16:49:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fchmod(r0, 0x4514f1a02a3b993b) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:29 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:29 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe9, &(0x7f0000000000)=[{}]}, 0x10) 16:49:30 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045009, &(0x7f00000000c0)) 16:49:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000006c0)=""/246) ioctl$PPPIOCGFLAGS1(r2, 0x40047452, &(0x7f0000000040)) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:30 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xdf, &(0x7f0000000000)=[{}]}, 0x10) 16:49:30 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:30 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xea, &(0x7f0000000000)=[{}]}, 0x10) 16:49:30 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 612.300209] binder: 24017:24024 tried to acquire reference to desc 0, got 1 instead [ 612.440093] binder: 23994:24036 tried to acquire reference to desc 0, got 1 instead [ 612.465236] binder: 23994 invalid dec weak, ref 1918 desc 0 s 1 w 0 16:49:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7400000000000000, 0xfdfdffff, 0x0}) 16:49:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0x4a4, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x78, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97d0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9e}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa961}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x714}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3a29}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r3) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) getsockopt$inet6_dccp_buf(r4, 0x21, 0xc0, &(0x7f0000000e00)=""/4096, &(0x7f00000001c0)=0x1000) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) 16:49:30 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xeb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:30 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe0, &(0x7f0000000000)=[{}]}, 0x10) [ 612.574669] binder: BINDER_SET_CONTEXT_MGR already set [ 612.593195] binder: BINDER_SET_CONTEXT_MGR already set [ 612.602177] binder: 24046:24048 ioctl 40046207 0 returned -16 [ 612.610198] binder: 24044:24045 ioctl 40046207 0 returned -16 16:49:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0xfdfdffff, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) sched_getattr(r2, &(0x7f00000000c0), 0x30, 0x0) 16:49:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="377b33007d5f9f30c312ebc390d54ae042a90763ae81715ba2d6c3f50494495c7d75c4ecf1b14a692e6fa0f0eb82ce163ad36d6dab6e44a879354706007706a9b49197dd9f46d3214e7bda8dc487149c3d57a95c61c723f60c7a723643db53075439011fa143130223ca0d8de7ebfb57edbe74a6b4a9428c8c0562ab17c5e2d50e26d468a1797f43d86104a875033ad11c506ca2621149ff52885d246dde50d1990085e903"], 0x0, 0xfdfdffff, 0x0}) 16:49:31 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xec, &(0x7f0000000000)=[{}]}, 0x10) 16:49:31 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) 16:49:31 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe1, &(0x7f0000000000)=[{}]}, 0x10) [ 613.178215] binder: 24070:24072 unknown command 3373879 [ 613.193987] binder: 24070:24072 ioctl c0306201 200003c0 returned -22 [ 613.211515] binder: 24070:24072 tried to acquire reference to desc 0, got 1 instead 16:49:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) signalfd(r1, &(0x7f0000000000), 0x8) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x5, {0x7, 0x1c, 0x8, 0x220000, 0xb, 0x5, 0x6, 0x8}}, 0x50) 16:49:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)=""/63, 0x3f}], 0x1, &(0x7f0000000180)=""/18, 0x12}, 0xfffffffffffff001}, {{&(0x7f00000001c0)=@sco, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/8, 0x8}], 0x8, &(0x7f0000000700)=""/103, 0x67}, 0x2}], 0x2, 0x40, &(0x7f00000007c0)={0x77359400}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="066304c0"], 0x0, 0xfdfdffff, 0x0}) [ 613.384173] binder: 24046 invalid dec weak, ref 1943 desc 0 s 1 w 0 [ 613.418653] binder: 24089:24091 unknown command -1073454330 16:49:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x7a00000000000000, 0xfdfdffff, 0x0}) 16:49:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:31 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xed, &(0x7f0000000000)=[{}]}, 0x10) [ 613.444820] binder: 24089:24091 ioctl c0306201 200003c0 returned -22 [ 613.483314] binder: 24089:24091 tried to acquire reference to desc 0, got 1 instead 16:49:31 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe2, &(0x7f0000000000)=[{}]}, 0x10) [ 613.525153] binder: 24089:24099 unknown command -1073454330 [ 613.550999] binder: 24101 invalid dec weak, ref 1950 desc 0 s 1 w 0 [ 613.571338] binder: 24089:24099 ioctl c0306201 200003c0 returned -22 16:49:31 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfdfdffff, 0x0}) [ 613.666364] binder: 24109:24111 tried to acquire reference to desc 0, got 1 instead 16:49:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x3, 0x9, 0x40, 0x1, 0x2, 0x3, 0x8, 0xd8, 0x40, 0x1b4, 0x0, 0x7, 0x38, 0x2, 0x8}, [{0x0, 0xbf7, 0x3f, 0x7fffffff, 0x0, 0x3, 0x8, 0x1}], "b77eb86f4758cf242e297c5148d17f46147bd788370173f1cc75d75c478a9df7c51f14c49a875ae56f34264b74fd27be808dd59b1f78c91625f957c067b6d7d2bf0083aca86a781ba6f41431bb85697a8b2af6eed0cd11aa8415166e4a0ee18bd61a5f3f041bb6cc5127617b605bee104aef48a22e8e", [[], [], [], [], [], []]}, 0x6ee) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x0, 0xfdfdffff, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000000)) 16:49:32 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xee, &(0x7f0000000000)=[{}]}, 0x10) [ 613.802506] binder: 24114:24115 ioctl 80045700 20000000 returned -22 [ 613.830064] binder: 24114:24116 tried to acquire reference to desc 0, got 1 instead [ 613.870429] binder: 24114:24118 ioctl 80045700 20000000 returned -22 16:49:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 16:49:32 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0189436, &(0x7f00000000c0)) 16:49:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) write$eventfd(r2, &(0x7f0000000000)=0x1, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:32 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xef, &(0x7f0000000000)=[{}]}, 0x10) 16:49:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xfdfdffff00000000, 0xfdfdffff, 0x0}) 16:49:32 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe3, &(0x7f0000000000)=[{}]}, 0x10) 16:49:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) syz_execute_func(&(0x7f0000000000)="0f38016fcc81ca2eaa602226dbc764d9e90ff256ccc4c3bd7fb10f000000cc0f0fd2b42e260f38cd07c4e2dd9bebe805000000") dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xcf003d069148b04, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRES32=r0, @ANYPTR, @ANYBLOB="aba24d3abdc11eff1781e4c4669d81bbfa33bd2d29cc159b856bdc685ed795b6c141066278239fa75c21c89fbd72c7724a845c4c14cf3c32f4f4742ea7ac5c5f9a6d44dfac2c3a47e7c4fdf9737495b4738e0a7104d36477bada689975e66fd6d8ef2093f39ab93e0e99a5e52703544ad59e5bce7a2f0e5a2db4a95ef858286bb1d8a23a4f355600fd858b1bcd6e6f28db6aad23eef86abfc4bc5b8d59cd555ef6669db021a7cd2d9842900a053e2352ab4f8930c86a8d7fb1458bb13fc1884846a401b2415210bf0250fc67b21c160cd5007a7a6687b961b472c13bc84b4d7f9541badb5f1aca7aad187d3cee238b522dde9e34abe78b91f850271f1334353fa845959dd0a42cc7121e1324b0788d234e2259ccf32d0977cf3cb00d40b7e6533b41483905b203160f7738523fbb1e2054b90725773dbe26024291fcc508e7c59a0805ea22afeeb4fb0a1a6e86681312366d2d456258d5a5bf036bf10ea52f1b1eed193568f2a33288645f7eb0e4317db763c53af2329ed4f4daeacc47a263b039e5e84b171c5e9d7af2f78af23024fd8400f9026f39ff42450ae723a97807a2cb696d744b291900ba14ffa8f8a68cc90600dd28533d33712991b31ef5124de1eca1c87b9b85a115824e7486b10168e7038051741d7649de66220bb1437e3da0424d8ddf12b310cfad2e272c7f455a329d1db90b476d0ea2d00612cb43e9ec640dbdf7602112f6fa6a6de0891f8986d865ac6d2070c32e5afd5a77b66530188dc5379f0387ce4b9cdbed5b55171c44f4950b9717a12c41f36194d63667e8a2e350255a04b00d10508422645d90bc33e95f6d5671b8281ebf8deebcbe215c6dbfb584a7ea078158ec26a3c7d18f8f602a4fdb1b43027d8e289e65cdbe55459af3bfbdc63e5d92dafbf6bc7aa83f0f14ae359532fc1a534e5292ef219f374f8fbe6bc9dfa52faa80e70742045b973f2c7a30d6da7147b0a1d4db22ae748f687d64b82794d1c20d7b420ace77da224a5d227f487042aaa9dfceca2cad6cdfd96c1abfa6baa0a974764764f23dd920b3a7190bf0717cd87d72d48b08bc81f9d5a350993acedab3159aa6e560111809663c97b496eebfcbae91a73ff61e204aa7d1cd7d675faf72818331aafac12ad27b3cee8e3fb1068b402fff0e9c2923a1659bd93650e6f7326ca6ee0cded0c45af23ad0c1ef5906ec3b9f09a1ab417792c5fcdc2ef40a2715e4ef31dda1136c36ae7fbce10e509a1811f82728d7b1088975e39b6b971420f505949d9fd6b80d7a7465efadc6e33e7b1bb8dc3d88b840b027d4afb63a7f54ab09074a5dac5ea7084b62c52c980e42fd044f40eb72341300c65a4a674a0b4364ebe22a383ba15e58c1e635c87e61870361e26f1df59bbf7d86fa96086793875f09475ac0c2b79f9c03d7f01bb8a82ad9a9b7bc524c15e651275573827864bca5f27e2ce98ab0b528859faa5176632117e686c438987f062a564729397c1289456cc414f6b37cd021b38fd54ecedb7d25bc60ea53b6ac05a9101c7f3b1c1fc4b99b10dc2e36c8a869fb9839f6ef5c2e65400f77f51faa13ae4656488db94f7b18e3360a7781356001189e61899c147bea433eed8c5557789d4f3c44f38112d76963add314842cc924cd6a78a702afb64d36f9f531750c1ff51c57b51407cb934b8c6c3dfea1e549fce410341c0dab387ccac895391a6b7f04750a174ad48216c356f076e3b243c3a260f1aa26838e0dc0f214808f06f9f7a3f3b4a5f38fbdbf19de5cd92b979ddbce92342f2c3a63aedaae5bd949e261eeef2bc242b9fb5dd7d55a91befe57a7ac257ea186495deaac6d46c6594f97ff401da5ea58d1e548252f93289192b073a1508879c771a9bebd33253a8e41a3205baa8dcd4e7b086e85f19c03c4dc918fccb85029276fac98f7412c709be5ebb7c27e0d4b3174c4c90f4300e7f4d80637b37aeade0bde7c791a29a98b750096a28008d3e61bc8e84b87fc6e74e9e84e7f2af4da3dca84a4889e189862bc703ea7ce2fc0a7a0c98efae122f32506d4023a661130ec19a46e0db8cfeb960de93f19770ef9c13f282734c11c6cfba6364c86a12d8331ec269a6f9b27bb7d184e95bbcd3986fc5c413ba384135490b3564813736b09e2616cd6cd39dbd1ba9a61e4d84e03a341ea6aac8f0fb7e2f8b986a78a693951f1eedbc83d5bdc259a7c30326aa87380c809d155a04e984f71ff94f0f6570104dab2d6336d4c87110245862e6ff0274b1e812e05301ec67b7ffb50f843bc5f817ee9072433482ea8585511f178e1f30ec3aba0d4693eeabf58592596a0df481db79da8d7e6e1f5cac41f8c570d620ac2131787f105be87eebe81297c66c33397a834eaa36570435d58c89f9453293a105978e6a3694139287591f239e611c9c7f99e9025bc5f22316b1a267e16e8ad68787ad2f4e9269c05f50d8f1ea01a90ad5a4adb3da21e055b5a88fc8dc424f069c8246e3972d8fed48f929c7a5fdf9ba3ffa35ef1f1f0bb0d4ac12963670890c3bef769386a19c6480fb93b462dd53314d75ef816e40cda807731d3f1268edf44693bc25edf01b1cc9c7e2f74f60d09642bef8c5f636041acd000058ee89a4ab6a9ce4293f2862ae4ea2edd240a3e825b7b4bbc92b30bcc2254c8ddb2e632e822c438e464fc09a2c06656acb99e9e5f94950d088a81d685b019a8f125d6be8532758982f0fd15741e5b57d0fff95eeb838984c146ae39e3c17cff2449d8105101e6243d5829570c472135592f600c796338c8257e9bab6daac45a7caafb651e15f96d635a34005f092543215d3290d38c7357f64b0e13d0277bf5a3319ea9ed76c9233327c59f8c7a4443d67cb7b9fe2e344cc9f6d78b70619100d044498e9f4244c83159d314e4e0141fc463c978387cdc636677f139045c55f8f955be3ccef45300852cd80179d627ae7e5a93541210318fd632f906bd2fe5ea14ea412f9305c16d2b2fe377b5d1602748180253a32d1816a40fcdce58e47e4b12b5720de1c446e5f74ca16beec5dbdb6f681c2084da119f0122c0d82f3d3c97891761121e289e6662a8d81926f6b0ae99e87cd8c260e54cbcef3c84267763e2853ff021aa0905b88af16474b462bdccf768063891cfeaed4971a15800649c3327d110541b3d0fd89c8ebc856bc603eaf11d8a4383d6b2a245493c2acb2329b29a2fc03c53e6a4fa48fc0a95018ea8a4720af4d24196aab3c7999808fce542e4d72aa5f2ca57a61af0333711b4e6f28439b756125699e0d4edeeb8f5454ffb3a9dda4c76e0b1f7af57509e8d3ffa6ae516996f4ee9283f2f3d284add5cd35e243b437e84bedb359fc8480af7db4dc1826573cadcd392a91f5e1c209e850093898ab02192176225814f0e299316679eba913f8aa621b9223efcdb597bec66f7aecc96f6fb64ed16d4fee02471a5cbbb6c0b7f246b7749172ac5c6091ac5f7f7b53d8182c78e6c2e27e0af76676811a64106907e737d2554c24a3efd3097092b9b7fde9aef5a5608cf52457a431867bb49ecc66f70e9b04b18621e654236846ef40fc7db0f76f95f3592425fb049267af9b1948dabc0dc6b6540f635ed577e8dcdee4b1a46d327bae80bf0f1a44f1e1a9b1438361f56021fcc998bdea5bb78406f2e351d74284f07442f22ef18ff6b921d98d06a1f025408eefb66646eb5baf00e17b5435cc4b24c735702c8d757a11634a0f3fc7cb2f228fe96a0d47b586d4d92c7ae026a1f185bda793231047f991f57ed54285a0ff3c68bf941482def6b5f970f4f7b589b75b9a86bd4ddd252131475085fea080b967cec06f7e7e1a18ab6cf564dafb77038b7425aa93dbfeb261e40ce3fd426f4a683d337ad7dce4ce65cb8f6789d5f37c40a4c0feba9ecf672e49b039bfe1ec96cf609f1121ea98055fe44604ed88e988716adc03b378b38e63307dc8ba09d705b451b25cfc78628ac090039a2b537b5c694f557a56be950154b8535f584ac15be150359ac48f209ec52426d248d525d65dbbc5a5610496bbf62328cb979a04adbf14c8e6b4dba3c281d2d4c590cbe05a64f50ea05fc66fc5e5e63180c8884f36f65130def0bc4bd9a86ee5e46e5c6d3590d1831ceb188614bf1874a1dc1580300ed49c9322777547bd4bc3139ca090b07a31ddb97cf8728595176317e9e6581daa4f6d0b6b13aa5b03750b887e4a9e44035453510eec32e630c1b42212a834a1a58155f7a48c2bf7eafa9f0f0d2eb891a28d2e260409335eaa1eef8811fbf195a02072868679552ed21b131fa97630bdf40f4ea1584c3753cc10ac484b950d8b0b1dc74ca56fd822f9c70885f532e099e8225ca9b362f97ceee0f90b715325c0a89de3454d603f37bb0ca63d0e4df021e8d6749d3f06159c5363e08dd957602a87d3edabf9846cedab371fa68c9ef99a910848eed1c96e1b722cfc2da05cd9a710b90471ff353e48a2b4dae32525bacad577103fe935be3d8369a2795663bc9f325a7a310736d00a2ba1fbc6791e9a80a441c6bb84a26e2e6986c8c9c59cd5e13f59e833f0684411867682c74db6317cd4efbf9988e09dbbce5d843b503969b0c3fcce5098b47307cf5d3ca448b4a9ba5f4d147917ec75cded59cfd194ae1df4fa522142a8e2fff9581b03e74daba34d2026edb053ab9a966632a111c02a2f988cc46ebd2f7254d2c0b1858743c2a898ff30b85b1894123a16f6ab05d8647d58d72b9d2486a8216f487e4882e174df6675699cadd40cc76d716b46662efae4bf9287f79677d71b65809978de16c2efd19563e7a124bd02d02e290fd9a06394adfc5365455744443eab75c717711ba942f676335b30943692f10614233de681ac1b1b11e4cf09d48351aa3bfb4e7c3a1a4b080fdb459df2c62d447d83508dcc49a56d387b972864f0014e5c6995a5f74ad64dfa480a503e2a07b8074b4f9ced37de15bea055d4ba362aa431e287cd7f0a824709a9791ec92210340f08b9d8e4a88eebd046f08d242309b06d6c72256e8836d81b9e3b2b689500bb22fddd95b95d9c9d3248c3fe069e0b61cb1f5c5e6e32fcd0156da9526885a484e3a83f78644e1a55386cd7349c0d34a5f5b82490f61fd5f541913dba06cb7e37f65a7ee30a7f96e7e01327393ba978848aefdc6fb8e8bed1395fd2af3ad7863ce1b473144dfaff6ca09d00fce00c9726af050c810d8cc0490d28a850b1331f9481387aa6ec51d0e9bb70bb6fcbe19fa74322612e186a828fb850fad4a627e742381552aea6b1ee28b3f96fb28bae0d4ceb0a224a185d51ee5c0a350543e72d0d6bfcb67f5d0803dacfe97d48a8d0eee2ab2c710a67c2befe55a7e604124d9fdd2d9846445ca154fc8800d05928f4d41c0a7827545998fa45a764e96ebb9db9c28a33095806add22f0c0bf68f4cff1b938260a40f129e3d5c26bb2951b9c4fb8fad1b58c61f323fbb30be221c6a37e2d1293c5cd922c39b3ede40595cf2795704778a564295f071f747fa743da35ee6821f43f612203aa674a833ceb1cf91dc29964b1a0c0835ad1d9e58d22781fb991bc425871bbd4d2bb7c7b9312336f6f3422c876989d9d4a86d7d83c0d9c009a1681772bd4a0d61bb7d978f8d72dd4d4ce60d721d55edaaf27a262038064a26c150104ed832804c15d5c9d8a67282a9c71d169b6db6e814b0b723b34e8933ef5ce424ed185fb2437e3735f08da3db99e70305e912f2a682edc0e324a1ca9763f7cbc86c04805e97b954d7cdaed32f563951af6b05e3adff0622c14e8d5e6ebcec062c2fd8f092ecfbdc6"]], 0x155, 0xfdfdffff, 0x0}) [ 614.346188] binder: 24101:24147 tried to acquire reference to desc 0, got 1 instead [ 614.361219] binder: 24101 invalid dec weak, ref 1950 desc 0 s 1 w 0 [ 614.406954] binder_thread_write: 10 callbacks suppressed [ 614.406969] binder: 24154:24156 Acquire 1 refcount change on invalid ref 0 ret -22 [ 614.424382] binder: 24158 invalid dec weak, ref 1980 desc 0 s 1 w 0 16:49:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563000000000000"], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 614.466749] binder: 24154:24156 Release 1 refcount change on invalid ref 0 ret -22 [ 614.539272] binder: 24164:24165 unknown command 25349 [ 614.552719] binder: 24164:24165 ioctl c0306201 20000080 returned -22 [ 614.573707] binder: 24164:24165 Release 1 refcount change on invalid ref 0 ret -22 16:49:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40040, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100), 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x1, 0x181000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8100, 0xc) renameat2(r3, &(0x7f0000000240)='./file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000480)=""/237) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r6 = dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) connect$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) [ 614.604033] binder: 24164:24165 unknown command 25349 [ 614.623270] binder: 24164:24165 ioctl c0306201 20000080 returned -22 [ 614.623353] binder: 24164:24167 Release 1 refcount change on invalid ref 0 ret -22 16:49:32 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf0, &(0x7f0000000000)=[{}]}, 0x10) 16:49:33 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c020660b, &(0x7f00000000c0)) 16:49:33 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe4, &(0x7f0000000000)=[{}]}, 0x10) 16:49:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3ee2c9f83f4a1932d29b7e16059957b412a2577073b5d29129611ddf957f27eb62fe11b1abb324cb06d5e47803a712c93245bc1b52e40ffed623d0"], 0x0, 0x0, 0x0}) close(r0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xd8, "91b39ceb4077a51c662acebc4999bf252dbee479c7a23fc0c5dad18ee83e6cdeb9a4b6aa0b291b8b8ba7eb05680bd4405629007a9b900dcc0bf050670a46e0bf046876014835093ce501ba711e472e8e1269bc050ebc8a885f25018f1df5f70985af87f6812dfd5d9fbdbba1a74ac20516e76ec27d8abaf10635937707fa3ee0c8d727c0d0d8bacf63fec15db4190b5d4095dbbab60d9d991666d00b4b945643d96e2514e9c32ccf4e65f9338c649d4437eb3dec66eb95d9af758228a3604ca02d43849b9bfb9889d32f1a711158b8f77b0926fdf450b325"}, &(0x7f0000000200)=0xe0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x1, 0x7, 0xfffffffffffffffc, 0x10001, 0x9, 0x5, 0xffffffff, 0x3, 0x9e2e, 0x6, 0x800, 0x0, 0xfffffffffffffff8, 0x91, 0x2]}, &(0x7f0000000340)=0x100) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10800, 0x0) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0xc) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:33 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf1, &(0x7f0000000000)=[{}]}, 0x10) [ 614.998079] binder: 24184:24185 unknown command -120987074 [ 615.022059] binder: 24184:24185 ioctl c0306201 20000080 returned -22 [ 615.043214] binder: 24184:24185 unknown command -120987074 [ 615.049989] binder: 24184:24185 ioctl c0306201 20000080 returned -22 16:49:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000000, 0x10101) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000140)=0x6) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304403f000000"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x59}, 0x4) close(r0) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:33 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7, 0xcb}) r1 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$P9_RMKNOD(r0, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x23}}, 0x14) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) r3 = dup(r2) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x2c, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYRESDEC=r3, @ANYRES16=r2, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC=r3, @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="e32e57a492761d12f05027b603bfbd4abeedf084177c2f6233ce05da7056568f15414835ab5c73ada8f8ef91a17d55bb042055da005afe9818c378e2c0c0fbbe2f4f4bde82afc8f8733a304177a96c7c464be81d49a6b4d540ce1b88c7371aae4775904009ae2ec1cd8202ae4e363531b6c52332abfb28546cd6d480d42d3f08b64eb22c8dc5f74ed81b9110186b37fb9f42960d766d056cd32462fd4be71e459bd35794bfe4e1382679009f9ec4e5a5c5b35254f5970e18005d727a3278b73236dca55a4ce5f7c2f9a730ba478cb32087af0d009672b7b17016005e822a060377c165c0ac94a0da27784f6cc48b8ebdda8026ae7313eae0a41bc9f98446464a710ce43b4e6ddf303b9d941ef77d25245723e9f2b0e1e8ce6fe91254506fafe53fa0b04384a8d8773eb459b893054888ff7e9a5526a9616b9d4bc3f2ec04de71618d3938dcbc00189c4b3469dfdeed034418384b058bb0aaf66c2a815bf7272580ace4550a0541f2ae0d6f01fad7ffe73eae1f579445a296b0b9299175e40d116487e2e9ffc187314133d71dde6d11079dd5bee7c5adee9a101b7cd5f6ed4c728d06ef898ba86dd41570bd610481efa0e2a1fcdd7bd0ea2be2a94e58aa47ad78577c0175072987ca62f15a08b6ff1b8e1f9ce3f56c8cc3bad6107bbaf4fb2d502107bc4e0fb8a9af20ac55baf4ea6f2d5f28ea1c51a7fad2cc0d4684700072f07950350797311827be5be981371eca495ca7acdda07c56a6039362e56ccc356be4bb36d1163005141c9bb3cbc587f8fc63ef0f3d6a4304267bfc2a0a0d84ec64f36768e38c7bfcfd3c85795903ccdba16def7c6dbe95531f90256e93cafc40d0329cbdcac1239da1fb1d222e411942e5137031fcd13a6775c0b3e7df575066152986e4cab407f34b8fa04bca0ecaa01131b962e344fd5a9ff4b91698ded92c4157e8b440968ea661d4405cf47e636a92be7523382f407dada231f985981f30361673e1068caa91b8aee5589c8edf79643e7aafac702f7ef4a037722e35f507d2ddd2c971bb64da9cd6672094262bf6cc93b81432bc14257cd382a9a1a1132f0b01b7bca90132e0204cccace44955a538a4cca42b9fa54a198431d51cfaef5100250201f9c2973f504d344ea9711fedbc1bf1bccc43cee1762a1df936f6cb8b70bdc8b0bcd20a1d2b9fcb69ef959b42c6e41915dbf7765ca118057ffe9f4a164dae522bcada9dc58fbd24436610ef2098f31b8e6dacaaf10d8b0d72739ef1ff8186c3b3b5a4a9b1a6291a6c7be5a0d86693c3db0b7415729096539238ceed3c019e6bf23e9f4416f6ea2923f676cbdd71598f33b9cb47399ccdffc2b8eca689ea3ea2cb2e3e71322cbb1132f35c98076ee535cb754b2f404272d776cd819cf0ddeb2064ae6ef860bf277854509c46fda4a89cb98f1ea9feeab7533d1782729e84d38341a0db29e93aed90e3ae2391b312adfd953879ec5ec3ca9a25562cf6cefdb5a641ab54276fac0ade398c1b157e709d09f86d8586521661c8ee42a59f700fc3d73fcb85ed7d012280d8ee2065f9eb98a7e50163cddde938e550d9ef078cbc161a21ac0d109e1bfc0286b71d699473f55b2fcb473144c9231f0ab033455b05542aeca59eb1be0ea83ed937fb96ed627195011df8a8d02ca253247a00d105cbcdfca768867112ae1610ac9604aa8faaf11bd8b1d3f364a61b59bcedf2b79c0f0d1659f5dd69e834baf02e03d12e8c9c5a6f9e9c68a5e6f3dfa3f18a43c2ae30f5c9007f7d3f7ad0e3bda1859821ad22974d04a8acc99755793d11332ac987548d5cdc4f1dc40bd32b1447bc7aec055cfaf7bc71e059d78b6be6157bcd53c7ca858e0321e20ba40ca92237b436a55b0c776453b2dad21b10e47c0d6e8123e85c42677bb3d15f23297e815d146e9c6c03c7d80afbe0aa6a5084cc227a015071faa25551e63344ee29b6e5ca992f953f3188bb45c0525729224cd21e80a76e6aba76f654f263878291fd71c97bcf200176f610f730738028e92ca175cf038707ab2b2152d32815d46ff80b42b9164398eae5e2d89edfe3122bb4960e4ce01bf83efc1ce5b34f988221cb5fc0cddd1350902b9c84059fcf7673412d63ccf5d0b012600e2543461a4b0f0d4c1ed62b1c2842f3d1d47594efd0112475f57073d4234b8d8a8ba3edc2c0827e9d3488fe073ae1e3c116a8965661d9d2edcc336203d744ffc526fae21385929d9eda7214d4c2acff50044f51234e16e31ff0b9502683462ddb13c2aa3b92428939cda9b57ec891f8fcf6995dd04ada7cbb98df870c2040870979e625c9e557e1677a450bb5621ef8378ecbd29107b9c4db3cf690fd93f5d7ca6699e7c1043301865e3a9625de07c36e64da78b69ee35aecb46e1b3f2fc54e36dc7d1df0824b6a048f9635fd72a0531122b6a005ff0d5548e532c1a2ffaf04068ee5af7dfe0f2d3a4e2bb6748fed992be82de59362a641d50ff4123818a4ba174122b75ede1eb21b655f63e23321a8612c1dec1746ed6331c71fa830e8f53e9b395ae6a79ee621d00cf91b037f1466663c5f975169dbdc3b8a263f9a1748f83db6f4117f8b1cc900f19e61efa032b49e618f9fc80665358f291e34c205b77500d0818fcbf431d385a588dbfd491b943184bf8b42900b809a6cf8723dd355edd54b145e68a375efc37713cc8d691a37437a5a3ffc55503ef7e34898d37fe8adfc5971d7769eb0dcfb90729ceb0a0a592a7d416c02d2e8b00ef5e05d7f81216f3e2236399bdf1c65b701220a8742f79d5932bd27874106178c7e91e6a7f714f5a4f856fa8f2eb6f21fe214c801d3886a4ac7e03cd8a04be14cbbf599202e05e4ee1d4bb5672460180b51de1413af0fb5b248b5a2e0470ac027eb69e66a8d5f43fa345433c1863ff9a6ebdd62411acdd8173a193ef8d2527d301cec1514417b314c1a8bf81a73343b9d08673a902b42e57d4356c388f2cd4a2dcce66e12020040d9e2a8a9ebd713b15466543a5d04f889497564715fdc18a7c8f6195dfe48d7a620d572824bc50fa8b4226b00ad1fb616047de26bc0427562bbf7da17a3d168df5e3e5d6dc48ef3ef1969f71d5b7f7f38b14baa95258d81d0ccb4e0991f3237e66dec287dff455b217db7aa5f25107a1d65d87f0684765bd7fe97882f2bc7ca01163f58860ddf226d92d1894648c5f04c8370cbe80248f2922f1672125cf6aa53d1e4aea2400ba1d24086521b7828f27448c89602534b7f4ccd796c1e44d8fe46912f65a6252bb20f50be2066580ae07065b0d55a33cedc87ded9ac7f62f01fd467fde9973d07008dcb5cd361a402dba7197aff1e5ac0b5094b911ba05235e55a279ffbb4a2a6a5e8b08d30c8a233aa616cf7cebff0d93b4579730e8522534394c2a45c0c1046fee9b3c2121ddc13af3ee27f6cc4eb27a14b33db620617f617f4cdf88f61f6dd0b76545959c9b7d5850741edde257429c48218379eba2213f57f0933da7589566007765590dee33bc6696b2d786a0e0bc6f68e752ae8327bfe4f697a37e8a9f9651f4f1163159946ff0d7c717f54dc5e1e1a50da6a5cc53072eca5f5474286b324ee22a1b25e1c6650d5d01350b17529bbafc721e3d29d9a9731977e0232e16fb0374df084f4613c7657794e57ede72b423e8de1a4c75e6d008569bcab6488e9c1fb69f3a2ae53eb5b699b483ac13788e94c49c1f5f390aae6cac565306743bad8c05a2aa52e5062ea98a2dc42dbfcac67cdd319739a560176a596c12a8f462fd2e13056d650a0ef2b5bcedce355de63c32e06a0d8265e5844fb586d77863820623f549b15f2315adb943723bb1754c32839433ac86bccb7165ee9e996c9fd88db18e86c71fbbf1b9c3ff56ea43952a2fe29fe90b28e27bae1e63eddafc3301eb47b19f976d807e99202cd4ce5f82b1f5c2117292807e701255d4cd9de43e3cf4d378348f8c5dc446924374f8a6dcf0884f1a3023bd290544dbdc1f8904ff6d14b3967728009e217b7fd09178586a93c47afced61fb0bc2b3e8d97d1d564cd0a98d50f1727ed8d4eb984f534a4adad7b7bf011dc05fea5fe3e2c4d49ea7bccd85a29d29cdc6e1c831f2f935b6783b3c307a63ac748ea074ea87cc708826706aebbb78bf47fcca53672dc566c1b5d5e22b6b0baddd63841bfc49258b773205ddef08f8ad9027c293aff5e76588cd247ed29add06f3c682716b4023433d85dbefaabd8c673026a9f77198255b7a987a238cd548cf7f2944e03af5fe4527ab57f518cb1eb10ad8fa2d6f8c366aba29bead269e7577bff8dce1fde5ffa5daddcd53696b07b70f3dfdc6c09674b2aff536da752656e22021ad8d2c4735712c514c42f10fa4633e11e0d57bdb9ea3a639e5abdc7d9af925bb384e167217740ff2f800f5c96c032ebb8f6bb39bafe1625b2c2eb24e9b07973ec1e003a5f793d762a61d1699d92c33a2165f5d30f409efa60a48888224bb66e7908b3b4b6ae968e48f364fa5496bfbba9277da622ca1ff66a9349ec499930bbdd3aa5bcdb9802d1a3461f1d20a35d8c29239c295fdb9378aba9462b3a5080cd92270f05c4c3a6bfd08d20ad84d8769e8cca12af57de770ed50a25c77ff13a0e596c151cb0438047efb6741afeab624792847a5e7d3bc7a7581843809252c3370ce7e7d25131de32dabb4d11be836c6e30e8aab41683b675029ffe70daea44dbbf97f2cbf251e2f3fcdb49c03ad2e01dc1357512bae1fb4c18b6c2580e8bf9c208d9ee3efc979afd93bc0f39e0d3256b629d16e3346d5d392b4fdc3173c0e939d2ba1c188594dd5a08811022a832a83f5031882471af03aa4633e5c30ca0ce95cb76b3b39508d0eef131efc2f094ccbf5091c0b1bdcd331d37853b13c82ab56f77d4650b3df3a084c3742b1ffc60c01d492cf429b2103daf7e1fc1102ffca95b312762c977a8c60e45840470fed62defe915463e98202a2a739394c6e84b2060a6db738e776061df1583c6dd53737106b390dff2731c5fdea5126d25d5dc819a8852480db735afe7043708d20b6c54406146e64548a9bdb079c7e5fbe12dbfd596479cace9495c1333fc4bd6374eedaf7b37b17521a9fa699534a89e4c32c4746cc4e5d4f60c5bb0cc6a4373441f388864ded1b2a4a73935e86526f6905cd3b33a827b76dd921b390e61e58dade4b3c9163fc38464af9330c8b0d47590ca34c21722f5fb7b8475176e7543e0094081eca323336c9dcf6b6f49aff8c97183ef804432f8e128fecd639d46e2d1d3fa166e66330d1f0953185246ae9815cf75d4ad3c496653a2ef87681050885fa2f337cbc027fb720915a326b2ce0c26bbb444a6f79dc9fced2eae731ed78de95ca707c987248195589656cb725f701076832e4f40584cbb8b75ee0325c4308dc93268aabe257ba7e84aad5a904a6243238c3ae667704cab08ef698d3e9a7569d357cc4ca0a8f6f48b6157311e59c4cac8715c461c905461b9a1f1ea200a4fa749ae7956f8e7236210beb3b4c90fead6c5085744704bb123e382d913f03576e479fccb039be43791f993071dd90cd2c078f1bf7360090ab5d546a38f0c11700e4871e8f6f78d35afdc77d08ece31ce526b030289c591612f0437cdff2c58e8d99d97ee521d5a152d4e8637f8b27a775591bc34e929834c92b4e7ad21d456d1414877b524dec46ed803a69acd9bf61495ff7189034173da917ada049557a290fdbb87749538b84e87ca204be5f959ea561412177f9dec2fbe89f91a1a3f9e7e6d7037a1787b3482fecbc8256c22e7d55f8a728d9ad221eef2"]], 0x154, 0xfdfdffff, 0x0}) [ 615.167388] binder: 24197:24199 Release 1 refcount change on invalid ref 0 ret -22 [ 615.226879] binder: 24158:24200 tried to acquire reference to desc 0, got 1 instead [ 615.280686] binder: BINDER_SET_CONTEXT_MGR already set [ 615.299049] binder: 24204:24205 ioctl 40046207 0 returned -16 16:49:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:33 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe5, &(0x7f0000000000)=[{}]}, 0x10) [ 615.328478] binder: 24204:24205 Acquire 1 refcount change on invalid ref 0 ret -22 [ 615.347143] binder: 24204:24205 unknown command 808452099 [ 615.373161] binder: 24204:24205 ioctl c0306201 20000780 returned -22 [ 615.391366] binder: BINDER_SET_CONTEXT_MGR already set [ 615.398376] binder: 24214:24216 Release 1 refcount change on invalid ref 0 ret -22 16:49:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20002, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000000c0)=""/97) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="16630440"], 0x0, 0xfdfdffff, 0x0}) [ 615.423767] binder: 24213:24215 ioctl 40046207 0 returned -16 [ 615.424164] binder: 24204:24217 unknown command 808452101 [ 615.451737] binder: 24204:24217 ioctl c0306201 20000780 returned -22 [ 615.511267] binder: BINDER_SET_CONTEXT_MGR already set [ 615.525829] binder: 24225:24226 ioctl 40046207 0 returned -16 [ 615.538886] binder: 24227:24228 Release 1 refcount change on invalid ref 0 ret -22 16:49:33 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf2, &(0x7f0000000000)=[{}]}, 0x10) [ 615.554885] binder: 24225:24226 Acquire 1 refcount change on invalid ref 0 ret -22 16:49:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:34 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x3f00) 16:49:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x44a000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:34 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe6, &(0x7f0000000000)=[{}]}, 0x10) 16:49:34 executing program 0: recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/164, 0xa4}, 0x100) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x9975, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r1) 16:49:34 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf3, &(0x7f0000000000)=[{}]}, 0x10) [ 615.918215] binder: 24244:24246 Release 1 refcount change on invalid ref 0 ret -22 [ 615.949501] binder: BINDER_SET_CONTEXT_MGR already set 16:49:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000940)={0x0, 0x1000, "e95c78bd0943dfd61dd5815d2c2675df7761e5494d44506c0280ab07b8c7309977869883e92cdb2abe502a807db2ab0c3812a14b61c8d8b44de345e5ddc1e28824ee523036bdab467853c13e4dc1ce93f708f3d40bc1ebbb76155ef773c1c6ab9c1379a737b3aebcbd05bdbc3f96a8a98f04abb8b3cc25f5ae9a6c89b86823b60e3d6c1ba45b2d1bfa56ec75072824e7dd25451a36034e1505827c00b129d70299e9352e71ed513f04afde85720a412d1d813287c695dfefab7a6bacbdccfe7438cd51bbcf43135cfa6aba62dd3cdf3f71e96fecf1ace3e76a1cc9e8fcb219ba2688b0515eebdb37c8750173e60d0d2acb87c68799532c587f16f9b8e65333a2dcf6e5d6238742b714d3f473315a7d839d612d068c3a12314221d70a23bd88a4e3af2ee476a62d2a09996efe2512dd5de7fdbe903663a331bc7b8514a900fe3dc01fc0c31fb89919fcc4986ac4a22fba8bcb881fcc2cd14046e9dcc47fc09b600dd20c892cad52e877fe89f32f2b104e75bd5f5fa1919e04d0cf1c3c5a2cc56732891ec5f8514b9265e63be504edeb2181d763d93e8b308da56ce48748281617378b7d39f9ccbeaf2f55fda0fd5fd8bccdcd02124f454eaff5f86751ad8641af810ac2a03babccf62de5f27b82b84fc6f2504de7b85d7438e0c5b3bd0b1d31b9d7318f27d8c38ed92a8465817453431387c7bc042d331c334a024763bf1e9e2d05212f01a2be363667e5b73463f9d25f02ada61e9bd838fef821b8492f0ebba83fd58acafe9dde25a2e6ad3e73ba018e7b211ce449c9f5a56079e397d3bee3d01c51bd05ebce6bc86b0101cf3d9607ae8008373695c884fb2579fe65b29862191703889163ab03ef16c74608ebf4a013c1f31b5ace7c195469220641bb5fc487d50d41488b7dbb5d55fb5099ee0539fe7ad4d47f8ed1059875aacb18a7e675100fd4079997e9d2a8e066aa314817bc0e1f2b6088fbe48735c58d4c7062c30b75cf47753ac5fe010cb4b2b5a6e7552fd1b32dc3756c61a07b909a6eaae4a66e5e045f6cf243e6786e8fcc3bbbe530050fdf1d4bc62a27d9945ba78517aa4c56ddfdbdf62ef27e7321e32987b96e004bbbaf38a8f59781ade2b1d2917400626d0a2c53687562af343269b28495860e4e2d92afc27c77e18549426bcfa9f18c7528162c737acf2501be1a62edcaa4e0e9ae57e2d856581827ebde65bae8237038e4a466df5bbed77f99ce1aed30bf2f1cff7b440a14cb75dc4510eed269c6739984c2efd79100fba622eed7202b5498bcac84939e77ab2fae78d8da0ffa9aec43f91e3a97f43727eb025d0d148fbbd7a100db98f4d4c6692a1891bc2b2af2e477c9e02cb58c364dcdfe334e807c9c721280332fa616cb6403d2dbd0ee0fd3adbd625ad2f2bbc6b7f40661cc7f7397cfc7f0356738ab7e73731edb735384e3fc473d9a5c564492e8d708ea58488377830824ab00cf4573402d68194a7a343fafb0cdc672d8e4a16377dbc7a34d142c5029605b7a3b21d3d7e714f71c708fb3b8c8265e22d69a4006baafcea8ed43fd34a0fcefd331a0aeeb584bc062c6ace8420eefcf86e47a148f4e8ed1969a1ee1f5cf3b914a847a33f6d577ba87631c3e7ad75cd4050f08b2aa9b7f2cbe2c4524c70115a6dfd3215bf5a1079cd26ef4ea3868d9fd4199894517f81a79daaa4c90a19ac30156712dbcbc23107b5b72c7271df0b8046429577fca5840e0d8c5161e93f738bcfc8683094fa237213a903cdb61fae78e7477329387c158cd2c6adc140cac37362e52808ccc5069b12ce527590ddfd7c43d00d094501c548586a59c9b9f0a6669fbe551291a1e9c9536c9aa4682f9d86b203a9444744ce11bcef0628a6f8064fa89e7454541df0876354e31bb9bae2dbfc86c7e074c4576e133d755bfb9c7a743aae901c2199a155654bf979054129dbae501231e220d3b75481b34ad34febe28777c7bfcc272ff60620a9b804ffffc8efac0e72968293e2a3e1cea2b8da76a0b968286ea37f4ddebfb681dd29aef18421959a3465cb3bb6a899c13d5d4e7c0bcd697f2a16c02d78034c2cdbdc9863f29e0b12f043c56f22a688b32f6441c6cfd0e79f5cd5b10692eb2428b8ab818ba28948e867fb072910e4166e4d4980d7e7b2dec236142ff9a33dd2604c95805ca72ce238aa877ceae77c6bca0fefb0eba70b911c739be69ae11b0b098801269eb921e881b9ff71951eb16b3661d59032c07123606f9474728b209dec41048d1da37ed45aefd394840d5f6a8e500828ce494f873eaf17b6a20e935b7bb5206f662049aef7cea9a21846e9ed7361b9878bd9e892b74644c8a2786ef7c5ae35e02c530005c1ddf739e39a3ae7737ecaaaf5b77c91c93be117d215b9aced0a3f3b3068ce231c28ca5e7c286d83f66527397dfeb73ba088f9fa7731d30368556e3c3b647a051ac81f0fbd36d1b52a4c38d041889ae5be526dab310798e85caaccda0f1720d172b9f68db3c285bf867538bcdbf99fcb6e97c20b80f637d35511c3d710bc014b7323a595c7974dd29b7a6631b0720e3fbe046cb884a0aea8de4bdefb3121e9911909192ff4987d6c7cf2b774b26e819a2926a422e3a8c7b528ec7174092a17e44c98eba9f15551ce6f3d0bc800809896dd27b4ea3fa6dba1d02f3e05a512195c8083b0ed0efa78fd1525b5c6d605ee9eb19960836b7bb38491eb91471e3ddd81e6fe9b12da6f5775207c964c2fc4e1846a15fbe7c146ef1e032d39ad76e23e34724e004875e5433f08d896a9bf6b076e3f4db27ba3d174670cfba651151c5ec96d92a9cdb1dbb3965e4b954a2eb2ec31c4d6ef3f05b3678b7d3f3c28993124a96854e4f18de4e9679b0575438ab88f49301639346c6379079cb0143a40fd8f39ffc452fdc2299ff900b2503fe2de25806599f3d30ddae36abe6812ca345e8d213001c9cbeb3b2961c8328da5bb121978fdeeca1fc2efcca625187443174ba76a02142ddd33d7bf2602726d496bcbf8da2a50b8e54d3f27b21af4bd687f2d72d1316494afc1bc02a5b1bfd019aca0a325c02c7a4bde1a057275265c448007fe6048b10af5a22ce6e9e6777bc4178f514df17b730dae0afd43b63509b3ef9e993c744dba8ff510a17d7e0b55f7e6c6696ce39a04a2571940bee429480cc9f909ff2cd8efdab29dcee7c8c673222afdaf160fb25b5c3610d38934942bb1ad3ec8ae1fbc10c2d930aaeafa37ea31d005c2fde5596cb7174781d661ca40a5bc58dbab620a74a56cd9f77f6cb3e9923908293fb2e9ceda3fa53cf85e6eee8ba45ce330488499a119ef901db6e7385442cf444b73adad0ad37423760c951c9cccdbe38c32e47c7de2489f431b6dd5403cb70705f1c42faec36bab1447d6598e057d076bfddff6808c8b11b33c71367dea7d6d20d5ae2d29406064e0e190ab114b9641bc3ee94c6ee44b8682653cab0ea301a21786fcd3fe9e69d21fd657eb84ee3f739dd6ed256452ffc96c70b1fd0a34882576542927ea26c0c2819cac110b0a0012f9e0948703acc01665d4a9f02e02a897cb888d5c5b56661260c36a1d9160088f86149ac535bb9d85f405dad04b868eb332c40ba3e209c85eae1823e551141e4a453be591e2ac5a768abf0863f010c3b71ae924761886d131046b0314feae87c196c26ca770a5f33b8b33e3b91d4e909ea81737c3af64816b0d5ce31fd1957778bc90589f3aefccdbbe7b81e897554c2523a26c28d8e16b502bf33fa8263dcbe0f6da44b1e1d85364bbc698163c6c2b0d6cf5f1a3046b6ff5c02b4f3b7adc67ae9d32af7a086479c23d237f366633551f3f9af9091f4ea0e1bbaae98fc24a5a6ba43bb4da07d65d9fe48233a15740e7099dfe9fc262a37aa1d4613e1a7c27a75966daf8c8f9a6396674417cc5bdabad25e3165ae0551db2428b8c30fe7035f118d07c9382fe783d5ff8d84f2e2510c146810187a87330b8d13c290f8ecfea2fcb27707e8b98f2bb35ccb97e2bcc278d7b2ddf3087f90bed096ab3f7053df91ab2e3e3d90f38b645c909caee353ffc5dadd1492db8ed81797c701f5fa5564c174eae6437fa9cd00f7c65353714ffe758655e05fd1fb67271934d88bc27a4f030f7873e170195a2e8dabcefecd1d12e670ba3e0992ef187055bb32ab523ca894f6b55e19f92cce3fb7dacb763a37e3a20b3123adfba4d7c87efdec2300c034216e142240776eb67edf40d197029bc7951606d685b639d737171d7baebc1a6c44853076df5204efdb53dde45a7ac04f984d82f14f822195a0b1a5804fc9e0153fd6964dc62c9c4a0a434a7b8274fa181d818afdd509221685a5d2640c3d41c54946f2d6e26fbfb630a1551fe2609c3481fa62f409868b269b54cd278ca7925dc4a776bc2563434b91242ee04a42517e680e64b61402455aec8b69c63e87f95487be3b27c1e53747b177d825aefab3be4ff4a12ba081a04553ebd94991a98390e319d9133a7dfbc00f90c4245ecbc4868a74be0bbb43f9876d3fd35cff4eb7068effdce009809c4e4c2809fa6d3c2725b17e7828da53f075e5ef8da9fc73538e5a2dd437ada0a9a1a58366b50bad7515f674a93be5ce06846b809e74cb19667886a583ab22a4d3bf0d83d487fd1182dd1c1b558f910f98baef385592d8112886c98220ade8f0086832c383dc74b52c156632d046dd5821875825fdf8137e999fbfd7c4454a768688ef83eef69f21b14f36e325dcd20899f7614ee76801892316a9176712819820eebd0398e5f3e8824d3022d9dc6a2bb51e6fb9ddf2ef3245b090f5152eef43e9c92fec18edb820d90569efce53a1481942d5c53a681d9af955bb026ba9145911ccf8b0b6702b4e6bfc6895f7cd1cb90eba91a53b0494b2aa5532b8b2fb9baecf5de3fedc823f534d7de06c146ebc9759b4e6132afff5c3a1e89a9c64bba88421f06cab43e01b4c72c815af0d3308a808d1bad95bf27886fc78246fe78aacfe293511164f9d41e82c4ce840e38c3d11bd4315c9b57fd939ba16d3d17a6e89beded872ca03cccc0ff5ca92faa6cda88dc7d0e72fb0a7dd34ea4e837a5411be4c0e9f6699f795fbaf462eb5c5ad4afb844dbe9f0dff9cb2b98df6d4675a042ed6f8744a3f3342e3c1d8bc642c09b794a22ec1a06284e7aed3fdc123c670a0090775c062ba355f66e94b63311af3eb37125a6e6e0151252af9e6224b5bc5b0c260ff49e32ae41cc9bacf7a501df7752f9f80ad21c6d74318beab2fa3df521d305f049fdfc0858646e6311263976fc6fde109bce94cc41a0939a7d53b1b93d654f3df0b2bbe38d8f9a882f0dc3bc7053c49c974dc46f5d4899fdc55e2eec347b1036917617efdbabe3c0c87ede27ba3cea5859774e5734eebf8efbb4bc521ed0dda60096c1ec323bc005f6b954bfa55c27933c4c7ff74ff3f1f9e50f76631536e522e6d544de4bc55534ae1c32db53adfc5d07920040dc2af6128ccd33870d0efcf445b417394fcad3596aa1129f6eb14c791e7ada0d10b530b48a13e84d9f1a79c0a6084243ef89ddbe964f4f40c4df82a8ecee55fb349deff880a3af6603d61bd9a49f25cf8f046dc491d05713898b95c576097cb93e5a6ecd07892b730780e508e3db0b9abcb2b9b0bdb527dbcbd49e67e7459bcb274b88c96c20879c55f0ae7ab38a8023a7d3be33e11c40a6e351e6d36b5d065275673f2fe3df248e4db5f4e15c22492b72122f59b45ebdabcdf00bfbefbbc9c83926d68913e409fde17519d0369955067b2a23876cf276033dd85678e461d961db9e75de8f908"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x0, 0x9, 0x5, 0x0, 0xe4}, &(0x7f00000000c0)=0x14) close(r0) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 615.974455] binder: 24245:24255 ioctl 40046207 0 returned -16 16:49:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0xa52, 0x40) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000006c0), &(0x7f0000000740)=0x60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0xc020000}, 0xc) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) close(r0) r4 = dup(r3) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000200)) connect$netlink(r2, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x908001}, 0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffffffffffffa5b9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r5, 0xe2}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="076c0440aea9f065aec1514f6f3dc7bf9a41fa5d4062d0e86aa4770c3f20817011c6391762a9ea08c960be50d38b9cafcfd556325aafbb946899763357ea4a2da6b89ced03e66c8c02721baea2c7a4a7fe25"], 0x0, 0xfdfdffff, 0x0}) 16:49:34 executing program 0: pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x84000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000480)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000100)=0x6f, 0xff55) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="f662044002000010"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x4080, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r4, r6, 0x0, 0x3}, 0x10) dup2(r2, r2) close(r2) r7 = dup(r3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06630440020000000663044000000000046304400400000012634840040000000000000003000000000000000000000001000000000000000000000030000000000000002800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000200000000000000852a646600000000", @ANYRES32=r7, @ANYBLOB="000000007f00000000000000"], @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="8f05000000000000"], 0x1c, 0x0, &(0x7f0000000140)="195d04f0c8dcfb64fc726455193afa27647721058a6d8abb31951eb6"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 616.094944] binder: 24264:24265 ioctl c0306201 0 returned -14 [ 616.136092] binder: BINDER_SET_CONTEXT_MGR already set [ 616.160730] binder: 24268:24269 ioctl 40046207 0 returned -16 [ 616.161752] binder: 24270:24271 unknown command 1074029302 [ 616.174616] binder: 24270:24271 ioctl c0306201 20000080 returned -22 [ 616.192995] binder: 24270:24271 got reply transaction with no transaction stack [ 616.194074] binder: 24268:24269 unknown command 9 [ 616.205885] binder: 24270:24271 transaction failed 29201/-71, size 48-40 line 2899 [ 616.222347] binder: 24270:24273 unknown command 1074029302 [ 616.229692] binder: 24270:24273 ioctl c0306201 20000080 returned -22 [ 616.237752] binder: 24268:24269 ioctl c0306201 20000080 returned -22 [ 616.248768] binder: 24270:24271 got reply transaction with no transaction stack 16:49:34 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf4, &(0x7f0000000000)=[{}]}, 0x10) 16:49:34 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe7, &(0x7f0000000000)=[{}]}, 0x10) [ 616.261528] binder: 24268:24269 ioctl 80287010 20000200 returned -22 [ 616.263781] binder: undelivered TRANSACTION_ERROR: 29201 [ 616.275813] binder: 24270:24271 transaction failed 29201/-71, size 48-40 line 2899 [ 616.290113] binder: 24268:24269 unknown command 1074031623 [ 616.294895] binder: undelivered TRANSACTION_ERROR: 29201 16:49:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f00000000c0)=""/230) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 616.332785] binder: 24268:24269 ioctl c0306201 200003c0 returned -22 [ 616.365561] binder: 24268:24272 ioctl 80287010 20000200 returned -22 [ 616.420132] binder: 24284:24286 ioctl 80206433 200000c0 returned -22 [ 616.433526] binder: BINDER_SET_CONTEXT_MGR already set [ 616.447522] binder: 24284:24286 ioctl 40046207 0 returned -16 [ 616.466485] binder: 24284:24289 ioctl 80206433 200000c0 returned -22 16:49:34 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x4000) 16:49:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUMINPUT(r1, 0xc04c561a, &(0x7f0000000100)={0x8, "7594e2ccd54961497d5e199c34438ca6fb6ccf645b3fcad6d6cdfb750b846ee7", 0x3, 0x3, 0x3, 0x1, 0x4020002, 0x4}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) close(r0) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="057b05abf800008a8673ab21faf6a11dbe2677ae0200"], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r2 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000380)="7aaa1dba48f5693590d21e4625de130099fc74364705396fdd944213dec36b720c92275e901e19f4", 0x28) close(r0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x5, 0x10}, 0xc) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x0, 0x1ff, 0x9, 0x81, 0x0, 0x4caa, 0x4, 0x2, 0x0, 0x5, 0x59c, 0x894c, 0x1, 0x5e, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x43db07c3, 0x2, 0x7, 0x6, 0x1, 0x8b6, 0x10000, 0x0, 0x32cf3f33, 0x3, 0x80000001, 0x6, 0x8000, 0x100000000, 0x10000, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x8}, 0x508, 0x7, 0x9, 0x0, 0x9, 0x2, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x2) r5 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c7c628c232ea6e40c03f2973a523748ded7e4ee6739928dde1bbff068b62cd65081cacf034c8016beba9b577bde1fb41d3be79b85a6eb7dc560f61836f9b1071c2a49302eeefd7a6542a5bd2bc59f055f5071a421f2cade30960a6410e1aaa5f9201657cd99d86025fca6ef2a55fa24d0cfc604b21ead7d8672a8d1a582fe3a024"], 0x0, 0xfdfdffff, 0x0}) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000002c0)={0x5}, 0x4) 16:49:34 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf5, &(0x7f0000000000)=[{}]}, 0x10) 16:49:34 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe8, &(0x7f0000000000)=[{}]}, 0x10) [ 616.830019] binder: 24299:24301 unknown command -1425704187 [ 616.842854] binder: BINDER_SET_CONTEXT_MGR already set [ 616.853220] binder: 24299:24301 ioctl c0306201 20000080 returned -22 [ 616.861772] binder: 24300:24303 ioctl 40046207 0 returned -16 [ 616.871998] binder: 24299:24301 unknown command -1425704187 16:49:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 616.897438] binder: 24300 invalid dec weak, ref 2015 desc 0 s 1 w 0 [ 616.916836] binder: 24299:24301 ioctl c0306201 20000080 returned -22 [ 616.938483] binder: 24300:24303 tried to acquire reference to desc 0, got 1 instead 16:49:35 executing program 0: recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000680)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/204, 0xcc}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000480)=""/219, 0xdb}, {&(0x7f0000000340)=""/128, 0x80}], 0x6, &(0x7f0000000580)=""/204, 0xcc}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xe8) r1 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xffffffffffffff61, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 616.946959] binder: BINDER_SET_CONTEXT_MGR already set [ 616.964112] binder: 24300 invalid dec weak, ref 2015 desc 0 s 1 w 0 [ 616.969729] binder: 24312:24313 ioctl 40046207 0 returned -16 16:49:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0863444000000400"], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="c308dc29"], 0x0, 0xfdfdffff, 0x0}) 16:49:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000000c0)={0x9, 0x2, 0x7f, 'queue1\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0x7, 0xfffffffffffff001, 0xfffffffffffffffe}, {0x1f, 0x0, 0x0, 0x5}]}) [ 617.079208] binder: BINDER_SET_CONTEXT_MGR already set [ 617.097381] binder: 24322:24323 ioctl 40046207 0 returned -16 16:49:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) writev(r1, &(0x7f0000000900)=[{&(0x7f00000001c0)="d0851b8eec2e110ce3f1eeb4fa1d35055fc793f4d67c8171c5b0b02f435ace0e8be722a89311cf4c20c13d0e00b84d27bae69491da403bda29fbb76647ce0e5317ac0540756ba8b8424a2ef08a39433d29419a6069796d992c46454a66555e13e7f25344452390b84b804bc63dacd318badb3cc0a34e7b0bd6c504c5b018b2a7ed4db37b3e777f7a45cbaab9a66e9632a32469725fa590f295f3b9267238750294482e5e4dcab841f3d50c547b382cc009ac979ab4aafd4ec5f2e3e4663fee343493c7c8a3117da7a4232741e52b51b0", 0xd0}, {&(0x7f00000002c0)="dc465477661819b1e8888229cac06aa4407b418d50ad7d5187ea7374280b4ff54f3655282e3811b9b32511067934f1619c006029bcb41752ddd7705607c94b9c9c61a0b72e10249aa59a48dbbbd3070acb11000319480ca55b831f8cf5b2324eedc6ea4956bb0f4265c463988417d5314f9f9d911f7d68123410d7a4372e43c89e7427672f027f380c050e28f90ae4ffb539f03655e99d3acc8dd931776139530a65d6afe95d73147710f24b0c0a84cfd5fd580aa1be9099a8484b73ea5aa39685a6818772bdeb283d4447aad459c4a23d044a1086e8701dd722405a", 0xdc}, {&(0x7f0000000480)="84c91a51a578d3e6c5508df51a07da90cbbea43f1d37fb2577c4be93c3d3ef8739a3e2689fe940347245989182db91658977f1124701566e7fbb98998f0d55e329c8f277fe7ae616f127f085df56d816d661238b4032c457b1d9f336b600c164ebef88", 0x63}, {&(0x7f0000000500)="562f4d7875b7bab2adb11c5c31fae3877eaf2ebeb4c8d402d36d87de88fd52419ff9204bd3361f567c1a399c27bf6689c87ae769a6f6695720d8aa3ac892f490ad100df06f54a774bc4ad2b5cc85334b21f13432293b1488c19ed9d532", 0x5d}, {&(0x7f0000000580)="0699cd7e265be8bc5e83e1e71b3522d0ab9a8215305e1906f29e16a9153833339c75f6e076579e8a975fe30cf14e3acabdecdcb3778885d415f4250cb772e43dcc2dba842d8054424a0da8caecab0af1f91fac03fd600dd4e216516f0c204af4fd00ea27dc713ab121a302781b61e2e4b5eaed18b32ec426fffad8e81c8205dcf51094f1f30e9b235584427793aab9f150f26a6c601c46e9026fb18a0b21d90525a83c1818e26aeb93882d8f0105acb3807e7133a4c768104a898e63b1a861fca03098b641dd93956d77ae0220164dffbff1800bbf475f2ba572696ff250ed9e9a822e0d7bac6f9e488175ab9bf14ea9a8ffeee561c55b71c059e6", 0xfb}, {&(0x7f0000000680)="b4446fbb96ce7a04f6e790cc69ead635d4aa07abf5509db3509aefac71a8d1658bdddfee004778c8e230db24eeb547a758b19baea907b81b8eccce60fe5833587e3c49f5f8e2c19f8290b815a95efcedc7cddb06f9475d5ef7b57b9d170da09b9567650e97bdf5496c1859b1ec4ec717c1098496a93373505c9555b729a9f9a2d4a0d0de", 0x84}, {&(0x7f0000000740)="5d031deba238dc332d08ed4c12e8b6314e665587da4d5cc838228dd81543f8617a232079ce2e55c92958d52b9c6dfbabdcb65a72cd2c10f7a0efece8f3c309c526a2f976d3017f76f8aab86b1feb314fd0ebe8789740a07a1e903315b1187191", 0x60}], 0x7) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r2) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000a40)) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000000c0)={0x7, @raw_data="eeb6cdbabe1ad886bce74f70f3864272db184d5260b720908c59a428942c4ab49e38f1c9f4983cb5bb25b2bad4a4839a5b37b3b648d12b420ff343a65c938ba13c3d26217ed491eb6bf5f5db291efbce22e1b8cf3c9abc04dac092f3f0443879e1db19861e270a8a733aad5f84e1da2c84e5bb52a6dc19c48d6c998f4f1d56ab5689e10ff19b14ccf289ef566509b0110ce48b22bf24b1fcbded966973d6699b6be2af0a876bd355ea0a961fa01f3f10a5fa472ffa8eeb03ae339a7a362697df495ca6e7d1bf9499"}) preadv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000840)=""/2, 0x2}], 0x3, 0x42) r3 = dup(r2) r4 = getuid() stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000dc0)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000ec0)=0xe8) r9 = getuid() r10 = geteuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f0000000f40)=0xc) getresgid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)=0x0) lstat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) lsetxattr$system_posix_acl(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000ac0)='system.posix_acl_default\x00', &(0x7f0000001180)={{}, {0x1, 0x2}, [{0x2, 0x4, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x4, r7}, {0x2, 0x6, r8}, {0x2, 0x6, r9}, {0x2, 0x2, r10}], {0x4, 0x6}, [{0x8, 0x2, r11}, {0x8, 0x4, r12}, {0x8, 0x1, r13}, {0x8, 0x6, r14}], {0x10, 0x7}, {0x20, 0xc16e23e4f8f6f832}}, 0x7c, 0x1) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000940)="0287fb4a5d7f7b77208a11dbf3f538c31af8336c918cad919ebae631181110aef04f176bd41b079715378690b0622fa53a08d2291cac841840586f4e0637ca3d3a75141d56d615c44a6de68dd7fe75454772da85a5d7d60b7738894ca1f44ebc1e017bd59fc8ff11de40ebf4406dbb0ed34b3310e126801d788ed787a0a7f306dfaed438a75b33657404ae1d40b830c472025c5ecf234a2a1c2a052cc292b03f66c09036ac638c54bc292ae47442041aca08342737652433b60fe6e8b03f1e993be955d68ad687d4d253ac8069857d31faa896e4e105af8effdfb7d14fa4fdd46b4f93ab135bc44ca32714beb810987cc110ee08f0785cf822d3f4e00a03ab05") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xd, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000096996737ef5458c757a63de1200308865fb6483b3805c1a99e195b608f4b"], 0x0, 0xfdfdffff, 0x0}) [ 617.163747] binder: 24327:24328 ioctl c0306201 0 returned -14 [ 617.203141] binder: 24329:24330 ioctl c08c5334 200000c0 returned -22 16:49:35 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf6, &(0x7f0000000000)=[{}]}, 0x10) [ 617.239478] binder: 24329:24330 ioctl 40087446 20000040 returned -22 [ 617.292569] binder: 24329:24337 ioctl c08c5334 200000c0 returned -22 [ 617.305315] binder: 24332:24334 ioctl 41009432 20000940 returned -22 [ 617.329393] binder: 24332:24338 ioctl 41009432 20000940 returned -22 [ 617.338445] binder: 24329:24335 ioctl 40087446 20000040 returned -22 16:49:35 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x1000000) 16:49:35 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xe9, &(0x7f0000000000)=[{}]}, 0x10) 16:49:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) write$P9_RLOCK(r2, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:35 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4a001, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x2, 0x7ff, 0x8, 0xfffffffffffffff8}, 'syz1\x00', 0x23}) r1 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:35 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf7, &(0x7f0000000000)=[{}]}, 0x10) 16:49:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044002000100"], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06638fe721cd859915b40f18e565975e06e63f5d7dfb21b69900000000326f792432bb2589b2bce1c09edc17a10006d775f8fe00000000000000000000"], 0x0, 0xfdfdffff, 0x0}) [ 617.732844] binder: 24347 invalid dec weak, ref 2030 desc 0 s 1 w 0 [ 617.760640] binder: 24347:24358 tried to acquire reference to desc 0, got 1 instead 16:49:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440002f0000"], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$UI_SET_PHYS(r2, 0x4004556c, &(0x7f0000000000)='syz1\x00') close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) [ 617.858824] binder: 24366:24367 unknown command -410033402 [ 617.864507] binder: 24366:24367 ioctl c0306201 200003c0 returned -22 [ 617.901494] binder: 24366:24369 unknown command -410033402 [ 617.914069] binder: 24366:24369 ioctl c0306201 200003c0 returned -22 [ 617.940782] binder: 24370:24371 ioctl 4004556c 20000000 returned -22 16:49:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4da0a41518f65ef4925819bd3cbc3d0969c6218e690c02b4e9fa3d0eff1fe12b38190ad9d2cd484ef0e056dc71fe99ef71d0be85f6558a9076bf15063a3b6ff7e42eba3f2f7fb03ea481e9dc6b8e44edff103ca9b4ee7912117794e6ff3bc9747926d4747f09abf59dee79efbce69e30bded51cadbb78e7ecc7ac0ba9b5288a11309881fb4a7d652d6a10452c7fe39ed8621c1053e0e4c18efb2288d749b95bca9c07e94b3fe6ba11ffe8ddab356f0c4d1949e00eaed8b47735d647fb6c5a0b4303c859151634a2d0e12765cd13670a4c7a15692a2a9d65b66d1cde348ca9e2d829ab590db818dc2d0a2e604a8f0072f45730e3d3f"], 0x0, 0xfdfdffff, 0x0}) 16:49:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 617.973212] binder: BINDER_SET_CONTEXT_MGR already set [ 617.984342] binder: 24370:24371 ioctl 40046207 0 returned -16 [ 618.032633] binder: 24370:24371 ioctl 4004556c 20000000 returned -22 16:49:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000940)) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e22, @remote}}) 16:49:36 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf8, &(0x7f0000000000)=[{}]}, 0x10) [ 618.073406] binder: 24376:24379 unknown command 363110477 [ 618.081795] binder: 24376:24379 ioctl c0306201 200003c0 returned -22 [ 618.093526] binder: 24376:24379 tried to acquire reference to desc 0, got 1 instead [ 618.117471] binder: 24376:24382 unknown command 363110477 [ 618.131599] binder: 24376:24382 ioctl c0306201 200003c0 returned -22 [ 618.166960] binder: 24385:24387 ioctl 8818564c 20000940 returned -22 16:49:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x17002, 0x5004, 0x4, 0x9, 0x7}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) [ 618.176738] binder: 24385:24387 ioctl 891c 20000040 returned -22 [ 618.198566] binder: 24385:24387 ioctl 8818564c 20000940 returned -22 [ 618.215605] binder: 24385:24388 ioctl 891c 20000040 returned -22 16:49:36 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x3f000000) 16:49:36 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xea, &(0x7f0000000000)=[{}]}, 0x10) 16:49:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000180)=""/27, 0x1b}], 0x3, &(0x7f0000000200)=""/212, 0xd4}, 0x40000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000340)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000400)='security\x00', 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r1, r1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40106435, &(0x7f0000000040)={0x5, r4, 0x10003}) close(r1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'ip6erspan0\x00', {0x2, 0x4e24, @multicast2}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@local, 0xfffffffffffffff8, r3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) r4 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') 16:49:36 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf9, &(0x7f0000000000)=[{}]}, 0x10) [ 618.658910] binder: BINDER_SET_CONTEXT_MGR already set [ 618.681408] binder: BINDER_SET_CONTEXT_MGR already set [ 618.690289] binder: 24405:24406 ioctl 40046207 0 returned -16 [ 618.702003] binder: 24403:24404 ioctl 40046207 0 returned -16 16:49:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x4f, 0x3f5d, 0x4, 0x1, 0x6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x19}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:37 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xfa, &(0x7f0000000000)=[{}]}, 0x10) 16:49:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000000c0)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000001, 0x369040) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000040)) close(r0) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 618.941986] binder: 24426:24428 ioctl 801c581f 20000000 returned -22 [ 618.952809] binder: 24426 invalid dec weak, ref 2060 desc 0 s 1 w 0 [ 619.001596] binder: 24426:24428 tried to acquire reference to desc 0, got 1 instead 16:49:37 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xeb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000040)) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) [ 619.042825] binder: 24426:24433 ioctl 801c581f 20000000 returned -22 [ 619.152811] binder: 24439 invalid dec weak, ref 2069 desc 0 s 1 w 0 [ 619.167644] binder: 24439:24441 tried to acquire reference to desc 0, got 1 instead [ 619.188059] binder: 24439 invalid dec weak, ref 2069 desc 0 s 1 w 0 16:49:37 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x40000000) 16:49:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="a4e2095169"], 0x0, 0x0, 0x0}) close(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80000000200000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0x1, 0x1000, &(0x7f0000fff000/0x1000)=nil}) getsockname$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7062b7c71e7ab702a8571848dbf8e681c9d3bfc40525f598f3c821dd39fe76a5329ef295ba3d3392c8e6850229729f99efc23e86056c502fa8254730c38a84f6e1d1b9c2b4bdd35800ee7e477dc98cf1f73fc6f5963ee3252e1c1605fba6e1180881570ab9313ce3927f82fe78a25603a04dd60be57cb974c55872b44bfc03000000ab74977bf5d0620cb55e46247b99847e48cdf00efde14785b57b4efaf7dc8b25d56608cb34ab9a34"], 0x0, 0xfdfdffff, 0x0}) 16:49:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0xffffffffffffff83, 0xfdfdffff, 0x0}) 16:49:37 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xfb, &(0x7f0000000000)=[{}]}, 0x10) 16:49:37 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xec, &(0x7f0000000000)=[{}]}, 0x10) [ 619.586356] binder: BINDER_SET_CONTEXT_MGR already set [ 619.594189] binder: 24452:24454 unknown command 1359602340 [ 619.614562] binder: 24453:24460 ioctl 40046207 0 returned -16 [ 619.628728] binder: 24452:24454 ioctl c0306201 20000080 returned -22 16:49:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0xfdfdffff, 0x0}) [ 619.647958] binder: 24452:24454 unknown command 1359602340 [ 619.666892] binder: 24452:24454 ioctl c0306201 20000080 returned -22 16:49:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x67d7, 0x80000) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000000c0)=0x8437) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000473b64830816edc1a56c5c00f7157314762eef61b4c330d63b9ff6cce6a7ed72f9596ff074b3fecba7540b6525db19f354acb15c07140bdfb8420d28816077963c2db0c03ac765d6d561782279a5b695e930d590960f18f05b535d6dfac828171a3b7e0431b308645e06ba681ee54e920ac1a484ec5d6138ea8d42a67284cf1be4870ca9257257ed84da2845f341a959"], 0x0, 0xfdfdffff, 0x0}) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x4, 0x40) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000140)) [ 619.751260] binder: 24472:24473 unknown command -1 [ 619.769667] binder: 24472:24473 ioctl c0306201 200003c0 returned -22 16:49:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 619.794567] binder: 24475:24476 tried to acquire reference to desc 0, got 1 instead [ 619.803580] binder: BINDER_SET_CONTEXT_MGR already set [ 619.831670] binder: 24472:24473 ioctl 40046207 0 returned -16 [ 619.837950] binder: 24472:24480 unknown command -1 [ 619.864527] binder: 24472:24480 ioctl c0306201 200003c0 returned -22 16:49:38 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xfc, &(0x7f0000000000)=[{}]}, 0x10) [ 619.922705] binder_thread_write: 24 callbacks suppressed [ 619.922717] binder: 24484:24486 Release 1 refcount change on invalid ref 0 ret -22 16:49:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x8, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="54020000", @ANYRES16=r3, @ANYBLOB="080029bd7000fedbdf25070000000c00090008000200800000003000020008000200070000000400040008000100f50c000004000400080001005effffff0800020000000000040004003400070008000100000001000c0003004ff00000000000000c000400040000000000000008000100c0ffffff0800200007000000340007000c0004000008000000000000080008000100070000000c000300090000000000000008000100800000002c000200080001000800000004000400080001000100000004000400080001002104000008000200ae0d00002c00020008000100f8ffffff08000200040000000800020003000000040004000400040008000200060000005c000500080001006962000008000100756470002c000200080001000f000000080001000300000008000100140000000800040002000000080003000000000014000200080002007f000000080003000100000008000100696200001c000600080001000200000008000100000000000400020004000200c000040014000700080004000300000008000400050000000c00010073797a30000000000c00010073797a3100000000440007000800030001040000080001000a000000080003006c000000080002000000000008000300ff0000000800030001000000080004000100000008000200001000000c00010073797a31000000000c00010073797a31000000001400010062726f6164636173742d6c696e6b000014000700080003000800000008000400008000000c00010073797a30000000000c0005000800010069620000000000000000"], 0x254}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304aab3540300"], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') close(r0) dup(r1) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000580)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:38 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xed, &(0x7f0000000000)=[{}]}, 0x10) 16:49:38 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x100000000000000) 16:49:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06630440dbf30c2f5dc5a7cf0792fbde7a97e052805c6d9419022265121473f1253a93473298ca902164d87edb08491a27c1c1719d73a3da07e374bcd184094fc449c9cc7e45f90f62c7f31d39002a3832a34afeac2ca4cb9a7817fcf273c7c0f6f451642822b096914b295284077cdeb9412ab897d9c0"], 0x0, 0xfdfdffff, 0x0}) 16:49:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x4, 0x1}, 0x10) fstatfs(r2, &(0x7f00000000c0)=""/254) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:38 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xee, &(0x7f0000000000)=[{}]}, 0x10) 16:49:38 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xfd, &(0x7f0000000000)=[{}]}, 0x10) [ 620.514527] binder: BINDER_SET_CONTEXT_MGR already set [ 620.520182] binder: 24513 invalid dec weak, ref 2089 desc 0 s 1 w 0 [ 620.532700] binder: 24509:24517 ioctl 40046207 0 returned -16 16:49:38 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200100) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000840)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002940)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000880)=0xe8) getresgid(&(0x7f00000008c0)=0x0, &(0x7f0000002a40), &(0x7f0000002a80)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002ac0)=0x0) r8 = getuid() lstat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003400)=0x0) r11 = geteuid() r12 = getegid() r13 = getpgrp(0x0) r14 = geteuid() stat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003500)={0x0}, &(0x7f0000003540)=0xc) r17 = geteuid() getresgid(&(0x7f0000003580), &(0x7f00000035c0)=0x0, &(0x7f0000003600)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004d00)=0x0) r20 = getuid() r21 = getgid() r22 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000004d40)='./file0\x00', &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004e00)={0x0, 0x0, 0x0}, &(0x7f0000004e40)=0xc) sendmmsg$unix(r2, &(0x7f0000007380)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="5fa398e311595aad75f165e2f47385b2d26faa55cebec0b181157816cc14e89846489895eaab0bf2e248082501affe559b8edc71f781c03cd88917a840c936d3a1fcc0", 0x43}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000001c0)}], 0x4, &(0x7f0000000240)=[@rights={0x14, 0x1, 0x1, [r1, r2]}], 0x14, 0x20004000}, {&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000480)="5ca4510752696bec1a7ba6965760934fe96d3e8daceaae4b6f0e75a550c4ed88ec78430ad96af2c5a8b1073c3734d5d4e86ed6efc868154560d49abdf33191db16e012665f0c6e724a4d11e0eb024fbba784e31b27889000d180c2ac94eddaa285092b4d74fd04d128a3610aec85a5a93682192a88aed4e8d54a2dce8b77f63777b2f095e6e2f81634110f2bb7404e7986853a4b21bf70e2e5c824a5bd1c06d3edfc62d19daa867e309f203a4a067061ec2e49a0bd5cda212af8d12cbbd00581db1003a7ee458f855a20563f38bbb8520514056451698e35cda387a1c6d8cb", 0xdf}, {&(0x7f0000000300)="b710d6e65ca0566859b3bff31de34bc79bfc71734fc89784cf6e40da7bc764cee72dbfabfc6040a487f1a94604862a7bc3a149220ce7c70ece8ad655668775c9febfb08c51aeba541a5651d3ca17b47427169c5932beae5557edba6e7766352b6b5d537799ec13bcd8053b295d6914d231f18110cb69b6dea348a7391d93d236618c26fdbb3307c97436ebe0a8c0be3e79b9f127beef371539d7ee5e24a1fd1e7dc1bd7c8ce75a400773ac2cb0a7ba2f96f6a582340928bb9b05be", 0xbb}, {&(0x7f0000000580)="5367f3c5214191fa6fb485f55a5032a7f7ab370c4feae195fd5e3840b0a50cdee3552dd76bd37122d0fb62ecc7242853053968582dd8b72fb9f545d14ad2a89a2306ab3d2c8903d3a34b379510667199b83422ec43f97d3f364a2643aca436e8f5427d8d0e78f25fa31ece76c207651b57f52afd1d293ec47df18cbe2219dbcbf2d4cf35d27c4d8eaa00", 0x8a}, {&(0x7f0000000640)="70714b673a96aa812aee7c2aad28fa61ccb13e86c54da82ca06d2186eb2e7cf8433b7cc1045ab43776c4abb2452349c92c08ba0d65d9845aecfde6e55d74faa83b89060111c30e77d5482b427c6ec4fad969953801495324e4ed66a13f52710bc3330d10d30e4629d2c2ecbcf5fefaa53e07c688cd95f60313f57e573a9b86070e792d0f37831a4db141637b32611a", 0x8f}, {&(0x7f0000000700)="b8b022f9ac0954bb09395e6824c5564e4360fd80b58540bb466dfdcaee63be5b9f06f5ce4f3a26eeeb41c921fd11994b2e1f5d51cdfd9c6ce99cc8f1f4b217395f951b05c097c977aedf568570491d0522173ee33aeae8991c58744a8a47c889412c5b9d1843adaf99e4d430c57ada6ce1dff738219e61b21a3231a1cdb75a627e061e4a6d90ddca44e48460e8ed7fb0fd0522c1be1b7c6805a5555a6f57740b9f4ba8311a5f34d7044f3a37cd90cdb23335d10722a667d4c4f4b3e74b500fc2fecf00d0739ac98302805cd3bf97c5f01d095f18e6ad57a39bbcf82d0cdf832969387b3062bdc3bed5a994fa392403a71b99", 0xf2}, {&(0x7f0000000400)="06ce7dab5cfb8243c024a14c6470c4aa1709e5482cef", 0x16}], 0x6, &(0x7f0000002bc0)=[@cred={0x18, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r3, r2, r0]}, @rights={0x14, 0x1, 0x1, [r2, r2]}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r7, r8, r9}, @rights={0x10, 0x1, 0x1, [r1]}], 0x7c, 0x4000}, {&(0x7f0000002c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002cc0)="8e2aa57b9722758fe78b3565aba234556569c7b23328f31bb2290b8d670e1d018f0ac70d8c2368a54082afcf370edc0c2374cc1c77bc8f639576a64f439ef854f6dcf95ae76b98a4070506da9ff3f67ec4fb9176bbc25a293866aa529e8845aeafa957348c480377", 0x68}], 0x1, &(0x7f0000002d80)=[@rights={0x1c, 0x1, 0x1, [r0, r1, r3, r0]}, @rights={0x14, 0x1, 0x1, [r3, r0]}, @rights={0x24, 0x1, 0x1, [r1, r2, r3, r3, r3, r3]}], 0x54}, {&(0x7f0000002e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002e80)="7f603527c59ab3632564212db3407d00cfc12fe53370e34219b6f7081f7024e80ff5ffe40b856f17b522dbeee36492ef87c7ec87514264d6ed34c6", 0x3b}, {&(0x7f0000002ec0)="2e70244ff2120efe3ba080379d6f53047931a9668198d3743c", 0x19}, {&(0x7f0000002f00)="995ce6f8fb9b8fc9a27867e2a9c4d1090f218449e4edf0dfe61e32af27b715e25095ed39583201178bd01d565e79c96d888937b8e9a357dfbcfd58147b112a914680e423bd9ab8d02a34806eff14e401febcbe328fe9fcf237dc2926a17335534d789b40", 0x64}, {&(0x7f0000002f80)="520e28b066c848d11e40604883d43b2f69cd2932109145b43d450899a41623c0ef201e7fe05bcc995bba4b929ead8f9cb086bdab539b6e911760f2", 0x3b}, {&(0x7f0000002fc0)="e481d7c8aa16f01c463a4149faa32e9b19040363b684985a4a2816822b8dcb262b57725cebde607dc2c5421f308450d2e2abcecaa97805bf941a5c3d74a8a27b99be05734982d48524fb8f812aa49bc346790a981e01774b362c75e9949a2fee4df9ed5aa00a0acbbf4785b1fb3aa5352dadb7df29edd959c4d93720debe70bdb65c20f68cfb018fe3503982e7a80fac66c099f328f2", 0x96}, {&(0x7f0000003080)="5e889e93565f0d931bb754c915ef4a9167267abec5fa72cbf6c33a43efe181ad84008f795171fd80e4d95bc607cfa23896aae33504d1a5d1476fa873927718fc71c53af38954113b4a4d6a5c33fa1e1d691ce3868b49744d319cfb44934cfdd28929be4fc138edf12e94047c9aa4ad82da2abc67f78c6336d877558ca6a867d808956b82614e803aa149b1125fdccde7932c8d6582950fad45d09be3d65385cdddc52d", 0xa3}], 0x6, &(0x7f0000003180)=[@rights={0x30, 0x1, 0x1, [r1, r1, r1, r3, r2, r2, r1, r1, r2]}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r2, r2, r2, r2]}, @rights={0x30, 0x1, 0x1, [r0, r0, r3, r3, r2, r3, r0, r3, r1]}], 0x88, 0x1}, {&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000033c0)=[{&(0x7f00000032c0)="49a847cf5fd77c18166c5900d67fd1b6b2ab02262e7b22dbfbf7f197d091b7fa9d4f273e524dd7f6018260b7c0960194983ba22599a652b7932114c2355fee5fcaf78d762e86b71be73fd06e5d03a7e9d240c6caf0f0e16afa4f72ab72f7691a064bc271af0b49afaf9cc8a948e32c1d5cd17cb29260e2d387e57d825022", 0x7e}, {&(0x7f0000003340)="712ea33c18e2d627a258a71e319f88e69f05f26ff138f649f5b3053589afa36e73e423f0218124d935270a98b9d09d66ee1bc4311f1f299810bf2b7143545bebd8eb3911c45a3d21ca98487eca3d55651d7f6c37bf3a45b821d60dee3cdb460965b6f513ff", 0x65}], 0x2, &(0x7f0000003640)=[@rights={0x2c, 0x1, 0x1, [r2, r2, r2, r0, r2, r3, r3, r3]}, @cred={0x18, 0x1, 0x2, r10, r11, r12}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}], 0x74, 0x48000}, {&(0x7f00000036c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000003740)="c4c340ddfa32a16c944f6a088da5d1b90613206ed061b2bb4072", 0x1a}, {&(0x7f0000003780)="61c21b13daf0589fc15e3440e4e2630136ef80d107c33f2b78fd4675ae8dba5ca7294df0780f3059317d0b6b62fe303c7f081670d3fd0dcba7de420e8a9d075fc0707ee5eb6d98aa8267c204a949e8e7d2f8196371e960687290e6949f84f989c125acb4a2b4aaf2c327d30fc8", 0x6d}, {&(0x7f0000003800)="82248d29de25f71cc593c2fa932f1582fbc678a98957cb4eeb04735c8fd6542233c6d9eaa75354d4cd6aba93b2e27de311b4613c8890b36eada3", 0x3a}, {&(0x7f0000003840)="fa3f789434cb07c3a90dac8a6155e200f53a6264a950442cb377e150487eee87d3e977691c933211f1545f71856d8d4533afdbb530e3c56b05b79d265267822aed5df7cfbf60eb7a76ebe021611d8e704b62fa2576627000b16f960eb3ff923673f28a2522591da8722bfbc55a0487f8780477c36c4f6e30d1bacda1a784fe9096cd8bca042cf4d94b4ff624226eedd55c4da2e7f200808bda49d03c56ea8bbe3a3acf080954aa03473e155d15c7a4d8312e656a221b0447d75a8e0cafa8c96ac6275230e0574b3c8854b0e532180c0611c56440b8ae3dcc4d98dc3fb6b4441e6c643c8c937f4846ef45e6131c24938527e714", 0xf3}, {&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000004940)="f7b1f5e8d21dbccd257e806ccb63b5772b28cf9c6c4155440d5b5060acc0026cc0cd12f02012e0fb72cb2519c9d17cad96e7647ba02797ef55907c63f235b8964c6e3e58175c54ef", 0x48}, {&(0x7f00000049c0)="d2ea929bc8410cc3c97ce0d2843720f2847b25461fb5e1d4f738dc4b306cfdf57db7dd7b5f49b1925023dc7f175bd5c9e5403c87ef881f3a0d788792930c374e4b2122191c4a8b21516b5be1cd02ffca2f16d7dbcde08c64b3c09adec8615d2dee84", 0x62}, {&(0x7f0000004a40)="e75733b7619727c925ec352373514cfc19", 0x11}, {&(0x7f0000004a80)="e145075a2a730fc4aa27e8111519b4082e2920734e1e871f90f6a2e6e6e7b25ab298205135ace0c6e4b700f53977471ec0d72a3345cfac5c7f2fbe0eca61ede1ca1ed3d94e56c5b740daf539af59c2bbf8be68fb4618ef9ee4b33b619d1d62944b7cf8878c395a89a076b910eebf8963a392ab3c76129c5b78171d393de117a7f8c1219d8365dc10fa9f202272ad63a5266c521e18835790785439a3c076b34354fe1fe9363a7ad2edd8cc89979c5105bd7c667a468cd4a16ca5c53cac28ea1f0d31e9a3", 0xc4}], 0x9, 0x0, 0x0, 0x24000000}, {&(0x7f0000004c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004c80)="1fe8583f40712a1165a0bb4c34d14fbf", 0x10}], 0x1, &(0x7f0000004e80)=[@cred={0x18, 0x1, 0x2, r19, r20, r21}, @rights={0x14, 0x1, 0x1, [r0, r3]}, @cred={0x18, 0x1, 0x2, r22, r23, r24}, @rights={0x10, 0x1, 0x1, [r0]}, @rights={0x1c, 0x1, 0x1, [r2, r1, r2, r3]}], 0x70, 0x4000}, {&(0x7f0000004f00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005f80)=[{&(0x7f0000004f80)="ff53bf334ef272d48ed89e9d70d1a38222999d893f2e0bc2019ec2381e75b841a5cb2137f2384a070e1e8fb1c0bd399579272cd51f2429f5a1b2fd54f7371fdbf5c30862de202ee11d94e717d4679536c3e23a779d98f022f42ecc65cb8f121f84a9422c45879a2692ef448c56aa8d71179d78d9456ba69e72e9525b2310a38a46a4213e33f3c21af40cece6dc8d9ffb6ddb83dd2d58556458bc3a9811d4e8653812c5a94a03e91ce192538731939a27c2fd86b963069bd5115085fb47330815b0321bed61d180461453dfb88f7c044d0d7c2fce13bedfca08b4af3ce3e01cbfed21cb6a5d0848141fdb1c047b2e78490e201d0d3404d0cf6b24ed39f45f4cfd9dd5683bbbaafaedb971aab76c30474e2407aeeaa75db61dfb77e9b3b724d9d1ab420deca7c74d9bb8a384a81fd0d06adac61c56e3d3fe2fbe0f14c82808dcfa6ca45a71a5cb80a92560c0c8b6e519eaf9c89c56b8a3d76fbb13ce977196238ef42bdd818f8d37d4d6308f69822e245e9b7d31ce65a0103b9c4c00334ce00d3104c3daeeebe2c71eb69022903c3bb89c4b6842a5a40f03bdba152f5e933f33c568bff99c6084e9ceb8915ffa0fc4173c6357fcfce3c5d5d7f4ad1beb24829858a32977cc4537a7087ad78c32233253164799d5914c8a90d49dafc12eff738d8be123e825518c84013c60b9c05ccc395c005e4bddcffec39448f12adba76913299e5b862e2b5338a5f61cba8ef1e733ff012f6170d6c183c7dde9e2ecae41b531ebe6e21e7f504351b0edcfa97e0ab619d013a14a05a50f4deadc924d6ca84412bf869df3382e68e70a10ac3f5ec40e8a998373cf481f33a558c20e9a4b22c4193eb9fcea482b7866475ab13e691418452791b51daf9b4f39739868aedf3a70ca29bcb42406b0a71f592bfdc1f1867587583099fa1215d868d0b3e51ac75c17ad6053ca21c5d3f12152a22d03c62975f7a7a336973551a7ddfc84f62b8a22e39ce6a58442837deb68c638397295b2f4aff61b02bc38ecd61af1cc32b043c7bc9abb69d809850fa485e189959dbc9f6ffa666400167ea7f1dcbd76f9cb944531716ec50796e1b91aa4279c795b6e4290d6262514e934c7284af57b1802c2f9fde3311c1cc3415608981bbca27268b38ec3ad1ab4f6dd5f1b4c065f2ab3899bcaa33a9c7dfe524dba2e2807e00d7be4f15233dd93d2f709fed40cf849a09faac2ac5f01bf2e7a430dec16027a7bca9271e920eca3a348ff4873dd310e686342e6c488347d5de5fd3607dcf741887eafa44a90461397f705df662e6df425c9cd80e22bb2a23fc692bffdc9917c9bffe1461176fdaa83c59d43ad34203a9e9aeab869228524c6246c257e0e8ced7959ae807f191874eae294b888b5c76c8653a3e3f973d109ee9f000a8cab145c6eecfb630702fd0e7d1888cd5f9b10e829ddef64d7ba5f01619b6776a96d1d70088fac8294c96ac2ea5bb6900e5242889dde079a33ff9df25a21dccfa22182ae3b35150f447d07ae694dd22ba547ddeba1e5f63e6fe696400683616057acc01f877fc3f8ca0286794dfc15e2032053e388768f0d90adba0cbf2530aff4f1c7863a87d2a9c4dcc17195f0fd0bead6f9ef28bc80c45ccf030b23f38b50f861adda8d73195cb6d7297f8303f44a21e36f45ad30c2c264d12e3a4cc660edea76daad52ead75819659e82ea5ef93717c0d82bc7bec4fb84ca72e7f3ae3d048a07e55fa3b2b32fdffbd8a3d46173a59816763accb3c979aa3ccd3c7b9b8ab312b3b2885d0cc92b3c290dcb1c037768da40912e24cb04a9c35bcd1ed4500aaa1f01c814af5252e60c7bf1f736b24344722d6448fa2a7348693a4eac4568471f57478bb51e50d3b7914e015a2a46f8f7c16f5333f102f1b0caae56103479f2580c2fdc7ba74155f0a4d4e6adbead743d1ecda58bb4ccb0356690091d5a0617ba09a099af51ca076534b5c2a440864d7aa47009ca493484b6dae0f884b3ecf99627a7796b57db4a43727784fae9820ed757588c6064293dbc96525528d1d0be237328c47cc0922215f64265013256c534fae2c07b4cfdad84b71b24cdfc2e6ce64e1a3a53f65a30ad1b716e1630f2f7b1e2bc154dc2e69977b814793688d1987b829057ffb97c581409f1506434807bf0e27fa8d8512b8cab57efcb4c91aec274326bbc2d2e05111520c00650e37293b7df403b66af990abc09919fb71ba2d8c153ff1bdda2a9abf26182ae398fda21cfd41eb31208c234cc2a6258f0f92a5084a3d5cbc220ec66f9b2c8bdd329bd4651f31d17055897a52dab04d5484925241eab3b3dad1b614f45ffd152f4781197250c4c29378e59653a65d1a71cc61d56f09b271e45ff5f44c934e28f62d285179edd05921b514d1aba2a09b78a7d4be26683187813e0272108be1dcca325e7b3c143c60c4cf350a0b3c3b14e24266205ba26c169fb031fa67160798dbabdfa3a56bd4809630f771e8d7d1f7c9109bb43ef138f97a3c1dc424f4fe194fc397d1cb95ff1d505307c3fbce6382b9c2b956d6667bc2cfac32983a611f571b6ab8be6d9350a9783ecf20196df92a8faff21761ebfc49fdf1962c9eab8e23574188f4871d7ca3ae8916c22562f2ebe2ad41a8d338286a7111ed1ed70f6372d74f370932bc43504f08d24962a557fe7912433676553bb31c758ab7eb1a89cfb0bfb8c6a974b108438d88ea9b8804d7e985dbf30ee6d980147876110f689672bd262be15185fef5b0f48f10f0f788af2c3dbc4dd24ceba803a5ca73ebe8e10b77638f288003329a32ce0905d8899c83a26aa3ca2bc62dc765d17fbb6d46886558fab74dcaa2a2f8cb22f87d5815259fd40a6b79162fe36b3603e59bb91040119651318929b479ff0fcccfe98d9a2a50a65cdf8a08fe2236e9697529136fe4b395df2f0c96848273879f770ad3bc236c36ee5177235f36f5d8ede1da01c074da8d8edf6d259dbd51262c5b2da81ff3118bd45b00acb012fc9f365e9812c477f93f3aa500b6fb32b5ff83cab7d4460c183bf23b5e5c697816232f69e39b6ea5bd0cb03b7ea46a68f22e06063688843485317aed34dbd9667ee27e284810a3a2e870d727e8f050d20aa0a0abc2e3a58e25725fdb342b8ee2bb17bfcaeeac1d8355d1b812216d141e6c0d8d201d4e9c36459009c5c10343b71d6bf8d2fd65c59ebbdb3384162af088b1304b67c361ba610a21bac026578d149748c1174510963e2bbd0c6be566e67915105ae5814e59abc8c97b0f57e16b3c0b2d023ed0757f66e482f4d80bae355ee7062e7380655e74c6f60c0f8aaef29b2223b989ee20eb450f08169206d2f7dfcd26c06fdaa1d3c84deb29430e6e5e87278d33e08022963932d523a616a69bdd734f96fa4a66764731bbe8818b6722ce0252221c0528f3ad1782e4b098f1ad02f054f25f73519499356d0ec7ad6a90b456e3b432a4e206b78bc6ca7f7452588d0507f9305dab039f9585c2700b1128cb432c8dbf82d247286564a9591de07edf21b3e9f93d83f41bfc7814ee888698c73ad198451b37c86bf70548c07f35c44c0a9af4e37e856aad7841a736930cf470ad39b65c773bf82d2e305dac11ac4672c59bc7d2083c99455a69794a4e32429e7ccadacec17a3f65232c48939f6b23f57ec93618175a0203195f26bef3c1cc0cb4c885d9d0c6edb3cdc1bd49da2d51fb66552c26e1f3467b2909738fa826c65315d11c6c28eae1e55e9f2cb27cc2e84d96e44d2d6e1a5cf6df9fa4bdbf04c8d2b6ecc4c01dba5b29ed00eaf5280ff9a64591d92cffc14c5fe405d45bd3e838a2dbde36cc5143c66f26c43c7bfd3b17e1ea734ee1dab4d518436011cb1c2475551c3b5691531222fcded03ac336f653debad6f74593d8de6f54679007a577689502511ddd949c39b128aca39382f2ef9ae540e7cecdaf7c4d9d61e28dac58ac333e78c34cf42238531e5f698026e3df0f214dd579301cca1d9f7e0b91d7a08f019a7566b67e25bfff17127baaa75240aeac09eaf80d6db075052cf21996e322316167ac337ddcf8cdde4ce33cd9e45a8d4d0030594b8b37f7e58881d3a15741e944276c714788316238257568e69e9fdb6360b6adaa8296baaec9ae84a3d7fee37a99231d92ed814179c477b05bf463bfe8e55045256c2f122fe91065942aab1bd9ff2bc74ddb065b67fa97db3ecbc7f5d9ac4e016e250c045a50074ada4bc23f6f1e53cf1470ee17fd77163861b7f1f894b335a0f7c96954b8c761c62a59c45630ecf30c6e8775e5e249183909527a58e9f4a0913f29256f1e277450fe23a7367ea9738ca0c456f80467d166e004d5b14b27b910e807c1cde8d0df74a14fbf222bbf0d584b87352f8248c72982567fb0c5847e944a6241bc673bf0f42140197b80344f062fd5c9a77a4dfd615f6b3f2ccc664b2ab8e87a710f75737649ce64f7c7035ca78533b856384334a38ff7da07851c0974bde0cd9bcba17fb39b393d1c964e3f8827d9e7b9e6f76d4defc7dd6dbcb0b13a77a4e09aa0a0836b82280128786ecf310c132ffce3ed32ea92e626116106260dba94463f54db7a4002052eddd6f61866ec501a5aa37702740dc2995923ac4bc1e97167cdb7a224c53d3a9ab8d55983435b42f34665a3bc89c6140019e80a19e2cdbae759ebc6a4ec213205563710c0f1d4f5985c335a93718c061581b9bd9b4e4185ecaa682622fd8b5559e1ec91c90c331b0490ae23a4067af51e6a0912f4912129e6999722407c90eaeb8201d362033074237a691acf83e700db0ecc78030cb59c2367196cdb99b9fb9e6d959fa34f4ce13b88c079059a6a18dd86459c8c9cb44f5157c433d50c440ef9648cebc277aa6ddfd4ae374c1705ebe7d91681364ce5d85eecd6d900f43101f93ed568e43f076062cee783dd6d5fdca54e28b8b80acc341b158565b0d431d4df6a38dd777d85fc067e54da4460de91d0924e8da3c2e9830ab924520bb65c0cb613f246c9eebf6ab2e1922f5270c9a0ea73ae359eb8bf8a65232f761950b4713fda1903c167cdd4064f5483a1e3b7e927ef0285123f26d109e2ac3a957dbd5e4574a01d8cafcf2f9dda117e5e94b58d4deea52242b0c59c6fcd580fe9de603f5b4f46fc1f6328a70fc8d2af5b49df1b43c586a274912c65e33191dd6bcdb79e4759b83ff4a3d11c9427cefac3bbae8face9955ea09b570ebf2469afedb6ea194af94542f4d823f97ee3909b6d5752c3bfbef90b800ce9fc2a47109f3b7d672f67681d65975612bf8fc93ac43a505f602ec5a520939d1781d172445b0a273bc4d46c5185504d4e749a4358ba0930cc1bec54764252255e5387c22fc48def9a1bbe76d07e15cb9cd13ce1b081afeb7e296a72c4b3813183a0056382159ad4a8cac962e26d66aacbdf7749006250ac36da82a0d03f118bfc14036b2acec3a3e8e6b70ed51aec0e8f313bad69bebea34056a77920ebef662136fd558c46439bdf5046234828659e03c8e2c5610489bfe26049335960eeed1e0000fb9f879b7c8bd4717ad647a44986b4b2168c355ef7d3cd100117438e3639bdb70c5df1f85f10f861997b5e5ad3a65baf5d481db658bc0883441c39e425f20a830605e117fe424e45b1925b0eb0810d668351e023227e422e23d010724cf236169936166de45bfdddc455487fe08e531aa1eb49f56440095b2a08de22149cafcc5e873dc65d4fc580694048b9fc932e2826097beb83cb71e4c4f806bafba3fbce13cab175d0ed77684febb8e298a1f66eecf76f82fab14e18f21baa6832eee6e4f", 0x1000}], 0x1, &(0x7f0000006000), 0x0, 0x4000004}, {&(0x7f0000006040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000071c0)=[{&(0x7f00000060c0)="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", 0x1000}, {&(0x7f00000070c0)="87ed59e828bdd9fed55c914712b3959c931045940dab0c604efcb088d3e559d1f8590f33498c60eaa45c9db41b1679d592de754ab67cbdd26cfb1fda81b857b1b1fabf91644e655de2222c0bffc22c03cf69bff5fb92bdc0a09ea5093fa8bee7f52e33da", 0x64}, {&(0x7f0000007140)="b648a4547eb9c1e1f11441d8b9b08d26ce9ed8976ca08e840f4ad042bc33983e676b471f5c02c371a9b346a030bd", 0x2e}, {&(0x7f0000007180)="3d6705c45749", 0x6}], 0x4, &(0x7f0000007200)=[@rights={0x14, 0x1, 0x1, [r0, r0]}], 0x14, 0x85}, {&(0x7f0000007240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007340)=[{&(0x7f00000072c0)="2c5b353de3d38e5a3404ba3195a78e933b301d0f2578caf29326c8bac08ce576a61c7cf8cb52c67f8070914e7f0104110e65ecefa173ba9eb890e6cda72355d8640915a1a40cf6f0e0b072d91b5b", 0x4e}], 0x1, 0x0, 0x0, 0x4}], 0xa, 0x1) [ 620.559650] binder: 24509:24517 Acquire 1 refcount change on invalid ref 0 ret -22 [ 620.568516] binder: 24513:24515 tried to acquire reference to desc 0, got 1 instead [ 620.570760] binder: 24509:24517 Release 1 refcount change on invalid ref 789378011 ret -22 [ 620.597025] binder: 24513 invalid dec weak, ref 2089 desc 0 s 1 w 0 16:49:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) write$P9_RLERROR(r2, &(0x7f0000000040)={0x16, 0x7, 0x1, {0xd, '/dev/binder#\x00'}}, 0x16) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 620.699769] binder: 24528 invalid dec weak, ref 2095 desc 0 s 1 w 0 [ 620.729531] binder: 24528:24529 tried to acquire reference to desc 0, got 1 instead [ 620.737974] binder: BINDER_SET_CONTEXT_MGR already set [ 620.753256] binder: 24528 invalid dec weak, ref 2095 desc 0 s 1 w 0 [ 620.761859] binder: 24530:24531 ioctl 40046207 0 returned -16 [ 620.761961] binder: 24530:24533 Acquire 1 refcount change on invalid ref 0 ret -22 16:49:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x3) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x200000003, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c23e554067ba4a5008be8e68fe37aadf74294ccd7441e91d348099e15e27bef03082837621e2fbec3fd502c694bc9974e884ae121e7205fab5bee40edd90fb86b7abba36ed909bd19abc89ced58d55e562aab009e78565a75c53ade9300000000000000000000000000000000"], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) [ 620.806792] binder: 24538:24539 Release 1 refcount change on invalid ref 0 ret -22 [ 620.847467] binder: 24542:24543 unknown command 1424302892 [ 620.862059] binder: 24542:24543 ioctl c0306201 20000080 returned -22 [ 620.870760] binder: 24542:24543 DecRefs 0 refcount change on invalid ref 0 ret -22 16:49:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60, 0xfffffffffffffff5, 0x1, {{0x4, 0x6, 0x0, 0x8, 0x1f, 0x44000, 0x1, 0x4}}}, 0x60) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563021a683fb85c59c60000"], 0x0, 0x0, 0x0}) close(r0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r2, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000007720a635b5cf06e63ce21112fa9abda6197cfbad22cf8145c693dfd339d9e4e0688f4ec237674bca3e5982f948b992f4578b397488a0ff085b2025c175f5e8a5c6d44125643bb312c382943b54ec889a380c8196855ebc8877ab892ff51f77f9dc63a6f56dad9ba5bbe580c2007edf51c8f56c192711e76f38f66a05b68f910c6d9a4edc77681506a82c9585232211f3414cfdd9c447c991481f9544b2ddbcf02360f6771339e363c5fd3880ca3aee4a6d6125615b06df59a1f5afb8a6e9d7664db6fb6516357701f992febe4cc32ebab0fa76d23aa7ffdbc6cdc76a93f479a53af728d462b927f9e16477ee03"], 0x0, 0xfdfdffff, 0x0}) 16:49:39 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xfe, &(0x7f0000000000)=[{}]}, 0x10) [ 620.894091] binder: 24542:24545 unknown command 1424302892 16:49:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x82f, 0x521002) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000040)={0x9, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000200)={0x0, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) [ 620.948942] binder: 24542:24545 ioctl c0306201 20000080 returned -22 [ 620.958612] binder: 24542:24546 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 620.968105] binder: 24550:24552 unknown command 436364037 [ 620.984732] binder: 24550:24552 ioctl c0306201 20000080 returned -22 [ 621.002915] binder: 24550:24555 unknown command 436364037 [ 621.022650] binder: BINDER_SET_CONTEXT_MGR already set [ 621.043447] binder: 24550:24555 ioctl c0306201 20000080 returned -22 [ 621.054786] binder: 24557:24558 ioctl 40046207 0 returned -16 16:49:39 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x3f00000000000000) 16:49:39 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xef, &(0x7f0000000000)=[{}]}, 0x10) 16:49:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) prctl$PR_SET_SECUREBITS(0x1c, 0x8ae93c143c909a38) 16:49:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630403"], 0x0, 0xfdfdffff, 0x0}) 16:49:39 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x102, &(0x7f0000000000)=[{}]}, 0x10) 16:49:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x95, 0xffff}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x8}, &(0x7f0000000100)=0x8) [ 621.430391] binder: 24568:24569 unknown command 50619143 [ 621.467317] binder: 24568:24569 ioctl c0306201 200003c0 returned -22 [ 621.492404] binder: 24568:24569 tried to acquire reference to desc 0, got 1 instead [ 621.529886] binder: 24568:24583 unknown command 50619143 16:49:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r3 = socket$inet6(0xa, 0x6, 0x0) removexattr(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)=@known='trusted.overlay.redirect\x00') connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400000, 0x0) write$P9_ROPEN(r4, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x4, 0x4, 0x4}, 0x5}}, 0x18) r5 = accept4(r2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f00000003c0)) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x100000000001d, 0x4) socketpair(0x100001, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x4150, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$unix(r6, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) dup2(r3, r2) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x0, 0xfdfdffff, 0x0}) [ 621.560973] binder: 24568:24583 ioctl c0306201 200003c0 returned -22 16:49:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) 16:49:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:39 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x103, &(0x7f0000000000)=[{}]}, 0x10) [ 621.722400] binder: BINDER_SET_CONTEXT_MGR already set [ 621.744912] binder: 24591:24593 ioctl 40046207 0 returned -16 [ 621.800114] binder: BINDER_SET_CONTEXT_MGR already set 16:49:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630440"], 0x1000000, 0xfdfdffff, 0x0}) [ 621.824628] binder: 24595:24598 ioctl 40046207 0 returned -16 16:49:40 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf0, &(0x7f0000000000)=[{}]}, 0x10) [ 621.876957] binder: 24589:24599 Acquire 1 refcount change on invalid ref 0 ret -22 [ 621.907646] binder: 24606:24608 Release 1 refcount change on invalid ref 0 ret -22 [ 621.964924] binder: 24589:24609 Release 1 refcount change on invalid ref 0 ret -22 [ 622.045705] ================================================================== [ 622.053346] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100 [ 622.060024] Read of size 8 at addr ffff88808fe23640 by task syz-fuzzer/7758 [ 622.067118] [ 622.067134] CPU: 1 PID: 7758 Comm: syz-fuzzer Not tainted 5.0.0+ #12 [ 622.067141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.067146] Call Trace: [ 622.067153] [ 622.067170] dump_stack+0x172/0x1f0 [ 622.067185] ? ccid_hc_tx_delete+0xde/0x100 [ 622.097255] print_address_description.cold+0x7c/0x20d [ 622.102537] ? ccid_hc_tx_delete+0xde/0x100 [ 622.106863] ? ccid_hc_tx_delete+0xde/0x100 [ 622.111206] kasan_report.cold+0x1b/0x40 [ 622.115272] ? ccid_hc_tx_delete+0xde/0x100 [ 622.119604] __asan_report_load8_noabort+0x14/0x20 [ 622.124537] ccid_hc_tx_delete+0xde/0x100 [ 622.128739] dccp_sk_destruct+0x3f/0x90 [ 622.132725] ? dccp_init_sock+0x3f0/0x3f0 [ 622.136921] __sk_destruct+0x55/0x6d0 [ 622.140732] ? proto_unregister+0x4e0/0x4e0 [ 622.145065] rcu_core+0x928/0x1390 [ 622.148620] ? rcu_check_gp_start_stall+0x250/0x250 [ 622.153657] __do_softirq+0x266/0x95a [ 622.157501] ? sched_clock_cpu+0x1b/0x1b0 [ 622.161699] irq_exit+0x180/0x1d0 [ 622.165184] smp_apic_timer_interrupt+0x14a/0x570 [ 622.170038] apic_timer_interrupt+0xf/0x20 [ 622.174273] [ 622.176517] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0 [ 622.182230] Code: 48 c7 c0 b0 91 92 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d 22 1e 89 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 dc 3e 44 fa 65 8b 05 e5 79 f8 78 [ 622.201126] RSP: 0018:ffff8880924f7420 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 622.201140] RAX: 1ffffffff1125236 RBX: 0000000000000282 RCX: 0000000000000000 [ 622.201147] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: 0000000000000282 [ 622.201155] RBP: ffff8880924f7430 R08: ffff888091ca6380 R09: 0000000000000000 [ 622.201162] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae925d00 [ 622.201171] R13: ffff8880924f7570 R14: 0000000000025d00 R15: ffff8880ae925d80 [ 622.201273] hrtimer_start_range_ns+0x66b/0xc80 [ 622.201315] ? __debug_object_init+0x190/0xc30 [ 622.216266] ? __hrtimer_get_remaining+0x1a0/0x1a0 [ 622.216282] ? memset+0x32/0x40 [ 622.216297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.216311] ? __hrtimer_init+0xe1/0x250 [ 622.216329] schedule_hrtimeout_range_clock+0x1a0/0x380 [ 622.216345] ? hrtimer_nanosleep_restart+0x170/0x170 [ 622.277713] ? clock_was_set_work+0x30/0x30 [ 622.277732] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 16:49:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)=0x4000000000000000) 16:49:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000140)={0xfffffffffffffc00, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x2f, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e22, 0x2, 'none\x00', 0x2, 0x8, 0x75}, 0x2c) r3 = dup(r2) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0x81, &(0x7f00000000c0)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) 16:49:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x38, 0x480000) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) getgroups(0x7, &(0x7f0000000200)=[0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0x0]) fchown(r1, r3, r4) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06630436"], 0x0, 0xfdfdffff, 0x0}) dup(r1) 16:49:40 executing program 1: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0xf1, &(0x7f0000000000)=[{}]}, 0x10) 16:49:40 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x104, &(0x7f0000000000)=[{}]}, 0x10) [ 622.277745] ? set_normalized_timespec64+0x6a/0xc0 [ 622.277765] schedule_hrtimeout_range+0x2b/0x40 [ 622.277839] poll_schedule_timeout.constprop.0+0x11a/0x200 [ 622.287193] ? pollwake+0x210/0x210 [ 622.287209] ? kasan_check_read+0x11/0x20 [ 622.287226] do_select+0x12bf/0x16d0 [ 622.287252] ? find_held_lock+0x35/0x130 [ 622.323463] ? __lock_acquire+0x548/0x3fb0 [ 622.327703] ? __lock_acquire+0x548/0x3fb0 [ 622.331946] ? select_estimate_accuracy+0x330/0x330 [ 622.336979] ? find_held_lock+0x35/0x130 [ 622.341058] ? __free_object+0xe2/0x1f0 [ 622.345041] ? kasan_check_write+0x14/0x20 [ 622.349287] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 622.354400] ? __free_object+0xe2/0x1f0 [ 622.358381] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 622.363485] ? lockdep_hardirqs_on+0x418/0x5d0 [ 622.368106] ? trace_hardirqs_on+0x67/0x230 [ 622.372459] ? kasan_check_read+0x11/0x20 [ 622.376834] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 622.381953] ? __lock_acquire+0x548/0x3fb0 [ 622.386208] ? core_sys_select+0x212/0x870 [ 622.390450] ? find_held_lock+0x35/0x130 [ 622.394523] ? core_sys_select+0x212/0x870 [ 622.398772] ? lock_downgrade+0x880/0x880 [ 622.402932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.408523] core_sys_select+0x564/0x870 [ 622.412595] ? core_sys_select+0x564/0x870 [ 622.416844] ? do_compat_pselect+0x270/0x270 [ 622.421276] ? find_held_lock+0x35/0x130 [ 622.425344] ? poll_select_set_timeout+0xd4/0x130 [ 622.430199] ? ktime_get_ts64+0x115/0x3f0 [ 622.434358] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 622.439380] ? timespec64_add_safe+0x189/0x210 [ 622.443977] ? nsec_to_clock_t+0x30/0x30 [ 622.448051] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 622.453611] __x64_sys_pselect6+0x3b0/0x480 [ 622.457949] ? __ia32_sys_select+0x150/0x150 [ 622.462371] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 622.467132] ? do_syscall_64+0x26/0x610 [ 622.471117] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.476482] ? do_syscall_64+0x26/0x610 [ 622.480464] ? lockdep_hardirqs_on+0x418/0x5d0 [ 622.485056] ? trace_hardirqs_on+0x67/0x230 [ 622.489387] do_syscall_64+0x103/0x610 [ 622.493287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.498482] RIP: 0033:0x45d911 [ 622.501689] Code: 0f 00 f7 f1 48 89 04 24 b8 e8 03 00 00 f7 e2 48 89 44 24 08 31 ff 31 f6 31 d2 45 31 d2 49 89 e0 45 31 c9 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc b8 ba 00 00 00 0f 05 [ 622.521095] RSP: 002b:000000c420035f18 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 622.521409] binder: 24633 invalid dec weak, ref 2124 desc 0 s 1 w 0 [ 622.528806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045d911 16:49:40 executing program 5: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x105, &(0x7f0000000000)=[{}]}, 0x10) [ 622.528814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.528822] RBP: 000000c420035f28 R08: 000000c420035f18 R09: 0000000000000000 [ 622.528830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000430120 [ 622.528838] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 622.528858] [ 622.528875] Allocated by task 24590: [ 622.528892] save_stack+0x45/0xd0 [ 622.528905] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 622.528917] kasan_slab_alloc+0xf/0x20 [ 622.528929] kmem_cache_alloc+0x11a/0x6f0 [ 622.528941] ccid_new+0x256/0x3f0 [ 622.528954] dccp_hdlr_ccid+0x27/0x150 [ 622.566523] binder: 24633:24634 tried to acquire reference to desc 0, got 1 instead [ 622.571655] __dccp_feat_activate+0x17a/0x270 [ 622.571674] dccp_feat_activate_values+0x33a/0x766 [ 622.571687] dccp_rcv_state_process+0x116f/0x1935 [ 622.571698] dccp_v6_do_rcv+0x269/0xbf0 [ 622.571709] __release_sock+0x12e/0x3a0 [ 622.571718] release_sock+0x59/0x1c0 [ 622.571733] __inet_stream_connect+0x59f/0xea0 [ 622.571744] inet_stream_connect+0x58/0xa0 [ 622.571759] __sys_connect+0x266/0x330 [ 622.580518] __ia32_sys_connect+0x72/0xb0 [ 622.580533] do_fast_syscall_32+0x281/0xc98 [ 622.580548] entry_SYSENTER_compat+0x70/0x7f [ 622.580555] [ 622.589348] Freed by task 24610: [ 622.596893] binder: 24633 invalid dec weak, ref 2124 desc 0 s 1 w 0 [ 622.596931] save_stack+0x45/0xd0 [ 622.674708] __kasan_slab_free+0x102/0x150 [ 622.678939] kasan_slab_free+0xe/0x10 [ 622.682736] kmem_cache_free+0x86/0x260 [ 622.686706] ccid_hc_tx_delete+0xc1/0x100 [ 622.690844] dccp_hdlr_ccid+0x7d/0x150 [ 622.694751] __dccp_feat_activate+0x17a/0x270 [ 622.699242] dccp_feat_activate_values+0x33a/0x766 [ 622.704164] dccp_create_openreq_child+0x40c/0x570 [ 622.709088] dccp_v6_request_recv_sock+0x214/0x1da0 [ 622.714112] dccp_check_req+0x35c/0x6f0 [ 622.718077] dccp_v6_rcv+0x6d7/0x191e [ 622.721880] ip6_protocol_deliver_rcu+0x303/0x16c0 [ 622.726802] ip6_input_finish+0x84/0x170 [ 622.730853] ip6_input+0xe4/0x3f0 [ 622.734308] ip6_rcv_finish+0x1e7/0x320 [ 622.738276] ipv6_rcv+0x10e/0x420 [ 622.741744] __netif_receive_skb_one_core+0x115/0x1a0 [ 622.746927] __netif_receive_skb+0x2c/0x1c0 [ 622.751243] process_backlog+0x206/0x750 [ 622.755294] net_rx_action+0x4fa/0x1070 [ 622.759260] __do_softirq+0x266/0x95a [ 622.763042] [ 622.764670] The buggy address belongs to the object at ffff88808fe23640 [ 622.764670] which belongs to the cache ccid2_hc_tx_sock of size 1240 [ 622.777837] The buggy address is located 0 bytes inside of [ 622.777837] 1240-byte region [ffff88808fe23640, ffff88808fe23b18) [ 622.789614] The buggy address belongs to the page: [ 622.794534] page:ffffea00023f8880 count:1 mapcount:0 mapping:ffff88809afecd80 index:0x0 compound_mapcount: 0 [ 622.804493] flags: 0x1fffc0000010200(slab|head) [ 622.809160] raw: 01fffc0000010200 ffff88809afe5348 ffffea0001610b88 ffff88809afecd80 [ 622.817036] raw: 0000000000000000 ffff88808fe22040 0000000100000005 0000000000000000 [ 622.824900] page dumped because: kasan: bad access detected [ 622.830593] [ 622.832208] Memory state around the buggy address: [ 622.837130] ffff88808fe23500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 622.844479] ffff88808fe23580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 622.851827] >ffff88808fe23600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 622.859173] ^ [ 622.864612] ffff88808fe23680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 622.871965] ffff88808fe23700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 622.879312] ================================================================== [ 622.886665] Disabling lock debugging due to kernel taint [ 622.892203] Kernel panic - not syncing: panic_on_warn set ... [ 622.893420] kobject: 'loop2' (00000000fad35ef6): kobject_uevent_env [ 622.898090] CPU: 1 PID: 7758 Comm: syz-fuzzer Tainted: G B 5.0.0+ #12 [ 622.898096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.898100] Call Trace: [ 622.898105] [ 622.898120] dump_stack+0x172/0x1f0 [ 622.898191] panic+0x2cb/0x65c [ 622.898204] ? __warn_printk+0xf3/0xf3 [ 622.898215] ? retint_kernel+0x2d/0x2d [ 622.898230] ? trace_hardirqs_on+0x5e/0x230 16:49:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup(r1) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000000c0)={0x2, {{0x2, 0x4e24, @broadcast}}}, 0x84) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x3ac, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="07630440"], 0x0, 0xfdfdffff, 0x0}) [ 622.898242] ? ccid_hc_tx_delete+0xde/0x100 [ 622.898255] end_report+0x47/0x4f [ 622.898265] ? ccid_hc_tx_delete+0xde/0x100 [ 622.898276] kasan_report.cold+0xe/0x40 [ 622.898288] ? ccid_hc_tx_delete+0xde/0x100 [ 622.898299] __asan_report_load8_noabort+0x14/0x20 [ 622.898308] ccid_hc_tx_delete+0xde/0x100 [ 622.898320] dccp_sk_destruct+0x3f/0x90 [ 622.898331] ? dccp_init_sock+0x3f0/0x3f0 [ 622.898344] __sk_destruct+0x55/0x6d0 [ 622.898357] ? proto_unregister+0x4e0/0x4e0 [ 622.898370] rcu_core+0x928/0x1390 [ 622.898387] ? rcu_check_gp_start_stall+0x250/0x250 [ 622.898402] __do_softirq+0x266/0x95a [ 622.898414] ? sched_clock_cpu+0x1b/0x1b0 [ 622.898429] irq_exit+0x180/0x1d0 [ 622.898440] smp_apic_timer_interrupt+0x14a/0x570 [ 622.898451] apic_timer_interrupt+0xf/0x20 [ 622.898456] [ 622.898469] RIP: 0010:_raw_spin_unlock_irqrestore+0x95/0xe0 [ 622.898481] Code: 48 c7 c0 b0 91 92 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 39 48 83 3d 22 1e 89 01 00 74 24 48 89 df 57 9d <0f> 1f 44 00 00 bf 01 00 00 00 e8 dc 3e 44 fa 65 8b 05 e5 79 f8 78 [ 622.898487] RSP: 0018:ffff8880924f7420 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 622.898499] RAX: 1ffffffff1125236 RBX: 0000000000000282 RCX: 0000000000000000 [ 622.898506] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: 0000000000000282 [ 622.898513] RBP: ffff8880924f7430 R08: ffff888091ca6380 R09: 0000000000000000 [ 622.898520] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae925d00 [ 622.898527] R13: ffff8880924f7570 R14: 0000000000025d00 R15: ffff8880ae925d80 [ 622.898550] hrtimer_start_range_ns+0x66b/0xc80 [ 622.898563] ? __debug_object_init+0x190/0xc30 [ 622.898580] ? __hrtimer_get_remaining+0x1a0/0x1a0 [ 622.898592] ? memset+0x32/0x40 [ 622.898604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.898615] ? __hrtimer_init+0xe1/0x250 [ 622.898629] schedule_hrtimeout_range_clock+0x1a0/0x380 [ 622.898644] ? hrtimer_nanosleep_restart+0x170/0x170 [ 622.920264] kobject: 'loop2' (00000000fad35ef6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 622.922267] ? clock_was_set_work+0x30/0x30 [ 622.922283] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 623.007255] binder: 24644 invalid dec weak, ref 2128 desc 0 s 1 w 0 [ 623.007833] ? set_normalized_timespec64+0x6a/0xc0 [ 623.007851] schedule_hrtimeout_range+0x2b/0x40 [ 623.007876] poll_schedule_timeout.constprop.0+0x11a/0x200 [ 623.007892] ? pollwake+0x210/0x210 [ 623.012718] binder: 24644:24645 unknown command 0 [ 623.016173] ? kasan_check_read+0x11/0x20 [ 623.016188] do_select+0x12bf/0x16d0 [ 623.016205] ? find_held_lock+0x35/0x130 [ 623.016220] ? __lock_acquire+0x548/0x3fb0 [ 623.016232] ? __lock_acquire+0x548/0x3fb0 [ 623.016245] ? select_estimate_accuracy+0x330/0x330 [ 623.016259] ? find_held_lock+0x35/0x130 [ 623.024811] binder: 24644:24645 ioctl c0306201 20000000 returned -22 [ 623.028401] ? __free_object+0xe2/0x1f0 [ 623.028417] ? kasan_check_write+0x14/0x20 [ 623.028433] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 623.028444] ? __free_object+0xe2/0x1f0 [ 623.028460] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 623.235909] ? lockdep_hardirqs_on+0x418/0x5d0 [ 623.240486] ? trace_hardirqs_on+0x67/0x230 [ 623.244803] ? kasan_check_read+0x11/0x20 [ 623.248948] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 623.254043] ? __lock_acquire+0x548/0x3fb0 [ 623.258274] ? core_sys_select+0x212/0x870 [ 623.262500] ? find_held_lock+0x35/0x130 [ 623.266550] ? core_sys_select+0x212/0x870 [ 623.270777] ? lock_downgrade+0x880/0x880 [ 623.274915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.280447] core_sys_select+0x564/0x870 [ 623.284499] ? core_sys_select+0x564/0x870 [ 623.288730] ? do_compat_pselect+0x270/0x270 [ 623.293128] ? find_held_lock+0x35/0x130 [ 623.297183] ? poll_select_set_timeout+0xd4/0x130 [ 623.302029] ? ktime_get_ts64+0x115/0x3f0 [ 623.306171] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 623.311177] ? timespec64_add_safe+0x189/0x210 [ 623.315752] ? nsec_to_clock_t+0x30/0x30 [ 623.319806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 623.325338] __x64_sys_pselect6+0x3b0/0x480 [ 623.329653] ? __ia32_sys_select+0x150/0x150 [ 623.334076] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 623.339024] ? do_syscall_64+0x26/0x610 [ 623.342991] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.348346] ? do_syscall_64+0x26/0x610 [ 623.352310] ? lockdep_hardirqs_on+0x418/0x5d0 [ 623.356890] ? trace_hardirqs_on+0x67/0x230 [ 623.361206] do_syscall_64+0x103/0x610 [ 623.365090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.370267] RIP: 0033:0x45d911 [ 623.373453] Code: 0f 00 f7 f1 48 89 04 24 b8 e8 03 00 00 f7 e2 48 89 44 24 08 31 ff 31 f6 31 d2 45 31 d2 49 89 e0 45 31 c9 b8 0e 01 00 00 0f 05 <48> 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc b8 ba 00 00 00 0f 05 [ 623.392356] RSP: 002b:000000c420035f18 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 623.403189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045d911 [ 623.410447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.417708] RBP: 000000c420035f28 R08: 000000c420035f18 R09: 0000000000000000 [ 623.424967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000430120 [ 623.432229] R13: 00000000000000f1 R14: 0000000000000011 R15: 0000000000000000 [ 623.440327] Kernel Offset: disabled [ 623.443943] Rebooting in 86400 seconds..