x884, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@generic="3ed4597e8d009a98a55058cdd5f8f82747ab09dea8e3a5e8bc5ac10f2a5ebc2819ad9a799dea667aaff92da2242156ede3b73db848a20dde2a8aba4c7a4ee06fd02699ce4c3e739467a52444d94b074e708e6ad2", @nested={0x324, 0x66, [@generic="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", @generic="a68d264e0e4d8ebea53d1c88359e17bc91c2e41cd00758d6b89d233b082e8ba0aa263221c4d98d8fe8d0dbe87eb138416fd596e413862e86b9c88deafd118fe823345215fb2621ebf6d33064f8b503c7f9634be8c30975eb37b52cf444e90dd7b01f6630c8d6bf97079c3ed499a12b66a426297250e737b46664329e3967a5b1972b6b6a28fb48b801aeb47e1183561acfc3744d1b2d6abf47e7e26e36cabd0721de036324b1b86e5c6f453bd1e935dba1eede000f7d2818bb40ba969fd4f3fb28", @typed={0x8, 0x60, @u32=0x7ff}, @typed={0x8, 0x8b, @pid=r6}, @typed={0xc, 0x38, @u64=0x5}, @generic="8a7ef6745babf9f41aa68984e05d90fa46276c99a382972096b762f6d1645bb99fb46dfa182b37a14a26d8e2f7ae411a4debfeca6b80f6c01e18d23435d1b0c2001315d80291d632f6af057239fdb3905045660bad547ac52c5cf590225569332b82c3a466f896f3dc628999ab0ca69ff46bc1e897b7fddef142f807c8", @generic="3fa4a1f0efd853c7a418e41659d87630d3f5011f73a2e15875e22396637b8b40f71795f0b3066610bb1045d1750d3526e9fdf75ce8dc7338370fb51fc592a6c86f6013b09820717ffa072bc5213b9f9219047982eea29f255a4b62541103c852cb83801302623654b33f65085314e549a94b16ce9e00b25939", @generic="01f54277bf9954986f4175f63b982b2734c51c736b61366c6abc344aca70d135ca54bd9e165b72872f2f7b922927da2df3f85b661ea75e20c6c49ae9", @typed={0x14, 0x8c, @ipv6=@mcast2}]}, @nested={0xc, 0x79, [@typed={0x8, 0x13, @pid=r7}]}, @nested={0x374, 0x49, [@generic="d2d58b15e3fcf75a79911033259ed40f659728b1679d6983113cc9406d709b022c4a2693698254ab60687a7e7fc123a28d96954f9a474cc7b709874dfa5baae55fe034264b9fc0920d13bb119ffd39412009fad43d079972d1c101d1d41428642b549e2d9d42c62f9f28ea7030280ebecfa1cdf087e0c5bb8b5561baa2090357f985", @generic="9af3bd36ac7c5bba63e4093251e95e6ee4a8bef66644395e47993ba8b3fcf90817207a22be0550dd9de53b776a155c10660a516c70b395827774046010a529c57c516314c47b26b5d14b5c67d6bfd81bd0297706d9c1b0abcea37485842e52ce1fc3118a0e280a99b560a9cdd4f6c647f7a850f51f75067c0a62470f89f7cb636897ae2bae33ecabede750e5c9a7ef709d9babc874aa3c6ac7e8fbe8478ed6f282eb5582dca749362d8eb3d46180f8432b8268c1396b0c54b1b7d2a8ffd092022a98", @typed={0xe0, 0x76, @binary="f0028a907fca4356b27ab4a793da9bcabab4077adcfb0434b958b9cfb3056b5c331c765b16826ad19018c2c3f7cd26a2e5faa567b8b3bbbdabc8039bfb7ee67b90e8468502920b52266082c2ca1ff54e03c6f79495cea6b6524f20ac967fa9f0c7798fa0d186808ed25726c25d98ed673c8b50fca3800fcaef5f5634a7d2c067b521a9f11848d5e428c6dd5d0a848bc26f2ad4bd6479748dd478c263040820a6c185249446de5d66237d69808ff0f8d4f409bce2ba630a876289313ac6d4d21845534c88017ef321b3dd62683e170e2a13bc9f4bd7bc4309e83a"}, @generic="3c2a34e8b2c4ae2bcd549e3f3e446186b8200dfdd8f917152b2c821cbc8154f537bcea16d23de489e9ad2098d7832c61425add6605e68787d944d566e59f527ca33f33f26b1ba5e3600d40fdfac5296bb532b683", @generic="b0c2e3d34b0e9783e79a5abd383595edb37f6bc545f8c25f46e1dec6b0b734e54695a01f0e38ff7ffb0b3ffe49d703fe2e08a067b7242434d5faaafe8ff416d2660126a97942874ed01b678e352d1231c15f0c642ca9026037ffcc4532afe444e5d57e81608480414113b6dcabce99b866236fdbd10dd60afd40b0d3a3bb8e3bb5c1001b6c735b0766cb6762e9501923ed0bcf7a3bf80ca9afcb35e3be6e19c9da6593b79cd99233b49b7fe5e9ebd86f744ec21ccb99e63d7bc8c2ae633a80e3723d5862c749d7f9c12f85f503c420f1c066214bf723388bb63c4645e2e135a57b38155b5385837113b22823845676842233a2b87fa34f66"]}, @generic="86c1c95e9d9039e2e9e84731f3b81e8993367b0ab17a18841c3e5862483bba42598ecb38c08645ae2e7b21c182e74dbbcfc93b47b3af8aeb5299c2e0935a97d6fab25052e0fa333c59bf70f4d73a4056de1a05502d54d1d2b6c23c067e1bf7be4d88db94cbe47d1cb72c3044fdde1d7b5c2e7835e6d6f128a5e1e3464b603662b9a3a2632f870cd9c22bf2ba", @generic="30774c325b5fc2364fd3739235b9a05333a4ed3a4dbda3fcd6beda912cb37c6f33ea04675f3211af4abb7d7a369db73f5dee10bda93ce9e9dc97958efcea459b6f833487cfc7c2cfa37be031ca67eab9047affc0a7da54caed84d5285eff6089558c992e6a37246f59c938b6eec18922dc3be024a24d40653d8af3ee7aa4a365ac75388678896be5d721272ca8b7acd92c876c309320dda69aa0d8c0ac587ff7a4592bcbafc1a9", @generic="05ff4e22c5412a22d5b0c2cf8df360523739155c3699cac966cef5364007743a54859a5f8c6cf6d9a4a0fd00f037a51ec459c0ed1976b5f6831ec8484a504261b0ef8f8bdebde4"]}, 0x884}, {&(0x7f0000003640)={0x18, 0x10, 0xf28, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x13, @u32=0x6}]}, 0x18}], 0x5, &(0x7f0000003840)=[@cred={0x18, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}], 0x40, 0x20048051}, 0x40000) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r11, 0xc0485510, &(0x7f0000000140)={0x6, 0x1, 0x7ff, 0x2, &(0x7f0000000100)=[{}]}) ioctl$UI_GET_VERSION(r11, 0x8004552d, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4004240b, &(0x7f0000000200)={0x0, 0x70, 0x2, 0x1f, 0xfffffffffffffffe, 0x4, 0x0, 0x4, 0x40, 0x5, 0xfffffffffffffffb, 0x10001, 0x4, 0x1, 0x3, 0x200, 0x10000, 0x100400000, 0x1, 0x80000000, 0x1f, 0x6, 0x1, 0x53e0, 0x5, 0x941, 0x7f, 0x800, 0x0, 0x2, 0x8, 0xfff, 0x2b, 0x6, 0x6, 0x1, 0x7, 0x3, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x810, 0x8, 0x7, 0x6, 0x4, 0x3f, 0x1}) 11:15:19 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ftruncate(r0, 0x20) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x8, 0x4) r1 = userfaultfd(0x80800) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc004240a, &(0x7f0000000080)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x2, 0x6, 0xfffffffffffffffc}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0xc183b3346fea6627, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r2}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="12edbd45ffb00c89a0702a1e5955cb732781fbf7d90ff911f597abd59df787cc48ccd76d4b69007f17eb51e61f664aa1304594512030c03d4ab6a3390d5c55051b4fb03fb00595e34d52b9bde2352a4fff", 0x51) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r3, 0x4) getsockname$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x35, @local, 0x8}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x1}], 0x38) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000480)={0x4d3f927c, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) write$P9_RGETATTR(r0, &(0x7f0000000640)={0xa0, 0x19, 0x2, {0x1001, {0x50, 0x0, 0x4}, 0x80, r6, r7, 0x0, 0x6, 0xe8e, 0x100000000, 0x940, 0x3, 0x7, 0x9, 0xdea, 0x3, 0x20, 0x6, 0x4, 0xfb, 0xae}}, 0xa0) symlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') ioctl$RTC_WIE_OFF(r0, 0x7010) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000780)={0x0, 0x6}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000800)={r8, 0x7}, &(0x7f0000000840)=0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000008c0)={&(0x7f0000000880)='./file0/../file0\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r0, 0x28, &(0x7f0000000900)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={r9, 0x3, 0x18}, 0xc) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000009c0)=0x6000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000a00)={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x1, 0x3, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, 0x1c) 11:15:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYRESHEX], 0x1}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x400000) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000140)={{0x105000, 0x0, 0xa, 0xfff, 0x2, 0xd0b, 0xacf2, 0x5, 0x1cc8, 0x100, 0x1ff, 0xa6aa}, {0x0, 0x1, 0xf, 0x8, 0x1000, 0x1ff, 0x1, 0x35, 0x13, 0x1, 0x2, 0x7}, {0xd000, 0x1000, 0xb, 0x100, 0x7f, 0x5cc15b0c, 0x2, 0x0, 0x1, 0x7f, 0x397, 0x2}, {0x100000, 0x0, 0xb, 0x40, 0x200, 0x9, 0x7, 0xffb7, 0x3ff, 0x7ff, 0x0, 0x5}, {0xf002, 0x2004, 0xf, 0x0, 0x100000000, 0x7f, 0x101, 0x3ff, 0x5, 0x1c2fd825, 0x1, 0x1}, {0x6000, 0x5, 0x4, 0x3ff, 0x6, 0xfff, 0x1, 0x1f, 0xff, 0x0, 0x0, 0x3}, {0x0, 0x6000, 0xc, 0xffff, 0x6, 0x101, 0xffffffffffff13f6, 0x9d, 0x6, 0x3f, 0x9, 0x5d7}, {0x0, 0x5004, 0xf, 0xdd, 0x1f, 0x2, 0x6, 0xffffffff, 0x1, 0x200, 0xb9ad, 0x1f}, {0x0, 0x2002}, {0x1f004, 0x11006}, 0x0, 0x0, 0x4, 0x10000, 0x4, 0x2001, 0xf000, [0x6, 0xfffffffffffff2f1, 0x5, 0x7f]}) 11:15:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 394.788686] binder: 26793:26794 got reply transaction with no transaction stack [ 394.818189] binder: 26793:26794 transaction failed 29201/-71, size 0-0 line 2801 11:15:19 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) signalfd4(r0, &(0x7f0000000000)={0x2bad}, 0x8, 0x80800) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'security\x00'}, &(0x7f0000000300)=0x54) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000340)={0x7, 0x40}) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x8, 0x9, 0x3d22, 0x0, 0x6, 0x105002, 0x7000}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 394.846873] binder: 26793:26825 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 394.875862] binder: 26793:26825 got reply transaction with no transaction stack [ 394.883565] protocol 88fb is buggy, dev hsr_slave_0 [ 394.883624] protocol 88fb is buggy, dev hsr_slave_1 11:15:19 executing program 1: mlock(&(0x7f00003eb000/0x2000)=nil, 0x2000) munlock(&(0x7f00003ea000/0x4000)=nil, 0x4000) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xbe, 0x10083) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x2a, 0x4, 0x5}}, 0x14) mlock(&(0x7f00003ea000/0x2000)=nil, 0x2000) [ 394.924595] binder: 26793:26825 transaction failed 29201/-71, size 0-0 line 2801 [ 394.945215] binder: undelivered TRANSACTION_ERROR: 29201 [ 394.951659] binder: undelivered TRANSACTION_ERROR: 29201 11:15:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3f00}], 0x0, 0x0, 0x0}) 11:15:19 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x80800) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:19 executing program 5: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz'}, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001a00)=""/94, 0x5e}], 0x2}}], 0x1, 0x0, &(0x7f0000001e80)) pipe2(&(0x7f0000001640)={0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000001880)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1, 0x7, 0x366, 0x3, 0x54}, &(0x7f0000001680)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000016c0)={0x8c0, 0x8006, 0x6, 0x6, 0x0}, &(0x7f0000001940)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001a80)={r2, 0x101, 0x3, 0x9, 0x3f, 0x1, 0x2, 0x400, {r3, @in6={{0xa, 0x4e20, 0x3, @rand_addr="84bc202c2a99b70b640641b833c5d3d9", 0x9}}, 0x401, 0x7, 0x3f, 0x1}}, &(0x7f0000001980)=0xb0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) sendmmsg(r4, &(0x7f0000001600)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x3, @link_local, 'vcan0\x00'}}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="7bbd6b6f62e4fa59c560586734da38d06f3e1eb7fb71226b3d4d5c8d9c092c2d76bc32225b49d7fc6c01d9407526bad1230937dfd0ab592ddebd9277d278151b93ce92022e2024dbe2fcce92d4699689d7c0cb8b540e3bc4788ee03f496ae4e1bdf9f7f1a185af1e650f560551233a12eca3f60e8f0d80ca183605ebeadb96ee330dea6b81e06c32", 0x88}, {&(0x7f00000002c0)="29b3382690afb60477d8a0fc76e0bb1de38b90b03bc5add1ca9362", 0x1b}, {&(0x7f0000001480)="ea334e863619709b01645dd821c595dc2c29b75b2bc625483942e74c621bc2fe79a68dbed4505a4b30d9c83eb4ca1acb34c0ad62c0d0b16133514ccfef668f7229c897d7b38b1309d38ee32b833b87a8c74ad80f85f6f5ad52c817699340a601bb58549e40f780897df07716e5", 0x6d}, {&(0x7f0000001500)="8f9b26a33c41a832f0a4bdfe1d64cb6f9b272a4b36864a84471602cca750ca8c476eb40ce8952f0741e42bdae40463e5c6a461c0fe08e50c4fe80be38f23ef8220c6ffda3d26eedd980783a05a3852f3e0b397ec309d8fcb1689a89302564928ce7028c1d0ccf0ee61fb2b40ce7ad6df0a56ff315405869ec43bec5c1cd6b177f5f7ef900b2529ec443d67ea19d601c4b98630f78c3a89d416c0294443e8f0ff1a09929f5b246f39a1efa7f05333a097b1812822988a31e4", 0xb8}, {&(0x7f0000000300)="aaf3422c8e4ed70f8f91b759a621", 0xe}], 0x6, &(0x7f0000001f80)=[{0x90, 0x19f, 0x8001, "d0dc4a6c22ccc3515ba70e577b30ffd245056763c68563bc2403e6d58bf6468f613a549634e7a01ad5a7e9244554afb7c421ffcba8edfe08a6429beb226f03c5cb8f25ea4224bc21f5c1f69952495252b24ab4024883b759d92f908151986634212e0e827ed910f08783a378bf4bf0dde8e850da87fbda120e962cfb5002f5c2c6"}, {0x78, 0x117, 0x40, "ffc24a010fe54f7ca2eff92641cbd79afb599472812877466f985531c6690d81f8b9ad4688cc582695fceab7d0917625de4e8fa4f8cf9adb6ef782cb0762aff3614d0056205bb6d96e11122faf7fb5711e4bd79d9d6b04b987be3fcfe0b2ee1626ec59aa788a48b6226610"}, {0x5c, 0x111, 0x8, "008ea11e91badf6f773dc77dbaa902dcc1f7a973b55351c4672132911b22b12ae26c3d28bcd858615260b3fa24f3bbf07520d8c2ed830979d18f56c0790aaeceb90876ec37f15e6a553eb8ed81"}, {0x9c, 0x84, 0x3, "d95a12ffdb5708ad4f86815899bb2ca6db22ea67d61c1a0771110193f0d5305258a178ec012b371bbb4087d1b84e1f598d3511c679b9862763e25b6200058c42358c0ab9b61bcee5aba931de521bb0dbfde11f38d342267f2c7ce83d3daaf930707ad9744562097f157295f13b70ecae77d12f423ce400386b3a0e0c739b64063c8a1b707fe22b83ca5d730d5b"}, {0xdc, 0x101, 0x2, "bf0a3f25827abc3dcfc5c89de2519909966de00eab4d128308a72cc01d039a7c9b14d6d4a46148d5fdc8607758d0105905274bfa99991ba5a78565ffd3b3ba3dba3b5bc7e16d3667cb9a8de1ae8b0ab484734a1b42eff31d098d3a1e30d90916cf76c207cf9d6a9b722e479faadbba446b33ef435610b47c50129341bed9853e142db1355c0c4edf4b8ee12fb91e4f7737f0af5a3546e89f8cf474576d20d9ff33de5e562ba940bc14ebe9b32054eb36da7ce9597badac52583e8cea8e523d6e75a7153c2b8377b950d10a0b649e12"}], 0x2dc}, 0xfffffffffffffff9}], 0x1, 0x44040) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x200000, 0x0) write$input_event(r5, &(0x7f0000000200)={{0x77359400}, 0x17, 0x256c000000000, 0x1f}, 0x10) r6 = accept4(r4, 0x0, &(0x7f0000000000), 0x0) recvmmsg(r6, &(0x7f0000001bc0), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 11:15:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 395.121732] binder: 26917:26918 Release 1 refcount change on invalid ref 16128 ret -22 [ 395.206994] binder: 26917:26918 tried to acquire reference to desc 0, got 1 instead [ 395.207781] binder: 26917:26926 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 395.264791] binder: 26917:26937 Release 1 refcount change on invalid ref 16128 ret -22 [ 395.448771] protocol 88fb is buggy, dev hsr_slave_0 [ 395.453917] protocol 88fb is buggy, dev hsr_slave_1 11:15:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x7, 0x8) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r2, 0x0, r2, 0x0, 0x29, 0xe) 11:15:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 11:15:20 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x1e}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x16}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2f}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x800) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x100, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) flistxattr(r3, &(0x7f0000000400)=""/4096, 0x1000) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000040)={0x7ff}) 11:15:20 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x20, 0x60000) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = socket(0x0, 0x0, 0x0) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/41, &(0x7f0000000040)=0x29) 11:15:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1000000}], 0x0, 0x0, 0x0}) 11:15:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r2, r3, 0x0) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 395.671473] Unknown ioctl 44657 11:15:20 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 395.695782] binder: 27042:27043 Release 1 refcount change on invalid ref 16777216 ret -22 [ 395.696325] Unknown ioctl 44657 [ 395.772907] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 395.800592] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 395.815985] binder: 27042:27043 tried to acquire reference to desc 0, got 1 instead 11:15:20 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="6ae15c39ed2fd4ee4625032f6528902dfeea99b3ac82740441c461cc7ccaa4678858cd1fb44fe61eca5288f50b8b8c1aed97c261345acace8d07b495499c0d990912fd5b2e3602300243c896bf54284f314cf9ea86d1eccc1254f45b873b821c7d13e364847bb5969ad80eaf967d92622c87e0e63fc84e6728e007d6e47c", 0x7e}, {&(0x7f0000000140)="5f7f69e1f518dba46c613196b29d33ae76d577127d309c780b428062302673c2ea8fe9dcb245a26d2f2cedd26e9cbf7aae4f5b432c2ad7d76de7b090e1a442edae69a3d65a2a3cf334f9d8ecb6c35bc38d7b2aa726ec4a56246b2d57bd15e93ab256b763ac27da21", 0x68}, {&(0x7f00000001c0)="78c91632bed0c1883f52e6f1c4f29d5707a27171bec3fd3d97b93e5300cb49b0d2c985a44110bb3e3e93c7364e5a81a4b36956160500aef917f10880e275899c17ca66b29e0edf9dce0bb817f4cd709feafe80235ee1a64c1ae77ce57ce9c7e87a338d8941d2dbd9302f507c87b0961b1e20e67ad09281e038a6c7f4b1b98101", 0x80}, {&(0x7f0000000240)="bc796c8ee7a5f2f06a4aa1bbcc5a43b4dde6f6d5a5cb7ec695545111c5d4ca0147e24c6469ea552434b56f100c91b21dc1f46b78b4ad62bd8eaa491a99b0b2e5cd7c08f94bf4a03069a810d2cbc39c8102cd6e7ca0c5a93cabb6d3db0715adcaa6037edd01dd247ab1676ea191ca98ac85a4ec72edb545a0a146fd53a2f4032a77f041d5357aa94fc20b3e8f7530352fdbc08143e101ab44a1afe8", 0x9b}], 0x4}, 0xfffffffffffffff8}, {{&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x81, 0x1, "636c5e131fa909de394daddc5fa43870cf125ad784d636f170e963809a7a0a6f6295a37a4d38e8d69ffb8e86ca23c8b2f86a9e0cc809041d96a28bdffb44ae", 0x2a}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="1286fdccfede2314468c42368c11babdd397c757e75ea175a9580aff954d549c09e75b61e1640b5adfa892a0ed8526777d06d061b9014f0eed56ff86992ed0e29fa4a1d532cf63e15f6c7dc6a936ca42b6bf684956ffad89ae55bb681411648bbda9c0848315320583e7bff7f6ff1f1ec99f374368cb5bfb7a64856be5e119ad897eb5d31b76ed627f2bb1e7c04cbcf1372c62e3ccf5aa8a10dd870e2c821c0e96985d125ee0e3c360845063ff9d27b028080114e682c407ec", 0xb9}], 0x1, &(0x7f0000000500)=[{0x6c, 0x105, 0x3, "16c31677cbd0e4ff9dcd2d5428bb6b2e9fd4e316d7bd28b66286bb883deb7c2e2592e01106763cd66b443f5994a86df30826dc4a5cd03b6cf1232f92659ac553e513645d1f6b2d8e7e43af9dc832b07d32f4e45a4deea405872d7381c5d80a"}, {0x70, 0x110, 0x100000000, "f1618eef6ba5dd35b8d8c1f1690dd60d9924f14733d2e190ce8ea64d8ee08a64a1fe1870ef48d06f461270b614816cfe8219acfe34e5a45e53213a2ea966b59c837e8a86caf87f69edd2141b2ab48e2ed531ea612abfc7742f11e729738c62c7232e68"}, {0xd0, 0x113, 0x1000, "03f0fe65cec21906b0a3304bd739efea9eae0bdc05e362a0626274ddb1049652bad399c16c27b17adac50a175684fe09d8a224f57bf3a1ebf991211a93f03e2d425d8a58972cb0e3b5e5c11c5ed79e30b774253300730f9f9bb5723af36c0680a262819522dfda2676a53d076106ecba311eac8bfe32b2f9330d66fea57b3b5ba253d63801c3d70979ba903f5e8d6808c8ed8b353a9f60fd692e5ac81b7658c42e152a41e7d544eafec1dddf870c98b609ddd33f2c993d27be303c525647f210616dfcf6"}, {0x100c, 0x10f, 0x6, "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"}, {0xb4, 0x109, 0x1, "e5a8d4602cce47d54fa00a2588d3f9fe515593f75d9d630ae904a6b1ac0c4e176af28ab891dd43a100693c534bec3cdcdd753b191ed5f54eb30475d7a2c55fa2f8747be8fbe2b1e87526d3e797bdf5fabf64e090d90f843abb1dbddb1c5c2a760636baf323ad4f7657b0e89392caebcc8f58bf54c98bf0cfa18adbf5619a61f859649a7e5d082a9744e8f71b8ea65ba66eb05122b98a7388bef62c9e7d2adba548b6012536"}, {0x74, 0x1ff, 0x4, "3240bd2fefc489dff084df61e89d5efd91621db1f8313e2b751d7aa76b187d06a5c9aa60d8dcd5b71d2160bad7cf1e9dd7d3fdc455c46be38cc639bafb3170d706b9ae909667e5ffd21da175436236b0a04e140f7953e7b69b011fc2ea8bd805f455eee8e7125a"}, {0xb4, 0x10f, 0x2, "2c8c7f8bc76c839cadfd59ec7862b6ab66b7139bcfce4da68cd643d7012e893a53f1f243c89533606939025922ee55d5f316c236fd91210f48a36182e0483f4f02a529c62f493b12391992ffe211005904ccf3107cf60e9123c150f6080544b5d4d12c6f46182f795b65f9fa79780e0cc1852dbdc3bea1ce7fe1819a3bd5b847687b5c3397183817e19bc38b0fbfe7c13e569a9cd5661b509fd9a46df73c684ac36c9fac6ef1e3"}, {0xc, 0x0, 0xea3}], 0x13a0}}], 0x2, 0x20000000) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa1) [ 395.843640] binder: 27042:27118 Release 1 refcount change on invalid ref 16777216 ret -22 11:15:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x1000000000, @remote}, 0x1c) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xfb, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) listen(r2, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000700)='westwood\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast1, @in6=@mcast2}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) fsetxattr$security_smack_entry(r2, &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='syz0\x00', 0x5, 0x2) r4 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, &(0x7f0000000440)=@known='trusted.overlay.redirect\x00') connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x80000001, 0x7, 0x9, 0x9e, 0x9, 0x0, 0x0, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1e, 0x4, 0x8, 0x81, 0x1}}, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000480)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x6, 0x20000) r5 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) socketpair(0x1d, 0x0, 0x82, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000004c0)={0x100, {{0x2, 0x4e22, @local}}}, 0x84) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xb}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r6, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r7 = dup2(r4, r2) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@local, @local, r8}, 0xc) 11:15:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7080000000000004d000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00'}, 0x48) accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x80800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], &(0x7f0000000380)=""/239, 0xef) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x9, 0x756}, 0x10) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x1, @remote}, 0x1c) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in6, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, r4}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420180}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x3, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) prctl$PR_GET_SECCOMP(0x15) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000001c0)={0x10000000}) prctl$PR_GET_THP_DISABLE(0x2a) 11:15:20 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x28, &(0x7f0000000000)='vmnet1vboxnet0eth0ppp1!%wlan0em0vmnet0,\x00', 0xffffffffffffffff}, 0x30) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0086418, &(0x7f0000000140)={0x53957caf, 0x8000, 0x2, 0x1f, 0x1, 0x8}) gettid() fcntl$getown(0xffffffffffffff9c, 0x9) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r3 = getpgid(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) 11:15:20 executing program 2: r0 = socket(0xb, 0x8000f, 0x200000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 396.082600] QAT: Invalid ioctl [ 396.101122] QAT: Invalid ioctl [ 396.136508] QAT: Invalid ioctl [ 396.165269] QAT: Invalid ioctl [ 396.174491] QAT: Invalid ioctl 11:15:21 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e21, @loopback}, {0x306, @local}, 0x28, {0x2, 0x4e20, @empty}, 'ifb0\x00'}) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3f000000}], 0x0, 0x0, 0x0}) 11:15:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r1, 0x50d, 0x3, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}]}, 0x20}}, 0x0) 11:15:21 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 11:15:21 executing program 3: getpid() socket$vsock_dgram(0x28, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x5ed9, 0x0, 0x7, 0x0, 0x7, 0x3000, 0x4, 0x7fff, 0x8, 0xf53, 0x5, 0x7, 0xced, 0x396b, 0x7, 0xffff, 0xfff, 0x2, 0xb, 0x5, 0xfffffffffffff820, 0x5, 0x7, 0x9, 0xfffffffffffffffd, 0x22a, 0x1ff, 0x3, 0x4b2c, 0x12, 0x20, 0x0, 0x5, 0x4, 0x1ff, 0x0, 0x0, 0x6, @perf_config_ext={0x4, 0x7f}, 0x98, 0x3, 0x9a, 0xc, 0x8fef, 0x5, 0xfffffffffffffd80}, 0xffffffffffffffff, 0x9, 0xffffffffffffff9c, 0x8) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r1, 0x10, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0x40189206, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) setxattr$security_evm(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='security.evm\x00', 0x0, 0x0, 0x3) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000380)={0x1200, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x10000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x5, 0x0, [], [{0x2, 0x2, 0x4, 0x101, 0x7, 0x1}, {0x80000000, 0x7fff, 0x8, 0x8, 0x5, 0x6}], [[], [], [], [], []]}) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000080)) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x40) 11:15:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x1010001e, 0x1, 0x0, 0x0, {0xc}, [@typed={0x8, 0x0, @pid}]}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x0, 0x200) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402021}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x70, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200000000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x70}}, 0x20000000) [ 396.613815] binder: 27290:27291 Release 1 refcount change on invalid ref 1056964608 ret -22 11:15:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') pipe(0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x80) syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x902) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_BMAP(r2, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e23, 0x8, @local, 0x1}, {0xa, 0x4e23, 0x4, @remote, 0x20}, 0x9, [0x80000001, 0x690a59a0, 0x6, 0xff, 0x170c, 0x468, 0x6, 0x100000001]}, 0x5c) write(r1, &(0x7f00000001c0)="c3e6169dffe850e9f09074585d5d2b29cd963a5d47fdddb980275e584848d2", 0x1c3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$P9_RLOCK(r3, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x1}, 0x8) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000300)=0x18) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000380)={0x1, 0x1}) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x2, r5, 0x5, r0}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000500)=0x18) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac9b}], 0x1, 0x0) 11:15:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)={0x6f, 0xfffffffffffffff9, "dd51697d05edf9a177b1855e60d9309a94a4c5fe08972a361fe5090b4d312c34d1775a80329ed24660438cd0194ee2c3e625e0164d038b1296a937b17d5f4ae56fae8cd3e57a7fcff3a721bef91da550fe2a589d71ec89f4bc67dfa639e575b5169f7794fb3a98"}, 0x22000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 396.708988] binder: 27290:27291 tried to acquire reference to desc 0, got 1 instead [ 396.717106] binder_thread_write: 1 callbacks suppressed [ 396.717118] binder: 27290:27330 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 396.803793] binder: 27290:27394 Release 1 refcount change on invalid ref 1056964608 ret -22 11:15:21 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x100000000014b03e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000000c0)) write$cgroup_type(r1, 0x0, 0xfffffffffffffe6d) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="710000007d010000005100b7000300000030030008000200a400000000000000040006000000", @ANYRES32], 0x2a) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000080)) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60, 0x8384}, 0x60) 11:15:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0xfdfdffff}], 0x0, 0x0, 0x0}) 11:15:21 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xe4, "31a390398795279e8cf78f7b107cbf658cb918e36b4555f76817e2babf577516c2b6bfd3980f26c3eaefb8bce30ddededc4ab1db1bd48e09937d396e17d6e57fa16db956783a88adf9db8b4421040be87701bc4b29f0141bbc662f91e4f7572f91b7f3fb46d85389303217b422c4783f5a6fe7ad1db3146de76805fde20ca79e9a57019da8718be503a1b0bcd7e9dc7b085295ccb4b58e47b6862bd845177531ba578f50d60d8b7f2407cc1c6699769e7c1c5820d6d9ca5ec6eb0af954b5fbdf1dd29d43cdf86a4325317805ff23ec202846b0bb5d20ce71c1366fb7f25a86de52574d47"}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 396.987019] binder: 27421:27422 Release 1 refcount change on invalid ref -33685505 ret -22 [ 397.076464] binder: 27421:27422 tried to acquire reference to desc 0, got 1 instead [ 397.117384] binder: 27421:27428 BC_REQUEST_DEATH_NOTIFICATION death notification already set 11:15:21 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0xfffffffffffffff3) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 397.163264] binder: 27421:27428 Release 1 refcount change on invalid ref -33685505 ret -22 11:15:21 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0xfffffc4d) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80a00, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES64=r3], 0xfffffffffffffda0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 11:15:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0xfffffdfd}], 0x0, 0x0, 0x0}) 11:15:21 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xf, &(0x7f0000000000)='/dev/dri/card#\x00'}, 0x30) rt_sigqueueinfo(r0, 0x3b, &(0x7f00000000c0)={0x22, 0x8000, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) 11:15:21 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) epoll_create(0x6) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x14, 0x0, 0x0) [ 397.620497] binder: 27545:27558 Release 1 refcount change on invalid ref -515 ret -22 [ 397.695999] binder: 27545:27614 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 397.726648] binder: 27545:27558 tried to acquire reference to desc 0, got 1 instead [ 397.770402] binder: 27545:27558 Release 1 refcount change on invalid ref -515 ret -22 11:15:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000540)='./file0\x00', 0xffffffffffffffff) clone(0x8889cd00, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x200000) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x20005) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x97b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000004c0)={0x7ff, 0x9, 0x0, 0x0, 0xffffffffffffc8ad}) fsetxattr$security_selinux(r0, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000580)) rmdir(&(0x7f0000001540)='./file0/file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 11:15:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40, 0x0) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000001c0)=""/80, &(0x7f0000000240)=0x50) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = socket$inet6(0xa, 0x803, 0x5) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000380)={@ipv4={[], [], @local}, 0x0}, &(0x7f00000003c0)=0x14) sync_file_range(r2, 0x38f2, 0x7, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'bond0\x00', r4}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x1c, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) lookup_dcookie(0x6, &(0x7f0000000280)=""/152, 0x98) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4) r6 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000440)={0xa79, 0x9, 0x4, 0x9, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000004c0)={r7, 0x9, 0x3}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bond0\x00', 0x8a03}) 11:15:22 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2282, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000000c0)=""/208) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000200)="bfc2fdf54ca64a7d27912f2a9f61129d07a1fa23d2dee09e0fe02b6893bfe051cfe708b8ce63572f66622298159043053a0110f4167d3b403fa3280b04c98cd3f415ad37818238d5d73b817c4fb61d874e6d53427e162df6ba572e84b99d2060fe96935dbefb54d97784932bad5a1c6e5d6fc46f0eff6233132c1698e5890b37c7f84d7a5c7a24620f5d8bc97291c4b5a856c245234694d09023f41b83185656de1c7cff86c0feb2a2f37dff907219b25ea6909d818ed8d4788b285534661227038e819017df24fe406aa3a973c1fb9111fd0b5ca0ecba38c550dad64fb724a37d7b6cc34204cb1486d143edf610f1edcf24b8b92e00", 0xf6, 0x4000, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x0, 0x4, {0xa, 0x4e22, 0x5, @loopback, 0xfffffffffffff001}}}, 0x80) 11:15:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r1, r1, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) syz_genetlink_get_family_id$SEG6(0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:15:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x100000000000000}], 0x0, 0x0, 0x0}) [ 398.349569] binder: BINDER_SET_CONTEXT_MGR already set [ 398.406934] binder: 27662:27670 ioctl 40046207 0 returned -16 [ 398.407267] binder: 27662:27678 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:22 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000000c0)=""/64, &(0x7f0000000040)=0x40) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0xffffffffffffffbd) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000100)=0x3) 11:15:22 executing program 0: r0 = dup(0xffffffffffffff9c) r1 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000380)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) getgroups(0x1, &(0x7f0000000500)=[0xee01]) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffff9c, 0xc0445611, &(0x7f0000000580)={0x2, 0xc, 0x4, 0x20000004, {r7, r8/1000+30000}, {0x3, 0xc, 0x9, 0xffffffff, 0x9, 0x3ff, "8571091f"}, 0x3, 0x4, @fd=0xffffffffffffff9c, 0x4}) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x80000, 0x0) r11 = inotify_init1(0x80800) r12 = memfd_create(&(0x7f0000000600)='aegis256\x00', 0x2) r13 = socket$rds(0x15, 0x5, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) r16 = syz_open_dev$usbmon(&(0x7f0000000680)='/dev/usbmon#\x00', 0x0, 0x0) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="ad32e0ffffffffffef94feff01000000f729040007000000850000000800000018100000", @ANYRES32=0xffffffffffffff9c, @ANYBLOB="2e4d21cd4b857e1997e2b52f70ca4359670400151d5de695e850dd7b1331f4e55a783bf6baba236d43ce2e191969465dcef01344b02d21bb62e7fbf3e6e1357c00a2dc9e91ee7d89b55c66f92bdf4367e32b94b1f43b8bde53b789522dfdfe98c42c4eef23983f6aff39e01f3091b77451ca13ced25c12cb12a7ab0a4d61336ac9efbb65dd75cc1cca35aa1ef1ab91bbf0949bd052f5ffd372a6d7812ee57b15afbaead7eec9dfdba95c13876693ba50cef44b7a2945101c1167b68f0c41dbfb7738b1fc4ad5b3d74f5f26e39b7b65008b90bba68fec1fcd65f6f3c746208b1c88926957418684a32e4bd6f44fcca4955578"], &(0x7f0000000700)='GPL\x00', 0x7fffffff, 0x32, &(0x7f0000000740)=""/50, 0x285dad89cd59b519, 0x1}, 0x48) r18 = syz_open_dev$swradio(&(0x7f0000000800)='/dev/swradio#\x00', 0x0, 0x2) r19 = open(&(0x7f0000000840)='./file0\x00', 0x20000, 0x100) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = syz_open_dev$admmidi(&(0x7f00000008c0)='/dev/admmidi#\x00', 0x3, 0xe00) r22 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) r23 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r24 = socket$bt_hidp(0x1f, 0x3, 0x6) r25 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940)='/dev/rfkill\x00', 0x0, 0x0) r26 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000980)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = syz_open_dev$audion(&(0x7f0000000bc0)='/dev/audio#\x00', 0x7, 0x34800) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r32 = creat(&(0x7f0000000c40)='./file0\x00', 0x80) r33 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/sequencer\x00', 0x0, 0x0) r34 = openat$userio(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/userio\x00', 0x180, 0x0) r35 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d00)='\x00', 0x80, 0x88) r36 = syz_open_dev$audion(&(0x7f0000000d40)='/dev/audio#\x00', 0x7f, 0x80000) sendmsg$netlink(r0, &(0x7f0000000e80)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000ec0)=ANY=[@ANYBLOB="180000002602000000bd08020000ac1414248240f81b1ed71615e5286614d07949ff2a347d827300"], 0x18}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="0960c371ad781a4a5d000000e35d9bb85f4143774328af73f9fa801f9b6f6229b1daae2897fd4eca94b2f2ad312ef4ea74038c71a9fa885549e74ece0eff4f3140335089574697e4d80e41e3c948ee32522a145ac36efeca3defd5d63a371c922d07c56bfc50ea2a5e53ec33eef645ce79144e56a81173f28e2d4898e5f3350cd1f2b4a65c232c81d57ecc3f4eaaf39fa74b7fa89b551c784b011d646fe4c0981d56f284f292a6e1d1d914af4d9b15af775143d8b8334ebbfdab31e0fbdb0c7869e5037d2f053cf2a42ccd3ac13580ac197eb7e01376fc85e51316f20f93e0e8b85f9460bd38498bc1000a793af431", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="280000000100000001000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="180000000100000001000000", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="180000000100000002000000", @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYBLOB="280000000100000001000000", @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36], 0xe8, 0x10}, 0x40000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = socket$alg(0x26, 0x5, 0x0) bind$alg(r39, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) accept4$alg(r39, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(r37, 0x7006) write$binfmt_elf64(r38, &(0x7f0000000040)=ANY=[], 0xfffffdea) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r37, 0x0, r25, 0x0, 0x2080000000a, 0x4000000) 11:15:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3f00000000000000}], 0x0, 0x0, 0x0}) 11:15:23 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000480)={0x20071026, r2}, &(0x7f0000000580)={0x1, 0x1, 0x901, 0x4000000000001, 0x6, 0x9}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r1, 0xfffffffffffffdc2) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) r3 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x5, 0x34000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) sched_setaffinity(r2, 0x8, &(0x7f0000000900)) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000400)='bonsla\x80K\xca\x00\x80\x00\x00\xe3\n\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x5000500, 0x0, 0x3, 0x3}, 0x20) r6 = openat(r3, &(0x7f0000000880)='./file0\x00', 0x80000, 0x10) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r7 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000700)={'\x00', 0x2}, &(0x7f0000000640)="3c72aee17c4c10beb3b3ae86eeaf7051b91c5e966e42e548bfb64f85897cd09c340de61bbab6642df2140778f716674285360afced3bbb24a74ebe94e21b818db239c2a70f20cff0266dc4f3d0915a380bd0b1f85f1e6bdb08db3958d53d16", 0x5f, 0xfffffffffffffffc) keyctl$setperm(0x5, r7, 0x1000) fcntl$getownex(r4, 0x10, &(0x7f0000000600)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80001, 0x0) sendmsg$rds(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1, &(0x7f0000000ec0)=ANY=[]}, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000340)=0x7fffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), &(0x7f00000006c0)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6, 0x9, 0x6, 0x0, "d86bfefc69a14c5c4bc8993acd963758f3e94bf5d328ee999564bc6700a12f1546c692ae50cf288c6179a19ee57029c96ed94ce375d2e14f30afee7f40000095e8713b06cf0bfd989651e2a5a6010846"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x10000001, 0xfffffffffffffff8, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0b335dc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x4, 0x0, "0d77bded712533ade47145b71f2226c0b6950feba57b7d52d92246961bd40144a8269f0ee8dd9525d4425e2c4707a00f8dd47a5200b801004f4f90fe8cc7a3eff599b13d518d1000"}, 0xd8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:15:23 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, [0x1, 0x5, 0x5, 0x3f]}) sendto$inet(r0, 0x0, 0x1d1, 0x0, 0x0, 0x1e8) 11:15:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0xfdfdffff00000000}], 0x0, 0x0, 0x0}) 11:15:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000540)='./file0\x00', 0xffffffffffffffff) clone(0x8889cd00, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(0x0, 0x0, 0x200000) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x20005) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x97b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000004c0)={0x7ff, 0x9, 0x0, 0x0, 0xffffffffffffc8ad}) fsetxattr$security_selinux(r0, &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000580)) rmdir(&(0x7f0000001540)='./file0/file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 11:15:23 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x5, 0x3, @local, 0x3}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x2a1, @mcast2, 0x8}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @rand_addr=0x7}, @in={0x2, 0x4e23, @remote}], 0x5c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='nr0\x00'}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 399.429017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.608570] net_ratelimit: 17 callbacks suppressed [ 399.608580] protocol 88fb is buggy, dev hsr_slave_0 [ 399.618664] protocol 88fb is buggy, dev hsr_slave_1 11:15:24 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82800, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000040)={0x1, 0x1}) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x4000) 11:15:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x3f00, 0x0, 0x0}) 11:15:24 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000480)={0x20071026, r2}, &(0x7f0000000580)={0x1, 0x1, 0x901, 0x4000000000001, 0x6, 0x9}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r1, 0xfffffffffffffdc2) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) r3 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x5, 0x34000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) sched_setaffinity(r2, 0x8, &(0x7f0000000900)) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000400)='bonsla\x80K\xca\x00\x80\x00\x00\xe3\n\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x5000500, 0x0, 0x3, 0x3}, 0x20) r6 = openat(r3, &(0x7f0000000880)='./file0\x00', 0x80000, 0x10) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r7 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000700)={'\x00', 0x2}, &(0x7f0000000640)="3c72aee17c4c10beb3b3ae86eeaf7051b91c5e966e42e548bfb64f85897cd09c340de61bbab6642df2140778f716674285360afced3bbb24a74ebe94e21b818db239c2a70f20cff0266dc4f3d0915a380bd0b1f85f1e6bdb08db3958d53d16", 0x5f, 0xfffffffffffffffc) keyctl$setperm(0x5, r7, 0x1000) fcntl$getownex(r4, 0x10, &(0x7f0000000600)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80001, 0x0) sendmsg$rds(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1, &(0x7f0000000ec0)=ANY=[]}, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000340)=0x7fffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), &(0x7f00000006c0)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6, 0x9, 0x6, 0x0, "d86bfefc69a14c5c4bc8993acd963758f3e94bf5d328ee999564bc6700a12f1546c692ae50cf288c6179a19ee57029c96ed94ce375d2e14f30afee7f40000095e8713b06cf0bfd989651e2a5a6010846"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x10000001, 0xfffffffffffffff8, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0b335dc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x4, 0x0, "0d77bded712533ade47145b71f2226c0b6950feba57b7d52d92246961bd40144a8269f0ee8dd9525d4425e2c4707a00f8dd47a5200b801004f4f90fe8cc7a3eff599b13d518d1000"}, 0xd8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:15:24 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x7ff, 0x7) 11:15:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@ethernet={0x306, @dev={[], 0x12}}, 0x80) [ 399.723328] 8021q: adding VLAN 0 to HW filter on device bond0 11:15:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) [ 399.810587] binder: 27944:27945 ioctl c0306201 20000240 returned -14 11:15:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @local}}, [0xffffffff, 0x7, 0x5, 0x9, 0x4, 0x2, 0x7, 0x5, 0x1f, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x6]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r1, 0x821a, 0x1, [0x7ff]}, &(0x7f0000000300)=0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000380)=0x6) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x5) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7, 0xfff, 0x6, 0x100000001, 0x4}, &(0x7f0000000080)=0x14) accept4$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0xffff}, 0x8) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 11:15:24 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffd76, 0x4000003, 0x0, 0xffffffffffffff36) ioctl$void(r0, 0xc0045c79) [ 399.899074] binder: 27944:27953 ioctl c0306201 20000240 returned -14 11:15:24 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000480)={0x20071026, r2}, &(0x7f0000000580)={0x1, 0x1, 0x901, 0x4000000000001, 0x6, 0x9}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r1, 0xfffffffffffffdc2) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) r3 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x5, 0x34000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) sched_setaffinity(r2, 0x8, &(0x7f0000000900)) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000400)='bonsla\x80K\xca\x00\x80\x00\x00\xe3\n\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x5000500, 0x0, 0x3, 0x3}, 0x20) r6 = openat(r3, &(0x7f0000000880)='./file0\x00', 0x80000, 0x10) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r7 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000700)={'\x00', 0x2}, &(0x7f0000000640)="3c72aee17c4c10beb3b3ae86eeaf7051b91c5e966e42e548bfb64f85897cd09c340de61bbab6642df2140778f716674285360afced3bbb24a74ebe94e21b818db239c2a70f20cff0266dc4f3d0915a380bd0b1f85f1e6bdb08db3958d53d16", 0x5f, 0xfffffffffffffffc) keyctl$setperm(0x5, r7, 0x1000) fcntl$getownex(r4, 0x10, &(0x7f0000000600)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80001, 0x0) sendmsg$rds(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1, &(0x7f0000000ec0)=ANY=[]}, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000340)=0x7fffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), &(0x7f00000006c0)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6, 0x9, 0x6, 0x0, "d86bfefc69a14c5c4bc8993acd963758f3e94bf5d328ee999564bc6700a12f1546c692ae50cf288c6179a19ee57029c96ed94ce375d2e14f30afee7f40000095e8713b06cf0bfd989651e2a5a6010846"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x10000001, 0xfffffffffffffff8, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0b335dc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x4, 0x0, "0d77bded712533ade47145b71f2226c0b6950feba57b7d52d92246961bd40144a8269f0ee8dd9525d4425e2c4707a00f8dd47a5200b801004f4f90fe8cc7a3eff599b13d518d1000"}, 0xd8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:15:24 executing program 1: setrlimit(0x4000000f, &(0x7f0000000000)) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0xcb4) 11:15:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x1000000, 0x0, 0x0}) 11:15:24 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:24 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000480)={0x20071026, r2}, &(0x7f0000000580)={0x1, 0x1, 0x901, 0x4000000000001, 0x6, 0x9}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r1, 0xfffffffffffffdc2) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) r3 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x5, 0x34000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) sched_setaffinity(r2, 0x8, &(0x7f0000000900)) ioctl$sock_SIOCBRADDBR(r0, 0x89a1, &(0x7f0000000400)='bonsla\x80K\xca\x00\x80\x00\x00\xe3\n\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x5000500, 0x0, 0x3, 0x3}, 0x20) r6 = openat(r3, &(0x7f0000000880)='./file0\x00', 0x80000, 0x10) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r7 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000700)={'\x00', 0x2}, &(0x7f0000000640)="3c72aee17c4c10beb3b3ae86eeaf7051b91c5e966e42e548bfb64f85897cd09c340de61bbab6642df2140778f716674285360afced3bbb24a74ebe94e21b818db239c2a70f20cff0266dc4f3d0915a380bd0b1f85f1e6bdb08db3958d53d16", 0x5f, 0xfffffffffffffffc) keyctl$setperm(0x5, r7, 0x1000) fcntl$getownex(r4, 0x10, &(0x7f0000000600)) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80001, 0x0) sendmsg$rds(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1, &(0x7f0000000ec0)=ANY=[]}, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000340)=0x7fffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), &(0x7f00000006c0)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6, 0x9, 0x6, 0x0, "d86bfefc69a14c5c4bc8993acd963758f3e94bf5d328ee999564bc6700a12f1546c692ae50cf288c6179a19ee57029c96ed94ce375d2e14f30afee7f40000095e8713b06cf0bfd989651e2a5a6010846"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x10000001, 0xfffffffffffffff8, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0b335dc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x4, 0x0, "0d77bded712533ade47145b71f2226c0b6950feba57b7d52d92246961bd40144a8269f0ee8dd9525d4425e2c4707a00f8dd47a5200b801004f4f90fe8cc7a3eff599b13d518d1000"}, 0xd8) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 400.156214] binder: 27969:27972 ioctl c0306201 20000240 returned -14 11:15:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 400.214647] binder: 27969:27976 ioctl c0306201 20000240 returned -14 11:15:24 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x4000) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x6, 0x7, 0xc3c, 0x600}) personality(0x800000) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 11:15:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x3f000000, 0x0, 0x0}) 11:15:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 400.423446] binder: 27988:27990 ioctl c0306201 20000240 returned -14 [ 400.486519] binder: 27988:27995 ioctl c0306201 20000240 returned -14 [ 400.638583] protocol 88fb is buggy, dev hsr_slave_0 [ 400.643768] protocol 88fb is buggy, dev hsr_slave_1 [ 400.648592] protocol 88fb is buggy, dev hsr_slave_0 [ 400.653901] protocol 88fb is buggy, dev hsr_slave_1 [ 400.659028] protocol 88fb is buggy, dev hsr_slave_0 [ 400.664086] protocol 88fb is buggy, dev hsr_slave_1 11:15:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="e9a50d942e5e40af71754ab21e952843a798cb6c11ea444af8749abd05ae7fc2e46938e834df44988b288a08a8968539b6163d74d37b51a8933001e8592b7b2bd8b43dd90c12469b02a104f95c70dd1befaac4d4c6abc226f7af0892759f992697e0866cc71ff9d1234a94fb30baeb4d59564ac7e9035b043b8441c1d37934dfba87640ca10dd9a0cd99d01cf2dd0abccab419216748e5e4d7e32abe8dcd26ee6e9ad2799ad1956c0d33975465994c07e3ec96fae048e54158f9", 0xba) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'mcryptd(streebog256)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) socket$alg(0x26, 0x5, 0x0) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:25 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, 0x0, &(0x7f0000000140)) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x2) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x4174, 0x395, 0x10000}) 11:15:25 executing program 5: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000)) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000040)=""/81) 11:15:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:25 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0485510, &(0x7f0000000240)={0x7fff, 0x5, 0x1f, 0x100000001, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x40, 'syz0\x00'}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f00000002c0)='security.SMACK64EXEC\x00', &(0x7f0000000300)='htcp\x00', 0x5, 0x2) 11:15:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0xfdfdffff, 0x0, 0x0}) 11:15:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 400.859063] binder: 28013:28014 ioctl c0306201 20000240 returned -14 [ 400.891900] binder: 28013:28027 ioctl c0306201 20000240 returned -14 11:15:25 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @broadcast}, &(0x7f0000000140)=0xc) sendmsg(r0, &(0x7f0000001d40)={&(0x7f0000000180)=@hci={0x1f, r1, 0x2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="9c348a1ff745500b1c427947d10a9a4bfcf88799c6fe1f1f75de576a7995c9bbac16eeff4c67d554e1bb4c47edc6d3e43e3663ab8ccb874cbc6c9dacaaca3025837e9119661cf3cc7bf00faf084f1591581c66190a47818c4e93661200d6697deb260d34dec334816e3816754f0e2aa5bf2312038672562907ba52ef06f286771e2f6c21e9257d79260af5b502e7f92a9a6bf1b138d3560a3cc0e4d2c760c6160e72efbe7cfcff305cea", 0xaa}, {&(0x7f0000000400)="807067197e4d6c6343", 0x9}, {&(0x7f0000000440)="72a16f016e8a13ef6e9994aaa02973fff29138efef4d1e596b5b4762301ac9cbf5a1ac2687276a5aedb75a59ff3a436dbe8d8767271a01b1044142cac6eb1a90ad0f75fdcbbd8de2ea2e5b7c874c6cf75774ac45c54f31c0e0db8d262a8c4b2ce5823f6e666984bbb47d5c7a8aee9cbf836cbfeb4e57d942d65829e953024466761baa3f217a492b6078bec54d372737f8e0a7f180a2753ae8eaf324985b8166fcb7a73b06ee822b07d95774cf2cb6d9cf9b7581cdf933b4f859faeeb389f06668e4d0580b655cf291ee55b2545129857833b52c0363afcc4f2dc2463b23b3", 0xdf}, {&(0x7f0000000540)="ba6bc0eb34827ca9d10a79e75ac56903411fb452a74a103a29e3b2d7c5de0e422e8011e3662633247c8438138efc6f28fae221a0fae4b7b6b1c054932af7dc879004f8a3c71c8af637a010b90288ee47dce0286db92548e24ca744d6324fea61b155ec8b3d38978dd1f39805358c93e5d31bc8206d83b42e0356158bca6c35e572104b1152dd3a6172e2ae2ae19114d7b8e6c180f3f2f84fd43db191f3629488e55e2bab303fbf2e654263a6af9b976354a102675d1987b8e6d9c074", 0xbc}, {&(0x7f0000000600)="714160e62a3faac508e23875a478c3df4489b2d552ea7bb2a09f5693efa1953139150a4b89a64aa2f7a562c3076aabb2afd2972cf0a392553d7b213aa10d962324de805d29e62e5e6994df39079ea47ebc", 0x51}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="7ce902c6b38fc114de20ff48551b570b724ee03f5ecee0f9ed65171637fcc2279c04970c28cc7b0f373784e231f2d235ac31bd46e98d5b318562d9b5a53293a8d1d7bc63aa83f59930e87cd24a131608ed6729f84b354af2cdd95a8878230124f3da4e65e2c44805873cb1384d9c11572d43159bc70429ec9102", 0x7a}, {&(0x7f0000001700)="45256d1824b895496aa59e08f56eeda21bc17208cb16be660bff27ae8471e4c66e30ec394affac87261704946db14ad68c11592831c2e678e1bdf91b732ca2b2280771686f648350732a58c0e9ce8c81be9ff724f0690d72788cd99c49d802bbf96f002ff01b9a03c5e10c17869895a53ebd397a9b8c53feaa02858af2d9049774923a8b8317ed8d8f182ac0dc4a09d7b5689d1f81713f1f7738aa529560ca429c60b1", 0xa3}, {&(0x7f00000017c0)="3622dbfda92278f1d24b5ae7b14e599266f9a987436c2f3608e60b31466f0a57930b07f8b4d239399a4d4050737dcf448d1cf4902dfa4b149aeba27b5abf949b0e62bbb794e5370f27f926e796d7e0df742b", 0x52}], 0xa, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x458}, 0x20000041) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x80000) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000001d80)={{0x7, 0x7, 0xffffffffffffff6a, 0xfffffffffffffffd, 'syz1\x00', 0x3}, 0x0, 0x30, 0x7, r3, 0x1, 0x8, 'syz0\x00', &(0x7f00000000c0)=['\x00'], 0x1, [], [0x7, 0x5b9, 0x0, 0x6]}) 11:15:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0xfffffdfd, 0x0, 0x0}) 11:15:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:25 executing program 5: mkdir(&(0x7f0000000000)='./file0/bus\x00', 0xc0) mount(0x0, &(0x7f000078eff8)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41000001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}, 0x8000000000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x80000001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @local, 0x2}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) mq_getsetattr(r0, 0x0, &(0x7f0000000040)) 11:15:25 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) ioctl$void(r0, 0xc0045c79) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="a0029f3cd5c6867b30ad33fcdfcec76dad2aacc7e4ffc913ab43a745a9b5ec7761ad8db905aad25c19c413b0a677476f20a075ab58a2a82ff216a8d649ece023ec5dd5e6dbd27ac6a93fb5a5ad3708bc2c10057d43214048cc5f146a5e543812525cc26e7b523633db882154a51838df9cad7f1107fc5d8098d56b3e040940eb36174fa69a35a27f6f52710706fb850fc06d0476", 0x94, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x1000}, 0x10) [ 401.119511] protocol 88fb is buggy, dev hsr_slave_0 [ 401.125149] protocol 88fb is buggy, dev hsr_slave_1 [ 401.153543] binder: 28142:28143 ioctl c0306201 20000240 returned -14 [ 401.221062] binder: 28142:28148 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 401.308919] binder: 28142:28173 ioctl c0306201 20000240 returned -14 11:15:26 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x3}, 0x8) 11:15:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x0, 0x0, {0x3, 0x0, 0x1}}) prctl$PR_SET_FP_MODE(0x2d, 0x1) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) fcntl$setstatus(r0, 0x4, 0x6800) 11:15:26 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x38, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x100000000000000, 0x0, 0x0}) 11:15:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) splice(r2, 0x0, r3, 0x0, 0x200004, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) [ 401.868207] binder: 28269:28270 ioctl c0306201 20000240 returned -14 11:15:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000808000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c080800414900000004fcff", 0x58}], 0x1) 11:15:26 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) socket$kcm(0xa, 0x2, 0x11) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 401.909799] binder: 28269:28275 ioctl c0306201 20000240 returned -14 11:15:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x3f00000000000000, 0x0, 0x0}) 11:15:26 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x21, &(0x7f0000e62000)={@broadcast, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast2}, 0xc) lstat(0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/104) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2d000}], 0x1, 0x0) 11:15:26 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:26 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 11:15:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe) [ 402.139198] binder: 28385:28392 ioctl c0306201 20000240 returned -14 [ 402.176844] binder: 28385:28397 ioctl c0306201 20000240 returned -14 11:15:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000080)={0x500000000000000, 0x5f48b964, 0x8, 0xfffffffffffffffe, 0x7fffffff, 0xffffffffffffff9b, 0x7}) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) epoll_create(0x200) 11:15:27 executing program 3: syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x69c0, 0x10000) io_setup(0x80002, &(0x7f0000000100)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) io_getevents(r0, 0x100000000002, 0x1, &(0x7f0000000200)=[{}, {}], 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x8, @remote, 0x7}], 0x2c) 11:15:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:27 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0xfdfdffff00000000, 0x0, 0x0}) 11:15:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x200, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0x3f, &(0x7f00000001c0)='vxcan1\x00', 0xf67f, 0x80, 0x333e45bf}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x80247009, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) r2 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r0, 0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) sendfile(r0, r2, 0x0, 0x102002700) syz_open_dev$dmmidi(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) [ 402.658455] binder: 28414:28415 ioctl c0306201 20000240 returned -14 11:15:27 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40c00, 0x0) pipe(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @broadcast}, {0x306, @broadcast}, 0x8, {0x2, 0x0, @dev}, 'rose0\x00'}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000040)=0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) unshare(0x40000000) symlinkat(0x0, 0xffffffffffffffff, 0x0) io_setup(0x2005, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, 0x0}]) 11:15:27 executing program 2: r0 = socket(0xd, 0x6, 0x8) r1 = dup(r0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000000)=""/57) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 402.721083] binder: 28414:28426 ioctl c0306201 20000240 returned -14 11:15:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x3f00, 0x0}) 11:15:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 402.897449] IPVS: ftp: loaded support on port[0] = 21 11:15:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x1000000, 0x0}) [ 403.185378] IPVS: ftp: loaded support on port[0] = 21 11:15:27 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) splice(r1, &(0x7f0000000040), r2, &(0x7f0000000080)=0x43, 0x3, 0xc) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x1400, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x4000000000000000, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3f00000000000000}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f578060000006c00", "63f91a3c787b91db3499973de883ddba09a57dcc0e00", 0x3}) r3 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000040)={0x17, 0xea, &(0x7f0000000500)="c10dbac236933356224107891efa1a69ee1660c33353711ae0444b4274112fb75a3e569156b0fbc04b685e18990b42897eb9552adfe16b7f779e676b7bab5c2dfa15369628dc8f7c01e6e2ba0f2d821081b10cd3f363604cc54b199282c54d8151d4e83e2d9014b3c499548afbb0232c79900a62335fcb8313da0f84840e1eb06fc3fb230c00a607424656bc745e6edf3fc9970ea632c8a75483249e0131b30143f04bd231428c3e6749e68a1a3d7ef1848155cf82423e3f492155218534c8c795a423dc9769b2832f421bf9a4daf5aff100e2c32efde94ef17636a111a7bd3aa870f1e7fef3e2359488"}) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) fchmod(r1, 0x21) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) close(r4) r6 = accept4(r5, 0x0, 0x0, 0x0) munlock(&(0x7f0000ff8000/0x8000)=nil, 0x8000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x200000dc}}, 0x0) 11:15:27 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa0000, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000000c0)) 11:15:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x3f000000, 0x0}) 11:15:28 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0}, 0xffffffffffffff32) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) socketpair(0x1, 0x100000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)='gre0\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'lapb0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000300)='gre0\x00') 11:15:28 executing program 1: socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:28 executing program 3: r0 = memfd_create(&(0x7f0000000040)='ppp1!\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1000000200000581) r2 = dup2(r1, r0) ioctl$KDDELIO(r2, 0x4b35, 0x1ff) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x4}) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x80000000, 0x30000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(r2, &(0x7f0000000000)={0x7}, 0x2dd) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\\'}, {0x20, 'vmnet1%'}], 0xa, "74693aa7726f70c8488da5cdafde072996c16c5ac744cae09e4fe51ddeec582a919d8f5408c5fd2609a6dca29e744e99720d52dc5f4117420523e244254ebae32f9e0516d4d062ba6f0471344704c859befe37b12e2c0bba0593e27df979daf0b7b0564b4d455ed36013e155eba6817f49b70d459c2de4559ea3cde620b2365249c733ab6140d18eed74b0d32e346fec98b65a3f6ec7cf98ca9519866a0e7dff2919fbefa1e88773eedb9040d3a052f802c8ec38010664e7ad813542313819510aaf0f9133a7a5277e600ed4df518a1ba2f9ab84014eb5b8e0ba688beb98997fc01e8a8684ceb8c91849d3ba3f83c01572614264f6"}, 0x10a) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0xdf, @time={0x77359400}}) write$P9_RREAD(r2, &(0x7f0000000140)={0xbd, 0x75, 0x1, {0xb2, "711fa5e4cf949c86588937eddf5eb17b24874d10c7452b06f86ed2f501204f5aced7807e764e1ca42244a3224361d6ae57d2e1c77882871ade29231a49cffbd52e815539d434a5c1791afda212e341ecef40dd280d9409b7c48a2c670ee6b490c6a15b5bb3a79010a6fc2fc45426d45bb74d98130848448725136658972af92f24a981fd23e14c2c786bdb318bbdbe50834900abf67cca51491b7c223ad2acf3305b4446f7948303f001d9b0b099f0c564d3"}}, 0xbd) 11:15:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0xfdfdffff, 0x0}) 11:15:28 executing program 2: r0 = socket(0x1000240000000014, 0x5, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0xc0684113, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x209, 0x5, 0xfffffffffffffff9, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffb, 0x2, 0x1, 0xffff, 0x7fffffff, 0x1fc7a5c9, 0x100, r2}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:28 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:28 executing program 3: socket$inet(0x2, 0x4000000000000005, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xfffffffffffffffc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x141000, 0x0) r1 = openat(r0, 0xffffffffffffffff, 0xc000, 0x29) write$P9_RSETATTR(r1, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000600)='ioht\x00\x00\x00\x00\x00\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x42, 0xfffffdd1) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffcec) keyctl$join(0x1, &(0x7f00000005c0)) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r8, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000180)={0x0, 0x7, 0x80, 0xfc, '\x00', 0x8}) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000100)=0x54) close(r7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x14) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a77ff8)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x10f, 0x3, 0x1, 0x4) 11:15:28 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000180)={0x6, 0x3ff, 0x3f, 'queue0\x00', 0x4}) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='hwsim0\x00') write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) 11:15:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0xfffffdfd, 0x0}) 11:15:28 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x24000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, r2, 0x30, 0x0, @in6={0xa, 0x4e20, 0x0, @remote, 0x40}}}, 0xa0) sendto$inet(r0, 0x0, 0x0, 0x800, 0x0, 0x250) 11:15:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x404}}], 0x1, 0x40) 11:15:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:28 executing program 3: socket$inet(0x2, 0x4000000000000005, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xfffffffffffffffc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x141000, 0x0) r1 = openat(r0, 0xffffffffffffffff, 0xc000, 0x29) write$P9_RSETATTR(r1, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000600)='ioht\x00\x00\x00\x00\x00\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x42, 0xfffffdd1) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffcec) keyctl$join(0x1, &(0x7f00000005c0)) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(r8, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000180)={0x0, 0x7, 0x80, 0xfc, '\x00', 0x8}) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000100)=0x54) close(r7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x14) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a77ff8)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x10f, 0x3, 0x1, 0x4) 11:15:29 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 404.522842] binder: 28713:28723 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:29 executing program 5: socket$alg(0x26, 0x5, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xf000, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000}) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x11f, &(0x7f0000000280)={@local, @broadcast, [], {@mpls_mc={0x8848, {[{0xffffffffffffffff, 0x7d8, 0x82e0}, {0x40, 0x8, 0x7, 0x1}, {0x3, 0xffffffff00000000, 0xffffffffffffffff, 0x5}, {0x7f, 0x25, 0x9, 0x5}], @llc={@snap={0x1, 0xab, "59e4", '6\'z', 0x11, "bf3898816faa70040147670fca56e279138a64ec82915d3d3143e161afc412e90273d30fbe624787c77a6743fe4e372a1f850c048afc7b4cebe73e1c54c96628e94076b9ce6ebf4fc718a8c0cf01eaa803e264fa22693551ebbb9f05d85954e00b3f17591a6c3ee739a597cde8dcd9aee3f14f2034ddd10f3567887a967543732047cf5b9affa6bae12bd94d7a0fb3b4783f5c493602e2f298d28d250d249abdcb8d89506a9cb6cc8a08a440ac9f5a18b0b34582349db44087b84c22b789a935b42803236ce69207b4733638aaea26e206bf37539baba886a1dd01c4ac4ba72a8a79de2ab6b1b29dd8675525f67c2adfe148ce35bda07de1"}}}}}}, 0x0) 11:15:29 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0x9, @remote, 0x2}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1, 0x2}, &(0x7f0000000240)=0x8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @loopback, 0x40000004}, 0xfffffffffffffdc7) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xa000, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000040)={0x0, "9c5186ab31bdd05777989d8a0fdcd409f914c2cb090c75ec3ede82e13a1e9178", 0x3, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x8400, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x100000000000000, 0x0}) [ 404.798585] net_ratelimit: 12 callbacks suppressed [ 404.798593] protocol 88fb is buggy, dev hsr_slave_0 [ 404.798618] protocol 88fb is buggy, dev hsr_slave_1 [ 404.803670] protocol 88fb is buggy, dev hsr_slave_1 [ 404.818790] protocol 88fb is buggy, dev hsr_slave_0 [ 404.823869] protocol 88fb is buggy, dev hsr_slave_1 11:15:29 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x3f00000000000000, 0x0}) [ 405.278642] protocol 88fb is buggy, dev hsr_slave_0 [ 405.283741] protocol 88fb is buggy, dev hsr_slave_1 11:15:29 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400040, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x9, 'syz1\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0x13, &(0x7f0000000180)='+vboxnet1,]/{self,\x00'}, 0x30) kcmp(r1, r2, 0x3, r0, r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r3, 0x0, r6, 0x0, 0x10002000000000a, 0x0) 11:15:29 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) r1 = dup2(r0, r0) write$P9_RREAD(r1, &(0x7f0000000000)={0x69, 0x75, 0x2, {0x5e, "9fb92f3e1e1910d4dd459d01bb1fdcc5647ed58e3e7cf6c51671b8bf7b35705e8aa2efd58c3fcda0540802c050228402cdd4972a448d2fe6e40312359b641c9ed30e1c059060e0addc9ade007a0d709c1a1ccb521f31da14be6c503ecb40"}}, 0x69) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:29 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x800, 0x20000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0), 0x0) r1 = socket$inet(0x10, 0x0, 0x200000c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f0000000140)=0xf10001, 0xfffffffffffeffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="000025bd7000fddbdf2504000000080003000300000014000100fe880000000000000000000000000001"], 0x1}, 0x1, 0x0, 0x0, 0x200000d1}, 0x4010) close(r2) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff2", 0xe}], 0x1}, 0x0) 11:15:29 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0xfdfdffff00000000, 0x0}) 11:15:29 executing program 5: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) 11:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x4, 0x12202) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f00000001c0)) r2 = syz_open_dev$binder(0x0, 0x0, 0x200805) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x212000, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000100)={0x0, {0x761accb7, 0x2}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r4 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:30 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) r1 = getpgid(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000040)}}], 0x2, 0x0) 11:15:30 executing program 2: r0 = socket(0x11, 0x5, 0x800d6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x11) write$smack_current(r1, &(0x7f0000000040)='%posix_acl_access\x00', 0x12) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:30 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @mcast1, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 405.745834] binder: BINDER_SET_CONTEXT_MGR already set 11:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 405.781552] binder: 28883:28890 ioctl 40046207 0 returned -16 [ 405.838594] protocol 88fb is buggy, dev hsr_slave_0 [ 405.843837] protocol 88fb is buggy, dev hsr_slave_1 11:15:30 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x3) 11:15:30 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='}\xd9*vboxnet0{wlan0#selfeth1:\x00', 0x1c, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x55e, 0x14}, &(0x7f00000001c0)=0xc) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffbfffffffffffc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="d1d516312a9eb6b6f76e8ec4d9367e8d6b95990bf9d49906b1c126c71eccc678d159e3680cb76680691feee8146a49ba8ac7d72f5e3d5e76490943479b9ab928", 0x40}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}}], 0x2, 0x1) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000040)={0x4, 0x6, 0x9, 0x18}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff00000001, @local, 0xa7}, 0x1c) 11:15:30 executing program 3: getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001000)={0x0, 0x8367, 0x0, 0x7fffffff}, &(0x7f000000affc)=0x20) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000ff8)) socket(0xa, 0x80006, 0x7) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) 11:15:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, 0x0) [ 406.491389] binder: BINDER_SET_CONTEXT_MGR already set [ 406.508269] binder: 29008:29024 BC_REQUEST_DEATH_NOTIFICATION death notification already set 11:15:31 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10f) sendto$inet(r0, 0x0, 0xfffffffffffffd4c, 0x0, 0x0, 0x0) [ 406.552390] binder: 29008:29016 ioctl 40046207 0 returned -16 11:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, 0x0) 11:15:31 executing program 5: syz_open_dev$sndtimer(0x0, 0x0, 0x1ffd) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x249) write$P9_RLERRORu(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x13f) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000600)=""/217, 0xd9}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000180)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2800, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000001c0)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700), 0x4) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x1a, 0x4) dup3(r2, 0xffffffffffffffff, 0x0) 11:15:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x10001, 0x8, 0x0, 0x5, 0x1}) exit(0x8) getdents(r0, 0x0, 0x0) 11:15:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x100) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 406.878589] protocol 88fb is buggy, dev hsr_slave_0 11:15:31 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x15d) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7b3e}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r4, 0x7}, 0x8) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRESOCT=r3, @ANYRES64=r2, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR64, @ANYRESDEC=r1, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR], @ANYPTR]], 0x3f) membarrier(0x8, 0x0) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @start={0x2, 0x1}}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)={r4, 0x5, 0x9909}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r4, 0x6e, "857fc08a817811d35f9ce6400078b4e9135ac52f006fc1a83871c29cb9b0c2d87835201002793dbc610eefecbf6aa5643a37c2717c943a10a2b59096b9cd585f240e56aa9722a1ece108a34fc6fd97cb635842feabea083caf0ab8edf74b7a4a5568db368b3216f44818e58a59cc"}, &(0x7f00000002c0)=0x76) 11:15:31 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0xd4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, 0x0) 11:15:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x4000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) recvmmsg(0xffffffffffffff9c, &(0x7f00000057c0)=[{{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/204, 0xcc}], 0x2}, 0x1}, {{&(0x7f0000000580)=@alg, 0x80, &(0x7f0000001700)=[{&(0x7f0000000600)=""/29, 0x1d}, {&(0x7f0000000640)=""/133, 0x85}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x3, &(0x7f0000001740)=""/175, 0xaf}, 0x4}, {{&(0x7f0000001800)=@nfc_llcp, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001880)=""/204, 0xcc}, {&(0x7f0000001980)=""/181, 0xb5}, {&(0x7f0000001a40)=""/175, 0xaf}, {&(0x7f0000001b00)=""/57, 0x39}, {&(0x7f0000001b40)=""/209, 0xd1}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/175, 0xaf}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/69, 0x45}, {&(0x7f0000001e80)=""/74, 0x4a}], 0xa, &(0x7f0000001f80)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002f80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003340)=[{&(0x7f0000003000)=""/162, 0xa2}, {&(0x7f00000030c0)=""/239, 0xef}, {&(0x7f00000031c0)=""/55, 0x37}, {&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/125, 0x7d}], 0x5, &(0x7f0000003380)=""/79, 0x4f}, 0x6}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003400)=""/210, 0xd2}, {&(0x7f0000003500)=""/117, 0x75}, {&(0x7f0000003580)=""/130, 0x82}, {&(0x7f0000003640)=""/120, 0x78}, {&(0x7f00000036c0)=""/215, 0xd7}, {&(0x7f00000037c0)=""/24, 0x18}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/213, 0xd5}, {&(0x7f0000003940)=""/20, 0x14}, {&(0x7f0000003980)=""/102, 0x66}], 0xa, &(0x7f0000003a80)=""/20, 0x14}, 0x3}, {{&(0x7f0000003ac0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003b40)=""/66, 0x42}, {&(0x7f0000003bc0)=""/171, 0xab}, {&(0x7f0000003c80)=""/196, 0xc4}, {&(0x7f0000003d80)=""/219, 0xdb}, {&(0x7f0000003e80)=""/15, 0xf}, {&(0x7f0000003ec0)=""/87, 0x57}, {&(0x7f0000003f40)=""/150, 0x96}], 0x7}, 0x7fff}, {{&(0x7f0000004040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004180)=[{&(0x7f00000040c0)=""/144, 0x90}], 0x1, &(0x7f00000041c0)=""/177, 0xb1}, 0x1}, {{&(0x7f0000004280)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005680)=[{&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/13, 0xd}, {&(0x7f0000005340)=""/233, 0xe9}, {&(0x7f0000005440)=""/254, 0xfe}, {&(0x7f0000005540)=""/1, 0x1}, {&(0x7f0000005580)=""/37, 0x25}, {&(0x7f00000055c0)=""/139, 0x8b}], 0x7, &(0x7f00000056c0)=""/245, 0xf5}, 0x6}], 0x8, 0x2000, &(0x7f00000058c0)={0x0, 0x1c9c380}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000005900)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000005a00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005a40)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000005b40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005d40)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast1}}, &(0x7f0000005e40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005f40)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x39f3b50bfa1c5ffa, &(0x7f0000007540)={@local, 0x0}, &(0x7f0000007580)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000075c0)={@local, @dev, 0x0}, &(0x7f0000007600)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000007640)={0x0, @initdev, @loopback}, &(0x7f0000007680)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f00000076c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007700)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000078c0)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008d80)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000092c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000093c0)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000009400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009440)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f000000ae00)={@rand_addr, 0x0}, &(0x7f000000ae40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f000000af40)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f000000b040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f000000b140)={'team0\x00', 0x0}) getsockname(0xffffffffffffff9c, &(0x7f000000b180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000b200)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000b240)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f000000b340)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f000000b440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000b480)=0x14) getpeername(0xffffffffffffffff, &(0x7f000000b580)=@hci={0x1f, 0x0}, &(0x7f000000b600)=0x80) getpeername$packet(0xffffffffffffffff, &(0x7f000000b640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000b680)=0x14) accept4(0xffffffffffffffff, &(0x7f000000b6c0)=@hci={0x1f, 0x0}, &(0x7f000000b740)=0x80, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f000000b780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000b7c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000b800)={0x0, @remote, @initdev}, &(0x7f000000b840)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000cb40)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f000000cc40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f000000cd40)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f000000d700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9a20c405b73c1f80}, 0xc, &(0x7f000000d6c0)={&(0x7f000000cd80)={0x934, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xe217}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1ec, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0xf8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0xfc, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0x1ec, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}]}}, {{0x8, 0x1, r28}, {0x128, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6c1b}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}]}}]}, 0x934}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r31 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r31, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:31 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000640)={0x0, 0x1, 0xffffffffffffffff}) 11:15:31 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:31 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000440)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@bridge_dellink={0x28, 0x11, 0x320, 0x70bd27, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x310, 0x20020}, [@IFLA_MTU={0x8, 0xe, 0xd1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x48, "bf084688f31831ad84ea5e9a7d2457cdb7f61cf58f33cda6948121ee57a6828c940f0952491732f214a6da45c8402a7faeacc2f1f3744ae65efbfe94510a095fcac1ee65d770303f"}, &(0x7f0000000180)=0x50) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x101}, &(0x7f0000000200)=0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0x6003, 0x11e000}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:31 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) getdents(r1, &(0x7f0000000040)=""/127, 0x7f) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000040)=""/58) 11:15:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 407.575692] binder: 29372:29376 ioctl 80dc5521 20000040 returned -22 11:15:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0xc68a59de55a70120) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) getxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@random={'user.', '*nodevwlan0^%#,ppp1-)eth0#}\x00'}, &(0x7f0000000440)=""/50, 0x32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x6, 0x7fffffff, "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", 0xe1, 0x1, 0x100000000, 0x2, 0x8, 0x9, 0x6}, r2}}, 0x120) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x1fffffd) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000480)={0x4, 0x2, 0x5, {0x9cb6, 0x1f, 0x8, 0x1}}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000280)={0x9, 0xeec, 0x6, 0x0, [], [], [], 0x9, 0xfffffffffffffffa, 0x90, 0x15fd, "ae87387a2d097bf83a2b577bf5fc4e5a"}) 11:15:32 executing program 2: r0 = socket(0x40000000015, 0x5, 0xfffffffffffffffe) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r1, @local, @dev={0xac, 0x14, 0x14, 0xb}}, 0xc) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc2c45513, &(0x7f0000000400)={{0x6, 0x0, 0x3, 0x4d1, '\x00', 0x8}, 0x0, [0x3, 0x8, 0x9, 0x2, 0xfffffffffffffff9, 0x3, 0x100, 0x9dad, 0x0, 0x9f, 0x1, 0x4, 0x401, 0x3f, 0x1, 0x800, 0x400, 0xfffffffffffff800, 0x5, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x401, 0x5, 0x7000000000, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x20, 0x7, 0x8, 0x5, 0x1, 0x6, 0x8001, 0x1, 0x95, 0x129, 0x4, 0xdb2, 0x6, 0x219, 0x7, 0x8001, 0x1ff, 0x6, 0x8, 0x4, 0x1000000, 0x100, 0x8, 0x1000, 0xb6, 0xfbb, 0x8, 0x7, 0x0, 0x60000, 0x6, 0xef, 0xff, 0xfff, 0x6, 0x100000000, 0x6, 0x9, 0x8000, 0x7fff, 0xb427, 0x0, 0x4, 0xe6, 0x7, 0x2, 0x0, 0x3, 0x5, 0xca, 0x100000001, 0x3, 0x3, 0x80, 0x6, 0x80, 0x2, 0x1000, 0x0, 0x9, 0x2d07, 0x8, 0x3f, 0x3, 0x7, 0x3, 0x7f, 0x101, 0x1f, 0x9, 0x77f3, 0x5, 0x7, 0x1, 0x5b5702f4, 0x7, 0x100000001, 0x1, 0x790, 0x3, 0x9, 0x63, 0x691, 0x19eeb81e0000, 0x81, 0x3, 0x8, 0x4, 0xffff, 0x100, 0xee, 0x5, 0xf3, 0x2, 0x40, 0x7, 0x8], {0x0, 0x1c9c380}}) 11:15:32 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2e9906ab0613003940b67c2e83486a739f1eab8a1f5b94ed13540a56bb0be368ad5a2db00602958a80ef9c3ebf9fdc5cf8640c3ada9e825354203e836addca837794b9fb5d3b04fc280bb67330383b0239efd7fdb1d3b8f98aa66833d595e532efa94c535672238a6b59c4f3d7e5d938246435ada9386500b2044f79010000000000000044ff595c2419a7d7e88648dc1169ecc72dd326a774d281b0b0562fb899021ee7fd972d3e0dabee6fb62304d2d6f6ba51a5e306cb08bd"], 0x10}], 0x1}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x4) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x8000) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xb87c, 0xc0100) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000640), &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1, 0x7fff, 0x8, 0x9, 0x0, [{0x2, 0xe132, 0x3, [], 0x6}, {0x100000001, 0x9, 0xfffffffffffffeff, [], 0x3}, {0x9671, 0xfffffffffffffbff, 0x7}, {0x6, 0x100000001, 0xffffffffffffffe9, [], 0x2}, {0x9, 0x6, 0x9, [], 0xfffffffffffffffd}, {0x0, 0x5, 0x5dde, [], 0x3ff}, {0x20000000000000, 0x7, 0x40, [], 0x8846}, {0x8, 0x9, 0x7ff, [], 0x8}, {0x200, 0xbe97, 0x3, [], 0x2b}, {0x1, 0x4, 0x5, [], 0x1}, {0xfffffffffffffffd, 0x8, 0x81, [], 0x43}, {0xb005, 0xfffffffffffffffc, 0x800, [], 0xdcda}, {0x2, 0x4, 0x1, [], 0x80000000}, {0xa175, 0xffffffffffffffc1, 0xae, [], 0x7fff}, {0x8, 0xfffffffffffffc00, 0x101, [], 0x4}, {0x81, 0x0, 0x81, [], 0x8}, {0x5, 0x3a8}, {0x10000, 0x2, 0x0, [], 0x101}, {0x4, 0x7, 0x0, [], 0x7}, {0x5, 0x7, 0x5, [], 0x1ff}, {0xfffffffffffffff8, 0x1, 0x5}, {0x731, 0x9, 0x9, [], 0x1}, {0x8d, 0x5, 0x3, [], 0x5}, {0x8, 0x2, 0x6, [], 0x8000}]}}) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 11:15:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e63fc40"], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) write$ppp(r2, &(0x7f0000000080)='$', 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200001, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x2, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:32 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffab) 11:15:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc074510c, &(0x7f00000001c0)) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) time(&(0x7f0000000080)) [ 407.782385] binder: 29418:29422 unknown command 1090282254 [ 407.808789] binder: 29418:29422 ioctl c0306201 20008fd0 returned -22 11:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x541b, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 407.842777] binder: 29418:29453 unknown command 1090282254 [ 407.872783] binder: 29418:29453 ioctl c0306201 20008fd0 returned -22 11:15:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x0}) r5 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x810, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x88, 0x0, &(0x7f00000002c0)=[@acquire, @clear_death={0x400c630f, 0x0, 0x4}, @register_looper, @enter_looper, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x50, 0x38, &(0x7f00000001c0)=[@fda={0x66646185, 0x1, 0x1, 0x1b}, @flat={0x776a2a85, 0x100, r2, 0x1}, @flat={0x73682a85, 0x1, r3, 0x3}], &(0x7f0000000140)=[0x38, 0x38, 0x60, 0x58, 0x0, 0x38, 0x78]}}, @acquire, @free_buffer={0x40086303, r4}, @free_buffer={0x40086303, r5}], 0x6a, 0x0, &(0x7f0000000380)="8f5af58a77078be9a7ac38c0a643948f1dfeb74a8fb2a054ec2f0f74b9b208ef30f3d8b5597921bc7f007f7650dfb92aa1719aa6354000da59ebb2634a89a30ac4a7951bb64d46b819907023699327ed13c7e279731c27611a550fd4049489b56e3b61477cce7bad56c5"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e230c40a9010f6e94801d26c73cd827d8f1ca49821f7d7422e5787cf2fa70bfeadae0a7206cf8a84b3404e118c101588f79f25d6bce1974"], 0x0, 0x0, 0x0}) r6 = dup3(r1, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 408.042149] binder: 29524:29525 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 408.056066] binder: 29524:29525 ERROR: BC_REGISTER_LOOPER called without request [ 408.075247] binder: 29524:29525 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 408.084263] binder: 29524:29525 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 408.093723] binder: 29524:29525 got transaction to invalid handle [ 408.100391] binder: 29524:29528 unknown command 1074537230 [ 408.106121] binder: 29524:29525 transaction failed 29201/-22, size 80-56 line 2896 [ 408.114061] binder: 29524:29528 ioctl c0306201 20008fd0 returned -22 [ 408.126301] binder: 29524:29525 ioctl 40045532 20000040 returned -22 [ 408.136142] binder: 29524:29525 tried to acquire reference to desc 0, got 1 instead [ 408.136152] binder: 29524:29528 tried to acquire reference to desc 0, got 1 instead [ 408.136231] binder: 29524:29528 unknown command 1074537230 [ 408.149227] binder: 29524:29525 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 408.153159] binder: 29524:29529 ioctl 40045532 20000040 returned -22 [ 408.158027] binder: 29524:29525 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 408.181090] binder: 29524:29528 ioctl c0306201 20008fd0 returned -22 [ 408.187674] binder: 29524:29525 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 408.196167] binder: 29524:29525 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 408.208083] binder: 29524:29525 got transaction to invalid handle [ 408.214409] binder: 29524:29525 transaction failed 29201/-22, size 80-56 line 2896 11:15:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) syz_execute_func(&(0x7f0000000040)="65d9f7f36c64f20fba79aa65660f632e66f029030f9b3e0f381ed3c4c1d173f2e9f00fc1208fea7810af293f00003d000000") splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:32 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 11:15:32 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) gettid() connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @remote, 'veth1\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000040)={@empty, @remote, [], {@generic={0x8863, "94a7030000e8"}}}, 0x0) 11:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:32 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x800, 0x408000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4f96, 0x6, 0x8}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1, 0x1000, "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"}, &(0x7f0000001240)=0x1008) r2 = socket$inet(0x10, 0x2000000003, 0x0) syz_open_dev$swradio(&(0x7f00000012c0)='/dev/swradio#\x00', 0x0, 0x2) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'ipddp0\x00', 0x1001}) recvmmsg(r2, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:15:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) r2 = dup3(r1, r0, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=""/79, 0x4f, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) ioctl(r0, 0x800c4151, 0x0) 11:15:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x5450, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:32 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80000, 0x0) recvmsg$kcm(r0, &(0x7f0000001640)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000180)=""/146, 0x92}, {&(0x7f0000000240)=""/158, 0x9e}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/5, 0x5}], 0x9, &(0x7f0000001600)=""/42, 0x2a}, 0x10000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:32 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200001, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000114f0c8f667f88d41bb5af33a88bb9c68d1f71ce3885dab9999afd80934d979d9148a57fea658647525bbe4504710e377f2a110908b834bf964b58b707df320e52c38b1f6ba0887ef7e6cd7aea994cc28d101add500bc9dc675c81d6fa2a34cf6d8ce25ac98daf40b88115483dc251e0ee92cad8f539f8ac746c14da4e2d3bf36e12712431f40b344328812e7b9ff1ea774719780ad51fde343f64f6ec449e628090b056b63e9fc7a50384227e294dca5e04bf1d3656906155a7eb31b738"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x3}}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000480)=""/4096, &(0x7f0000000000)=0x1000) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) [ 408.671974] binder: 29631:29632 unknown command 0 11:15:33 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x7fff) write$P9_RFLUSH(r1, &(0x7f0000000300)={0x7, 0x6d, 0x2}, 0x7) write$P9_RWSTAT(r1, &(0x7f0000000340)={0x7, 0x7f, 0x1}, 0x7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f00000000c0)=0x8) ioctl$NBD_DO_IT(r1, 0xab03) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x401, 0xa5, "563557ced6fd5e98c47498e7821047f6af2374435abffc87aac92b9f5d9f694a5c0a4fc234baeabb5ad813da171202d6876f9c6ad660efe19d6faaaf1ccd18ce508689e1e09d88e05852346d37f8aaed3477f7180a5c054321bcb2547f794cfc8b175587decea737a3ed8df0cfbb40bb95a2434aa495ac8f99895cb34c051d4650b2eb3b4e97cb77b32716297cbeacb3b89c1b0f9c8117f57db3d66eac2a4fcf7ae47d34af"}, 0xad) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 408.705630] binder: 29631:29632 ioctl c0306201 20008fd0 returned -22 11:15:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000680)=0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x6}, 0x80000000001}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18, 0xd, 0xffffffffffffffff}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000380)={0x8, 0x101, 0x0, {}, 0x4, 0x35}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000440)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000480)={&(0x7f0000012000/0x4000)=nil, 0x4000}) r6 = request_key(&(0x7f0000000700)='trusted\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)='/dev/audio\x00', 0xfffffffffffffff9) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r6, r7) openat$cgroup(r1, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8004700b, &(0x7f00000008c0)) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40186417, &(0x7f0000000640)={0xffffffffffffff81, 0x5, 0x7ff, 0x5, 0x10, 0x4}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e27, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x100000000000ff, @mcast1, 0x9}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x28c) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0086418, &(0x7f0000000580)={0xa, 0x2, 0x9, 0x7cd78c23, 0x0, 0x7f}) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000005c0)={{0xa, 0x4e23, 0x9, @ipv4={[], [], @multicast1}, 0x26}, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x1c}, 0xffffffff}, 0x9, [0x6, 0x9, 0x9, 0x5, 0x69, 0x4, 0x1, 0x400]}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0xfffffffffffffe53) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) [ 408.767189] binder: 29631:29632 unknown command 0 [ 408.786645] binder: 29631:29632 ioctl c0306201 20008fd0 returned -22 11:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x5460, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:33 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x5}, 0xfffffffffffffe65) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x0) mq_timedreceive(r1, &(0x7f0000000400)=""/44, 0x2c, 0x5c25, &(0x7f0000000440)={0x0, 0x1c9c380}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc2c45512, &(0x7f00000000c0)={{0x9, 0x1, 0xec, 0x8000, 'syz1\x00', 0x7}, 0x0, [0x6, 0x10001, 0x2, 0xfff, 0x2, 0xff, 0x3f, 0x9a, 0x4c, 0x7adb, 0x0, 0x7fff, 0x6, 0x2, 0x8, 0x200, 0x7, 0x113, 0x100000001, 0xbb8, 0x4, 0x2, 0x28, 0x8001, 0x8001, 0x7, 0x81, 0x200, 0x7fffffff, 0x1, 0xffff, 0x3, 0x800, 0x1f, 0xcc, 0xffff, 0x4, 0x5, 0x52e, 0x68d4, 0x3, 0xfff, 0x6, 0x5, 0x1, 0x8, 0x2, 0x40, 0x9, 0x53cf, 0x0, 0xe8, 0xd5e2, 0x401, 0x6, 0xd0, 0x7d, 0x7, 0x9, 0x5, 0x985, 0xfb0, 0x1, 0xffffffff00000001, 0x0, 0x1, 0x4000000000000, 0x3, 0xfb0, 0x7, 0x7ff, 0x2a, 0x367c44d9, 0xfff, 0xbb, 0x5, 0x0, 0x1, 0x80000000, 0x7ec0, 0xbf93, 0x96, 0x2, 0xffffffff, 0x4, 0x7fffffff, 0x8, 0x9, 0x1, 0x4a240, 0x2c80be4, 0x6d, 0x16, 0xff, 0x9, 0x9, 0x1f, 0x5, 0x565, 0x8001, 0x7f, 0x1, 0x2, 0xd8, 0xfffffffffffff628, 0x3ff, 0x1ff, 0x3f, 0x8, 0x118, 0x2, 0x0, 0x165b761f, 0x4, 0x8, 0x2, 0x1f, 0x80, 0x28d9993a, 0xfab, 0x9d7, 0x0, 0x7, 0x5, 0x8, 0x3, 0x20, 0xfffffffffffff4f7], {0x77359400}}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000600)) syz_extract_tcp_res(&(0x7f0000000340), 0x7fffffff, 0x7fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000480)={@remote, 0x80000001, 0x1, 0x0, 0x3, 0x2, 0x8, 0x1}, 0x20) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x10321) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000900)=ANY=[@ANYBLOB="022d0004000000000000000008ce6a2e3a0000020082f83f79e1718aa0365e575482fad20b60ae8558c902511b0d14d0f18a026f394c75ae55d43de476df3385ea8002861565ef85fa9d58c9f9772bf4ceafefeae924ee3cd95ac323c4cec13eeac29a62641dca740e61fd5fcabcb38542c2c26f44a700cd0fcf3a146093bba6ea684202c458ac7d30087359fbef91fa37ddf934f0a62fb4ed6e3ed59c9c371d242a813a4aa8c06f3791080ffe4107205e27d3a83606b31e33a512e17ae932ac4ddf694e8022b8e34dfa1aa727e77b3b59f3c02174a645bad3805af991bbeb85612b7acfe2073094d9368414927a886969d0e00c7aef9a2b43a90c2fc68b2135270dd6ff03ffe9405e3cc769f71c7e06d6d61595d9e290ebf66cbe34a1e4cacc10104db85910fe407528a4dd3f34a79e8a310b8599aebcfeb3484f6ff761a4ab38f78e4db919c5f080c00f5a192637a100c31d2100c9170828e8e067b170d2805c26c26e1b5d9814fe81c7214cbe9a72cbc33cbec383fe820a90e2ec7c0c5f33c00dec01c0a65e08fe1f77dc79ff5950b541702971568303838a505bebdc7377fb8b44f894e59ca3f14e95b96a5a3eb0d416debc9646928bf15a80b9510c7e937938e42d795905e81a6ce6d99ac9a383964d16f36b3db80acf3f32ae0c890774dd09a7a22c074c0e043b65473613ea570a2b1669cf93243f140d3723486802898ecf1ec67d5fd2a5e1792beddc810f4490a55e9deea8fd53be587dbb240dd25a66243e6a4a7952f64c39bfcfaf23264959ace7a79eb1e7b783546c0505b01b148d46658bc0afa8bd70138bd20ac36474bfccfae582ca5f80fb467d512972f0ca66"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x2) io_setup(0x3ff, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x1, 0x0) io_submit(r5, 0x1, &(0x7f00000004c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff7, r0, &(0x7f0000000800)="89bf0b9ed2acddc4941d6819e7db5750ef1a1492c8756947079c8785556cb05e7d9cbcdc7b80adaca98fb0253d6606076d13a20a5a03c165c38150b6c4b90ac0471492b35ec872719e1481045f2bb54569a493262071e38c9a44a4396bb4b55ac1a7742e79a21f101647534f336326a75bf574760e2f4a60b0fa3d7db2d59b64f18faa0a8f83406fd0719057060ca11dc4f580300eaac8d4efb4728df6a04779d2d20d8294ca5da776c29605b8b6db7c5a77bd18d5f781699ddfbaf6be72d982c1f538d48e16df07cfa12904144a79af51ba2456af16a4542c45d50447bc359669144c", 0xe3, 0x4, 0x0, 0x2, r6}]) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="5173446c5dbf4980d669eda6440000000000000000"], 0x8) getpeername$inet(r1, &(0x7f0000000580), 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000400)=0x8, 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440b9000a0000d6b89fff5baf"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b0f, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 409.013803] binder_thread_write: 2 callbacks suppressed [ 409.013819] binder: 29715:29723 Acquire 1 refcount change on invalid ref 655545 ret -22 [ 409.052642] binder: 29715:29723 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:33 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, r1}, 0xc) setsockopt$packet_buf(r0, 0x107, 0x1f, &(0x7f00000001c0)="443a3437ee267fa838f9d0c0c99c43ca69f4097339fa61d297cfab5a1273fe02be269117e1636e8ce9646dff4ce9a72a0600a73decd0b0bbea66e03170ba78a1da9bef75cb48071cbfd531bc0f7513942cc6302276c3c04fcf102c5a5c501c", 0x5f) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b2b, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 409.061755] binder: 29715:29723 Release 1 refcount change on invalid ref 0 ret -22 [ 409.072488] binder: 29715:29723 Acquire 1 refcount change on invalid ref 655545 ret -22 [ 409.094297] binder: 29715:29771 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 409.104884] binder: 29715:29771 Release 1 refcount change on invalid ref 0 ret -22 11:15:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000140)={0x7, "08ec25fac6dbf16e8749e0132f8b3625dd0efc697e02ec032dd54f45d3f433cf", 0x20, 0x3, 0x100000000, 0x14, 0x4}) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:33 executing program 3: r0 = memfd_create(&(0x7f0000000040)='ppp1!\x00', 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/21) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1000000200000581) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(r3, &(0x7f0000000000)={0x7}, 0x2dd) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000080)={0x80000000, 0x100000000, 0x7, 0x2}, 0xffffffffffffff19) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000200)={0xdf, @time={0x77359400}}) 11:15:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x218000, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0xffffffff, {0x9, 0x7, 0x1000, 0x1, 0x8, 0x81}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x400) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x24500, 0x0) write(r0, &(0x7f00000001c0)="fa95e15a11a3d9a46d79d9f124b918ef1a5060a2d8ac14a406843705b2261eec3b60165faf997031b509b1d577e47421bb7b10828669c5cf963ccc227759752196528d564128abb358ec52ccfa48dcdbc9853a3436dc68c34e7510681cf4e6f17778d9a797400937d18612555cc9d4ea0830", 0x72) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:33 executing program 2: r0 = socket(0x9, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'system.', 'udp:syz1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2}}], 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 11:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b35, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x40049409, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:33 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8d4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11adbbcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x83, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffff8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0xd0}}, 0x4001) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r1 = gettid() ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x15) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) 11:15:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000080)=0x10004) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0xc4080, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) 11:15:34 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xd0, 0x4200) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3acf}, 0x1c) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x25d609f5, 0x12) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4000, 0x0, 0x4fe359ab1029959b) 11:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x4020940d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 409.701226] binder: 29927:29945 ioctl 40047459 20000080 returned -22 [ 409.745710] binder: 29927:29945 ioctl 80047437 20000100 returned -22 [ 409.797834] binder: 29927:29954 ioctl 40047459 20000080 returned -22 [ 409.998628] net_ratelimit: 15 callbacks suppressed [ 409.998635] protocol 88fb is buggy, dev hsr_slave_0 [ 410.009184] protocol 88fb is buggy, dev hsr_slave_1 11:15:34 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x10001}) 11:15:34 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 11:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x402c5828, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:34 executing program 2: r0 = socket(0x40000000015, 0xe, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x60000, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000200)=0x8) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:34 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@can, &(0x7f0000000080)=0x80, 0x80000) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000400), 0x2) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x1, 0x7, 0x0, 0x9, 0x2}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={r4, 0x3c, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, [], 0x12}, 0x7fff}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0xffffffffffffffa1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x6ec1199b, 0xb, 0x3, 0x9, r5}, &(0x7f00000001c0)=0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) accept4(r0, 0x0, &(0x7f0000000000), 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0xd]}, 0x350) 11:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x402c582a, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x400, 0x6, [0x200, 0xd858, 0x1, 0x8, 0x2, 0x9]}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r3, 0xdc, &(0x7f0000000280)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x7fffffff, 0x111, @remote, 0x2}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x3}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x1b, @ipv4={[], [], @broadcast}, 0x9}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x7}, @in6={0xa, 0x4e20, 0x2, @remote, 0x4}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000140)=0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:34 executing program 2: r0 = socket(0xc, 0x80803, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x8}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:35 executing program 3: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x408080) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0x10001, 0x8) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x10001, 0xfffffffffffffff7, 0x3, 0x1020000000000, 0x27}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={r5, @in={{0x2, 0x4e23, @local}}, 0x5, 0x10000, 0x0, 0x0, 0x3}, &(0x7f00000003c0)=0x98) sendto$unix(r2, &(0x7f0000000400)="0e99ead70fcd6968e80a632fdebfaaf67b15c9068b74b894926079632f6608e1e69b305bce", 0x25, 0x40, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)={&(0x7f00000004c0)='./file0\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f0000000540), 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x2b}, 0x3ff}, r7}}, 0x38) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000640)={r6, 0x8b, "b045f9d0a2472d5938e75c26d36bc8713206d9ad027a42f91c32705849231a66b3824e20640992adcd04328bfc0146beabb5b9cfc0f4c39a4b90dcd3b7a75f384d75e7b6fac426333b98a0fa45a4379015462eba40f934e812f1b352fa64594d8d8e3e4a9d15af334b32e352d659e03e790252c0cd135b3edd0dd621a60be6c45fd6746157362e5986dd8f"}, &(0x7f0000000700)=0x93) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000740)={0x80, 0xb81, 0x1, 0x1, 0x1e, 0x5}) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f00000007c0)=r2) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000800)={0xe4, 0x29, 0x2, {0x3, [{{0x81, 0x0, 0x1}, 0x7fff, 0x6, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0x0, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x1}, 0x7ee, 0x9, 0x7, './file1'}, {{0x10, 0x2, 0x3}, 0x20, 0x8001, 0x7, './file0'}, {{0x10, 0x2, 0x3}, 0x7, 0xffffffff, 0x7, './file0'}, {{0x90, 0x0, 0x7}, 0x548, 0x5, 0x7, './file1'}, {{0x88, 0x3, 0x5}, 0x100000000, 0x81, 0x7, './file0'}]}}, 0xe4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000900)={r8, 0xab, 0xd7, 0x9, 0x6, 0x630a24c4}, &(0x7f0000000940)=0x14) sendto$rxrpc(r2, &(0x7f0000000980)="98c77a01afd17bced058edc61815cad86b74679bd29462b34f88f71d5c173564351f2578b9fb8eff13043252e24894da2c11ae046b429247075896562f01a4d5e6362913745b03854f078e592ae288e7838e5b769bc3deb8af9b7b81c21e0ff6b9c09714060063064c8cf2effc693c4738baf614ed836f", 0x77, 0x4801, 0x0, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/hwrng\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/ptmx\x00', 0x80800, 0x0) r10 = add_key$user(&(0x7f0000000a80)='user\x00', &(0x7f0000000ac0)={'syz', 0x2}, &(0x7f0000000b00)="f472a50bb078d09fd5fb9aa9734b521c36678fe1f50460091c424cf67dd7a168f1c38893082026786337cbd89cfc7842d07709ce0208952300de380875a7d2073d934d40d156eb38d54f90fd39a7f114a43d917fdf7b8f015de7b3ef8e847b9210af806302cc279ed887d7305aee5872c4b95af0c148723a50d8cd9d425a11ff14b9b0d51f45ba7c25f1a0b582b877f8e3a405fafab881c8a9fa846ff129c82ee80160b7e54fd8ee15a1644344cd56d550f399d6e4b65d318248015291bf43b2be72485abbf7eb59f58ca3463a6a1d2e30dad3c8dc516e4362d340ced33b06e13a37b9f690", 0xe5, 0xffffffffffffffff) r11 = request_key(&(0x7f0000000c00)='user\x00', &(0x7f0000000c40)={'syz', 0x2}, &(0x7f0000000c80)=']mime_typewlan0+\x00', 0xfffffffffffffff9) keyctl$unlink(0x9, r10, r11) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000cc0)=0x599, 0x4) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000001e00)={0x2, 0x1, &(0x7f0000000d00)=""/168, &(0x7f0000000dc0)=""/4096, &(0x7f0000001dc0)=""/13, 0x3002}) r12 = getpid() perf_event_open(&(0x7f0000001e40)={0x3, 0x70, 0xfff, 0x3, 0x6c9, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x2, 0x6, 0x1, 0x100000, 0x10000, 0x8001, 0x8, 0x5, 0xffffffff, 0xffff, 0x81, 0x80000001, 0x401, 0x100000001, 0x81, 0x2, 0x3f, 0x400, 0x7, 0x8, 0x839, 0x6, 0x6, 0x5, 0x6, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x1, 0x5, @perf_config_ext={0x50d, 0x4}, 0x80, 0x1f, 0xdd, 0xa, 0x6, 0x8, 0x9655}, r12, 0x9, 0xffffffffffffff9c, 0xb) 11:15:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000001c340000ffff"]) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7d, 0x0, [0x10000000048f]}) [ 411.038642] protocol 88fb is buggy, dev hsr_slave_0 [ 411.038712] protocol 88fb is buggy, dev hsr_slave_1 [ 411.043844] protocol 88fb is buggy, dev hsr_slave_1 [ 411.049033] protocol 88fb is buggy, dev hsr_slave_0 [ 411.059026] protocol 88fb is buggy, dev hsr_slave_1 11:15:35 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000040)='hash\x00', 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) 11:15:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x1f7, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:35 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @empty, 0x4}, 0x1c) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737a2435b77374656d2e4000748b5b2ff1927069af7e51982ba4483908fbda91ebad2094119dfa9a5028397e505ad399b5aff50e8448000000"]) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0xc020660b, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:35 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), 0x4) 11:15:35 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) r2 = syz_open_dev$audion(0x0, 0x5, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000400)={0x5, 0x2, 0x4}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="120007da939ec24a07e5ed31d190602dc846fe69d04b"], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x46b) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002100)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000002200)=0xe8) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x7f, 0x4) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x89, 0x0) getgroups(0x4, &(0x7f0000002240)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff]) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) tee(r0, r1, 0x10e, 0x8) lstat(0x0, &(0x7f0000002580)) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x1, 0x0, 0x80000000, 'queue1\x00'}) getpgrp(0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xfffffffffffffe97) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) r4 = dup(r1) write$P9_RCLUNK(r4, &(0x7f0000000080)={0x1bd, 0x79, 0x3f000000}, 0xffffffffffffffc4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000440)=0x4) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) 11:15:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xc5, 0x4000) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20395dd4) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000180)=""/83) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0xba05}, 0x8) 11:15:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x8}, 0x10) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 411.310933] binder: 30212:30223 ioctl c0306201 20000040 returned -14 [ 411.343420] binder: 30212:30223 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:35 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x420, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x7fff, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 411.379207] binder: 30212:30223 Release 1 refcount change on invalid ref 0 ret -22 [ 411.422561] binder: 30212:30223 ioctl c0306201 20000040 returned -14 [ 411.453295] binder: 30212:30242 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:35 executing program 3: r0 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x4, 0x0) pipe(&(0x7f0000000880)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x9, 0x10001, 0x8, 0x7}) seccomp(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x10200000006}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 11:15:35 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0xfffffffffffffffa, 0x0, 0x8001}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @local, 0x996}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) ioctl$RTC_AIE_ON(r1, 0x7001) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 411.486705] binder: 30212:30275 Release 1 refcount change on invalid ref 0 ret -22 [ 411.518569] protocol 88fb is buggy, dev hsr_slave_0 [ 411.523718] protocol 88fb is buggy, dev hsr_slave_1 11:15:36 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0xfc44) r1 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='ppp1cgroup\x00', 0xfffffffffffffffa) keyctl$invalidate(0x15, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000016c0)={0x0, 0xee, "a0f71547e4e43b47131bb1838c3c30ba6aabf8fee6f64cde93ffb40010991a875bfa1579d5eced8e59d348f3ffaf7d77b7a9ee5fd0b3712781f21b5d17a5199d71d662e94659b9a43eacd448fed45e217744088b1d688aad336826d460d3fe853ab00e6fdfdcaac2edcc19882fab3cde1818d44af50f621a257a22e078f3e54b795c745f56070e4f6473d46eee531ac3ff605fc1b81206d0e04952a94f8aa59ffe827a5d09096907e0a8d0c1be19395da330af35b700f3820d34102a34eeb3fd46291120ae1f2e12e7437069cb205ab84db406d9e3d382dc181c541d310b58332f5404790b3647da4c9e1dc37093"}, &(0x7f00000017c0)=0xf6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001840)={0x0, 0x2c, &(0x7f0000001800)=[@in6={0xa, 0x4e23, 0x6, @empty, 0x6}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000001880)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000018c0)={0x0}, &(0x7f0000001900)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001bc0)={0x0, @in6={{0xa, 0x4e22, 0x81, @mcast1, 0x3f}}}, &(0x7f0000001c80)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001cc0)={0x3, 0x0, 0x1, 0x6, 0x0}, &(0x7f0000001d00)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001d40)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0x100}}, 0x406, 0xffffffffffffff54, 0x28b3, 0x0, 0x8}, &(0x7f0000001e00)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002080)={0x0, @in={{0x2, 0x4e22, @local}}, 0x1ff, 0x100000001, 0x6, 0x0, 0x2020000000000}, &(0x7f0000002140)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000003880)={0x0, 0x0, 0x101, 0x9}, &(0x7f00000038c0)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000003940)=[{&(0x7f00000001c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="9e5294a7121dacd19d39f410c6f9b2486529890f7bee1b2230e12157a8bb6e6506f4f37fad13478b108a9c245b848a6130d607b61f6bf6135f9e4d6333d5b68e8e062640ed14d27abab4a21481f7af0f89e64daf6bb07cae70f652471811202b08a50966cd967da412e56fbc220f56de0f59566377b8168ec05ff495257847d3fdacd7c79fb27a017701f1284082dbc9db5a2f74d0fa356e482ff8b720f336b258e1de5e8278a27f9b9968fde92e", 0xae}, {&(0x7f00000012c0)="480d39bbf17d874057b28986a30a22cc83fe54f6accd0af7d3b27f00c20af0738303e3f76abdfee7c21b5d3e20a562176bf0d014df760609b8b7ea53c618dd72499539275202187c295b241071a77010a1bad3860be6573ac66862f4492ac149db3682c7699b1f7eb2b386667028e2ceca7367dcc516434ed1d26a959b238447cfc681e5d2", 0x85}, {&(0x7f0000001380)="f2eba5aaf06a9230e292c351f8cbbdb3862bb8d4c8e4561b580349e3d7cc588c778812a3b005619f0cbc680243682c7bb7d0cdfc9462fb60bc596e970e6f9c7727c38e70b1febf41cb1dd1accf8d1d6853ed8402b91eaf0896e35e9102eb143c754ff76d30b62cd4d9bc100752021dfa800959ab20f27c11579aa3f3be2d3536012be302b6d15f828f4535dc738f4b7b63de9536c6177b6f5e35d9dbefe21157a35200ef780b9c4c9ff95308dc7b41700b85ba52d9b4a0b18647f6734aa51f2689aaf3d58429367f818a8b7aa0", 0xcd}, {&(0x7f0000001480)="e0a95ac153b9816fe43521a52aa10906fb322b57a9e3d086a82ccd01a0a6d1b1abe24032c14e3aa71475c25cd31c1acdf7d1fe1073bf9d05cd2b6450584845e78c7238c06564e2c8c5fc27579f9f658dbda6db90d47682a9af0016678fa96a9181884e0c55f96a8b291c37571e65980e9d0f78896bf968ef533b0682df998027134b1e12fb122f9549823c3ca3e3edbbb5b62059b848adb52fd7d173647ca5c8de89d0ee1c40", 0xa6}, {&(0x7f0000001540)="8827c0830172144dc7216acc4cfb221bbe683a7163401aa6bd4df25994e0b9d9f3", 0x21}, {&(0x7f0000001580)="0150aa6ff9040d7e9a14274726d48b55f0591249cb9383cb41e6f67c14c94e3e4bc47169c2a6ae888b0d8290e5ca6e16c940b98e87932126f3ae7e8cbb457df728a462586a30fecc7585056e382cce723499ddb97a33ed619957538a8b2338bf9f8e94cd092061d82465a698e589a2d3d925d384e225c4285132e69b0752b65271c56f42b083a968d67484829882333ef7d92cf61f9a24ba96bf5edf31c87f03af281c4507eebf3538c734ff90f9fd6d62b46ae008a414acef4137b6d521d99a91677212b9f60f7c8e4211280cd33508609674e76e8be93e0f6305b979baa93fbd091d50f12c81f37ee04ccf898a6b28af7c", 0xf2}], 0x7, &(0x7f0000001940)=[@dstaddrv4={0x10, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @init={0x14, 0x84, 0x0, {0x7, 0x9, 0xc39, 0x7}}, @dstaddrv6={0x1c, 0x84, 0x8, @mcast2}, @dstaddrv4={0x10, 0x84, 0x7, @local}, @dstaddrv6={0x1c, 0x84, 0x8, @mcast2}, @sndrcv={0x2c, 0x84, 0x1, {0x7f, 0x8, 0x8200, 0x3, 0xfffffffffffffffe, 0x6, 0x7, 0x10001, r3}}, @sndinfo={0x1c, 0x84, 0x2, {0x6, 0x202, 0x0, 0x2, r4}}, @prinfo={0x14, 0x84, 0x5, {0x20, 0x80}}, @sndrcv={0x2c, 0x84, 0x1, {0x3, 0x8001, 0x8000, 0x3, 0xffffffff7fffffff, 0x5, 0x4, 0x3, r5}}], 0xf4, 0x4000000}, {&(0x7f0000001a40)=@in6={0xa, 0x4e21, 0x6, @ipv4={[], [], @empty}, 0x7}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001a80)="e3d8a09183a36bae9ae473b5e7b9f61f1f9744ce50e4f87bc69491945f33bb4292089a62044e0a852c9e21de715020f06c6dd5145ca7c5779c47a7aa0cc3b85431d62c0248efa306ddb28ee6a18cc36adf9d4c3c8658da5d3b82fd85b422d2e4c6dabfd245754e99ed55aed151f803c153a44478fc1958c74444da2d3055fcb57f14f9d20f2d9a24018407fe04284c35d57bd1c3e74bd238daf8174087772e019ea7ef26337d2e90bdeb3ccb87d7e92388189bab4199ba9dca9100c05b8b6213dba21f076fb1bbbec8015eb040b18530cd2afca60124346eaa5571ba3d08d7c3562b8687ae99f3194e", 0xe9}], 0x1, &(0x7f0000001e40)=[@sndinfo={0x1c, 0x84, 0x2, {0x2c, 0x4, 0x401, 0x3ff, r6}}, @sndinfo={0x1c, 0x84, 0x2, {0x7, 0x202, 0xb1b, 0x0, r7}}, @sndrcv={0x2c, 0x84, 0x1, {0x9, 0x282, 0x200, 0xb82, 0x6, 0x8000, 0x5, 0x1b, r8}}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x7ff}}], 0x78, 0x800}, {&(0x7f0000001ec0)=@in6={0xa, 0x4e20, 0x2, @empty, 0x100000000}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001f00)="6492ab43ec1c9f1f871033bc038ba5356135", 0x12}, {&(0x7f0000001f40)="22a82e7f9829585c11c2ac95739db3f4548c40bb2dd483f08f1fc61021d28b16c5d74f23bb7a582a6a3f2b22872ce500de18e2b912e0712f49d65d32edbfca207b614bcca716855a737a66d8fa0feb8702396906e7fcd1a933e1cbf877cead5d473c206d13c1b3bd117f54c9bd7975812fc37013e58792e6ee859b63abd40623a321f19a29975b83f97385e0d45da24de50f96a78101b070d0b9867418d342dde17774e1cd5495de42ba99a48642b8e1696770b814f8b8c7b114ea2ef4d29bd861095c", 0xc3}], 0x2, &(0x7f0000002180)=[@authinfo={0x10, 0x84, 0x6, {0x6}}, @init={0x14, 0x84, 0x0, {0x1, 0xffffffff, 0x2293, 0xffffffff}}, @sndrcv={0x2c, 0x84, 0x1, {0xffffffffffffff00, 0xfffffffffffffffa, 0x200, 0x4000000000000000, 0x1, 0x9e9a, 0x5, 0x7, r9}}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x5}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x80, 0x4}, {&(0x7f0000002200)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000003300)=[{&(0x7f0000002240)="64db0f021f4b4ef17dbaa74d8c50a817573aea34cad8a48ed745baefd25e8f50b00fc205c5bfcccb280ffd683e37f16ab192ea0281b1f063677ea9ce081ef2e7a892268d2d4ce16c8e6088df2ff3f2c63b811bb744e38185a83ec10fea445ee8f69833dee8209e55a6249dd88fc41e0dde72d1a767dbaab2a6404e35304ac58cdd3cf6b49492926c69307e56844c100ac9177b5e83e58a3cf0a3862d1959646cf7514dc6", 0xa4}, {&(0x7f0000002300)="99d7377c6737199f523db6d52a126787c9b59b8880ae261e194788c4f11c745441df2b1ec781cf19e520f88a91448ed32280437df2066ac10791f55b00d6c2eb25e929819f1bf1d377791b871f125eb171f6db267de19c332fc7bcbff0f3def091f4487ab71f89df8027556b2fc82f6c217c947f7e9daf0b237082a52960ec5fd074d723d3d28b7170c1e0589862f7ac8b95498a5fb40ade07f00b05646859ac004eef80e2380e05efb952c6085925c3b01aeba8c5ff9c06b379f8929b0c0da1fafa2a6d8480fd2ae67add87b97a4bcc735ccac7beca2aedb668616b442c48b00755f4255eccd7ccc73c4d0cb03a09ab66ae4712f5cb6519649fa85936f7276cccf5d10dee9dd16e5c25bf0361b19f1c8035af9986c4fed0bf76d7d9241fcccca5c0a85627708cdc7afa7b86f03f2ca12e0b2bae3ace3341468143136bd74e523014206a9d1d8ddfd68f0725e38aa512ba9cb5ed8861c2907f5677b8cd621150e7563c2aac39ebbeeb618fca8b726976c1dfe9ee54732d6f08fbac6a2ebd3896ffae44b31c1943fe4e2577450382db919c3573d38d961549896c3bbd5614af02c4906afba7faba783eb61d524ee15b9a002679cf4f95e4b26acbc854e553a817416ac2393415a8b45eee632d5c73b09c7940b51a3fe30f4ddaf63de24c794617f4825a3305f6bb959f495363ecf61dab1886fec32d7cbfbf745963da3afd1c7639c6372641e9bd2b54e5bb5f9e1a79ac140ab6e0f833fcb965f5599deb814ff4c2a5d288284be30cae31487f4100ca7f73e60ede86723618b9b7f12f1b83d2980a5f8a813387de3d0a5efda19651618b42d49b4e83f781fad628dccd960b383feaf1191c24a10115ce352ca2ca34e9da0583debdd8d2580405742581e600c6aa55edfdb070248d139001863eaebd915b16422b37ba86da4a904381781bc56d017bc5b712ef7e698cc3a5f35bcfb5c620f8a0b7e8dd442eea40fb750d462dd1ec8f48a130efd87464dabf36f71d15c0c993d5ea40d7e321cc25e0938d8e48d28010506388eccb547f0fbb4fd5454326d2ac3e0db9e710d5c385ab4fb7cc45a21df90706e1fb3c82ae78c7206b3460c0cc90246ffc26def071a54d78566bacbb74a73f773b61f55de334437c1318374ec2518c6d9052533999750f9d8dac89b1d2d5680b6dab5e3efd5506c4a26a242e384751717f4d98a143ddb2b73399bebd2e8113e28aec5566de1f962b3d7e3527b874998b9fe02372c08ba60f51c197018f9aaed9062e65aed3ff80fb16c113a1f5b6809c387fa365d394d315f216fd0fc17037adc9554765b1d997696402c1d8289d30b24074b10fe9e33a5dc0bde105ae7635ca6322c8021a4bcfc5017fafa393cc7937f5a41c477d60872a65b556abbf77d88906591ae26ff19d26960f69da6fb68424f11e0115deec4a78a5e9f446eb63173ab5b3a1891379a2fe9d9827e0a34373d65577dfefec79411c05bfdc770237525ea312ce924f5f097bd4c91c4834b45c59b71e714338d97125c88d5e4e4344abbf73870ee8d8e2c8738983c935c958d42b39ea6a1eb357b9e1fe9f869a67ff7e77b3690bc4f5299812564d126ad23837f4dabde80ecbd3793417bfce2aea5e4722b3eac32f20f2d42550518c177475a98d6078647e688bf0b0169994acac544002cfbf5ee170319175ab43778851960b8531c0d7413cdab66500703a01c21ab64cd7e176c6dd1f0fdc28f5a7bc0b3255f2a3357bcd088e7151ab02465af981ca29a71a312fd77fe6c5d82246b1c202a30f438c346572b37215425c7d6a55356e971370888ed883dfa5485ab0153e8b1a0017f9e28cc90eefb044cb6a146febe4a3c52eec44c9acb038391a7fa50bd821933687349ab82ff396091d9c9d598518e5458373f152f428466b0cb331fb815164a7835cd16e84317f3fcf26e72ed15fb526756c18977a7725155f5f532b8c6e7b9e91597c6a43a1ef7e0208871211b07355d01bcb420e508c4c4e0d907c76cbd87407235da4309061d2da025eecdc811738bfb662d36e4f921a3bc8ccf3fec6c0506860a1be23e9c40e6a01a609647896718626b560d205f3e43697f2765ca5562dfa543652842e609ebff63757ba0c5b2109e44fcc898a8712bfa43b107a1d02a94b8005c4ab94d8dbd6310821fab06c658af2e63f0a1cd7170435a50786e7ae0cc57f727113e1a06329605e8b74567d23e0fcfcd799d4f02ff46efee1e822da48e27669a451d715ed8fc63f1de36128ed5169a48c555689a672f70c53dea90904469851dd9d6dce305f529f9513bc0618490c704a1082cf1867afc92ba2a8b42d05655992d8967de4f1d6628a7eeb128d6c24a8dc73bf75b89a4b3d3b6e6b6892c71354a5b4341919ab9d50d527363e5f82effc406ca319e59b0fccb6c008bb01a3de69b98d4f4e31a0d530cc727679295b2d56ca5735401221d4d4de415952545a94f289da071db3b2618150bd7e5941f129742927aa7eb22bd66bad00486cd385874cdabd39a021a66b5090517cedc2072cf0375520401c535e829e2d80e12d3ccb2fc0f56f1c475205f8bfbed3bf90828c5d9181f009950be66c90e167f9b39fae048b48ea80f2754f677fab12caf579114de98b16af3734418942c0f3a4b521b6dc57ff6b99e623dd4d41c175bd7a8dd571d5bc43b529e175912aaf14d300fbd5d57e3ac1c79a827c1fb510456ee3194a2e064211d0986397e13aac112199c207ddd8cf09c8935537a5c25454b0ec05b86648cefb9f25cddd99d2278cdec1bb545e8072ece3e80b823d9d15762e316dbc75e431b265ad91f301bc3bed140b82d7979a6c46b4431ba9e7e68fb4af226f26d701d966536cc042ddf81c95f360654ecea4b9887c58b489c3482f17802c8ae75bbb294f53dce9735f4e5611cd5523a9eb14211a2faa1ef968e717c3f16753f22c02c6e95353de447b54641500b9e4b9dfe2c0e18fc98c433d269c3c880298ee7b8d15cffc3f97b15fe19caebb15757ed5f97d64f285683c6283f22d582ea707f6e774d7839d1bc8e5d329708283f9ff4685b65da7df89400005802c37b4fcf7ad6e532af0bc09815d08d8ea8d505983ef80dd57ff5f5fa3b4c59bd4ff72036694332e59b03b8a618b836c5d58f785579504b59c2bff776c72ac8e2ea527ce2b9f6e0341044a98d5ade045caa33496c74e4e7baf975683f37e7fa84d7b812f2bb40b59e2ff4e8f58e45651f8467636c3cb8c35f27ffe091118052f5af47650618e3a47d36d1868803f8450ea19240bf4a1e80b7881f4b1193fd1c4d03a28837a744249612c517ff2d8a9416a174cfc457b0609e39c05b4609538d3bd56f2e358e3068c3f94baa0f7f13d6e09100d8ae5c838c6b6f0a2aae741b05e8971c34266b52b1abe8146e4ebdb9003d35a95fad6c8ec56911ed5a31388a3a6e80004105791c775bff3b3c5f5d1e26c7ae0d6620083f558d31d660b7100091aa2e00762a76c7a968d8f33a0e8e575b83f892029e0be939ec840d318d8a34df82ad8e5ccf62c52486bc50d74099621c0622ea0fda3aad930cbdc87c6b78bbe25b3adbc7ec5cd91604b47fbee652d2a91c9e73d890d03831522755486341b38aa01e44c2e9d0c9987d5174ddba2e33f910d1cb0caaee200262bbc799aa51e55fa7e1b86e080d8d39b702512e8b3d67bbfd9dbbd001a15e088fea448fa66d8685ef08c8772d346546d5c4f5d489158b2cec71dbb41b1fc9d8e08984843633f2055ef369af5e5a0f2881a92da16093697c22cdf956c2d7ad74649689f404cd3f253f53bad8727d88ed5aae4fd1a1e68ecb8a7a1e4beef3951a905897ff6021c6e1ef47d78c5dd8e98c55512b4176a539db7d6b8568638a0eadf8913f870036cd7a2116e30281fc7336a22655b9cfdacccbd7badd1e5127ce2afef4a4f4d750e164ef8162a98aa12fd042087e60824bf63a8b30307406d45aae95faba69ea22ac8fe903ceaa41d4032ddc55d00b612b7889603f969a3c4a1c135b3d48fb94e4f716d3735eadc6a1de6422b75544e4886631f9eb3b24d2fcf548332c7a90566327ec83a5a0be8b4266fc2874d34a0dfbc2960a566c34a3d5f7c47ed5b596e6096870cc23d6d1dd0ec4470fc2000c983e7900b6f13418e97ceab6a090e43f355dbfa68fc546210e070c438729be89119f6145c6a4137f3022de27172b0985db0573caa0f9a853da1f5c6903dbf2977e8408b782e02075d8d16554eb6f8bd9c591bb2262899fbbd3c63baa960d0f7e44b936fabfda66807f00c1dc589f7086f24a052b4bd7fbd2976daf2a2a2a310441e577b912ecf792b1b9f6bd122879257082dda0689bb66aeace8dc3879924c8f8318e30888b165cb63b1defa1d9875d85960b0b26ee8c560cf16ea2cfbc049984f6f10d49bd8328e86434db11fb23c0cd906ab17cd5b31771bc02fa0ca2db50e3291c447b078e318ec383b9237dcd368bc18672b44f1946157d7e7515f3a37fc51a028942973081cffd113702d75bba6e8d9e20f27f5f4c2676b691c901bf6f7c9d19ad443ba557d25c1f8c2ddbb954e6a815405e9f1b40b3a579b3ec1cff92ab6622503c8cadb36393e84ce2886038cb708967baec9f8edfe809e6fe0900ec7d2f1ddde06be06293813a90411001044b83ee765e6ab2d8fe07fe1c7a9871127d81159fa56a23dad63c783f72b229913618c76700ea79457b9b465c1e3d69ffdaba5e4b1bfdf419e4f97c8664b710350fb5bbbf476b9da8592961c006079347384261d2b6040cdd8dcb2c5d9774a0dbea766be08eac671dca184486e3806bb60cc3daf5f1bd59b9fbdc6aa8e4b71cb5839fb8f54839b1d01581e1500ef3793e62044ae6a24ad945903180d9a26eef3854cc30d5fca134f7239e6143ee582c4042c4bf980c2d9432391bbee9be339205d29479ad52e4fa209a39583800f115b740b94e1f96bad3cf26bb69f889a1b3d59c03d6fe84136e7ac227eaf81ef285087744714058ef05790bbaaeba77e248464a2cd59da3369cee799fc4c1c9ffa92293bcd9b52a71e9e30bdc3f0547842e5c27f14bb6995dbdfdfa32957c0b7549a8154ec04a4721505226d0e021bb9a073f8195dcc0d4bba9c7e020a40283643554ee46b07b89bdec0ca91af5ba5f868e85914d7dadbab1e6a44b3ce55687c878f2c1622f7edd863f18d7c0c556af6cb5dc38ea743391b8183488799fe232198014f701d031806e96680b2371933986510ed46d0f71d52ea0e646fed45085b6f8743f55c97a838fca2d6b6869733f1228f9d0ad863c7dbf4515fe4c15bb9c8984853eeed8f4a4e12678f42de27bb5ce379188c72bf26eb000e93c95208fec2d1188ff9e9d2985b4952e77d35eeddf6aace386156573bfb83b2bffb25c67bc2741b4e353da19c9488e6f4a892bf29d73448fcab8fd284445b29d8885801b223716c9b25a41883337112191d28f78047bbe1518aea67b36e6b0203a30b7ee3acc76845eaf63cd3cc51e3d491ac0e522947880d8dcbd0ed63c96ea1497377052d0a90c16a6dd2307ee8cccd0b36c6808b169bf0b88c9205946cbaab41e1cd394195c80969725803185d20d2df4f004a9524e9fcaa2b1279d1e06ef817cf3879accdd8941364fc585e20c3ea1635c6bc53682e2ea9b465826ea9d8435afef5d039ac825bdbba377e9c76930f258f50a72b94f0814f7e4213e56b13c0ad57de17f2f0ca9a5c3bdce4d4805911acd6ec2eedb557645307499cacabbc8bce9174d45fbaaefa845ad619153fa6447beac0a9b5e3d24596cf13", 0x1000}], 0x2, &(0x7f0000003340)=[@prinfo={0x14, 0x84, 0x5, {0x10, 0x6}}], 0x14, 0x80}, {&(0x7f0000003380)=@in6={0xa, 0x4e24, 0x9, @empty, 0xb08}, 0x1c, &(0x7f0000003580)=[{&(0x7f00000033c0)="e6a8974355999ef0f6a3c5fbbead8eb3fc07312b0b1343d16f3c9a387dd1ddc9ad4cbb71c3da281e780b02f92c643ac7f04812cc0fd626d7670c5dc86ff763f77dd52598efddbd31051b998e28b944fd87dab48ee1673680a3bdb5db22dd2078368dea73cd67b1e3ad5892abffa8737530e19527ec6bed40a777c96576b96b9e4344e2954451a1a13de660365550b069eb9b976f11021ef353001fbe1ba823b271402ce3609f539648", 0xa9}, {&(0x7f0000003480)="c6f7c68b777d02dd106a54592fcfe2e4c9fef2df479e74f84dc1ebb081994f81731265c565f6ee58b9d3e721b10e679e8b05d7a48942fd37c033251961e253c6d468b0e76fb3b54b35c650b3753e401517e69726a36ee6f0c517ab2de9a30c039b6a87aa9f9177cfa4abf0daec7a5685f7e3740a7571237f6148b4e065f7238ee10f9107a0e295b81c53acad62d435db828566edea61b5adf1b4eeaa0bd81e77e597efe43e38b77723d945719f701e9d31343827a94e42fa78d8a3094cf5a18a6cceeb72a27e15f80099389f4776c733f5732079a23b7156925a3e1ebe90439671ad7fec295adfd34ed1e3a7", 0xec}], 0x2, &(0x7f00000035c0)=[@init={0x14, 0x84, 0x0, {0x8, 0x9, 0x7, 0x6}}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x1f}}, @init={0x14, 0x84, 0x0, {0x4, 0x5f9f, 0x600, 0x3}}], 0x3c}, {&(0x7f0000003600)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000003840)=[{&(0x7f0000003640)="36ff11794a3373", 0x7}, {&(0x7f0000003680)="28a176c41a567ecf1d337f873e7538ffcdf513742c47c8da5f7d4fa871a23588f59852c1eed3c61358c54b43cc6048da946097d12dde5b0a5a3f7253fe820af02b219a00e2a41ebf59436815305c84cc9c89ad180d226042d48be849aaddeadfe321c96ba96603bc4b2ce2868641486427f6530fb340d68dd57c0c10c2ca3c14656cdc4ac0e7342fdb7a4d0dbba91345e72d1f5c4a9799bf5ef0d9d328b7b1ab496ff4982f3a10c1b407812cb831a52a1c58b28ed4a5fcc24ef2cfb10b", 0xbd}, {&(0x7f0000003740)="cf38c9c5bc33a5c55e0f46080f04fedfc28b42cfbee4dffb3209f6913f705e26f9d46aec760a6021cc6c4203deb50e2380b50986669c08f4154510f443a264547f61c7e28cdbf3d297808a4d52675e66dde6bd1fe8cdc7bffc00941edad4be354ab9bb0b3ab7bf45dd3c8dbafdcad2046ad96150b4ce1b648850120d2e7ce1e12915d4aa37f24352f8b3f8453a20341857caaca0d7862d60bc91039b3b4abe671f635e16c9f49213f720c1af9a5d522920f839b002d00971a33cf1f932b32beb702a", 0xc2}], 0x3, &(0x7f0000003900)=[@sndrcv={0x2c, 0x84, 0x1, {0x9, 0x3, 0x0, 0x2, 0x9, 0x7, 0x6, 0x1ff, r10}}], 0x2c, 0x20000000}], 0x6, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00'}) ioctl$sock_ifreq(r2, 0x8b1d, &(0x7f0000000040)={'team0\x00', @ifru_map={0x8001, 0x81, 0x20, 0x4d0, 0x5, 0x5}}) [ 411.755476] audit: type=1326 audit(1551006936.179:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fb6869 code=0x0 [ 412.078642] protocol 88fb is buggy, dev hsr_slave_0 11:15:36 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) write$cgroup_pid(r1, &(0x7f0000000140)=r2, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x2a2) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) 11:15:36 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, r1, 0x23, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f00000000c0)=0x54) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) 11:15:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_data=&(0x7f0000000000)="52c562d4e994e1d7ead80ef58bdafd0176857336385a0ea874740e86d08529c8"}) 11:15:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$caif_stream(0x25, 0x1, 0x1) recvfrom(r0, &(0x7f0000000000)=""/180, 0xb4, 0x100, &(0x7f00000000c0)=@sco={0x1f, {0xffff, 0x2, 0x4, 0x2, 0x7fff, 0x7ff}}, 0x80) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc044565d, &(0x7f0000000200)={0x4, 0x91559839dcff2e5c, 0x4, 0x2340000, {0x0, 0x2710}, {0x0, 0xc, 0xffffffff7fffffff, 0x9, 0x10000, 0xffffffff, "4c7ee64d"}, 0x3, 0x3, @userptr, 0x4}) 11:15:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_ivalue=0x6e2}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000001, 0x40000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x30, @mcast1, 0x1}, @in6={0xa, 0x4e22, 0x80, @local, 0x40}, @in={0x2, 0x4e24, @multicast2}], 0x58) [ 412.230241] binder: 30359:30374 Release 1 refcount change on invalid ref 0 ret -22 11:15:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x25b) sysfs$2(0x2, 0xa, &(0x7f00000000c0)=""/101) 11:15:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="66ff41d0"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:36 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 412.357509] audit: type=1326 audit(1551006936.779:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7fb6869 code=0x0 [ 412.465757] binder: 30438:30489 unknown command -800981146 [ 412.486070] binder: 30438:30489 ioctl c0306201 20008fd0 returned -22 11:15:37 executing program 2: r0 = socket(0x40000000015, 0x5, 0x400) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x400, 0x6, 0x4586, 0x7, 0x3}) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:37 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000180)={'gretap0\x00', @ifru_ivalue=0x1}) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x70) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 11:15:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) fdatasync(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x3, 0x0, [0x99e, 0xd5a0, 0xb51, 0xfffffffffffffffd]}) 11:15:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@raw=[@map={0x18, 0xb, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1d}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0xd}, 0x48) 11:15:37 executing program 0: clone(0x0, &(0x7f000075cf53), 0x0, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x4004000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setstatus(r2, 0x4, 0x40000) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000e00000008000400ff0100000000000000eaffffff"], 0x1c}}, 0x4) wait4(r3, 0x0, 0x60000002, 0x0) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) [ 412.525842] binder: 30438:30493 unknown command -800981146 [ 412.549902] binder: 30438:30493 ioctl c0306201 20008fd0 returned -22 11:15:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000001100)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000001140)=0x40) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000010c0)=0x100) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000001180)={0xcab, 0x9, 0xfffffffffffffc00, 0x3, 0x15, 0x2, 0x7fbb356d, 0x8, 0x6e6a, 0x9}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e05411, &(0x7f00000000c0)=""/4096) 11:15:37 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4004e23, @local}, 0x10) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0xc0, 0x3) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r1, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:37 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001400)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x6, 0x2, 0x8, 0x3f}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) 11:15:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x10000, 0x408802) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x2, 0x2, 'client1\x00', 0x0, "e3618c2dc9ecfb15", "f5e05a936ce8737cae8f531a33a24f378e065a3a4e6bbb4a5ed23ed77529e9fc", 0x5, 0xfffffffffffff000}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xdf4, 0x101000) sendto(r1, &(0x7f0000000040)="411dd6ab2e1e01c6fe24d4502123c26ef59f", 0x12, 0x800, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x227c, &(0x7f00000001c0)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0x4001b071, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400100, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x31b6, @local, 0x7fffffff}}, 0x1db, 0x1, 0x7, 0x1ef, 0x3}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x800000000001, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0], 0x0) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f00000002c0)) recvmmsg(r5, &(0x7f0000001f4c), 0x8000000000001c0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0x484, 0x8, 0x81, 0x4, 0x7fff}, 0x14) accept4(r5, &(0x7f0000000240)=@xdp, &(0x7f00000001c0)=0x80, 0x80000) [ 412.887584] binder: BINDER_SET_CONTEXT_MGR already set 11:15:37 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xe0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() [ 412.961715] binder: 30578:30633 BC_REQUEST_DEATH_NOTIFICATION death notification already set 11:15:37 executing program 5: bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x59}], 0x20}], 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000540)='security.selinux\x00', &(0x7f0000000580)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x2) sendmsg$alg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="f95f874fb1248f2d7b96eb0734133051114495828c3a432aa25c281465fae51a42c1dc278df3422f24c7ea9e76242722c766c5fbec20ee1bb88b5d78d3b3b2097abf9d2ce2928eabaa4c367103fe8bec1d06ce85dc73647c0e29", 0x5a}], 0x1}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000003c0)=0x6) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000380)={0x2, 0x1, 0x5, 0x2, 0x3f}) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000680)=0x0) perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc, 0x1, 0x1, 0x8, 0x2000, 0x9, 0x70000, 0x7ff, 0x5, 0x5, 0x260961ab, 0x1, 0x3, 0x5, 0x6, 0x7, 0x8, 0x40, 0x7fff, 0x3, 0x7fffffff, 0x401, 0x7171, 0x400, 0x20, 0x3, 0x3, 0x200, 0xfffffffffffffffc, 0x6, 0x1, 0x0, 0x7fffffff, 0x6, @perf_bp={&(0x7f0000000400), 0x4}, 0x0, 0xfff, 0x10001, 0x0, 0x6, 0x7, 0x5}, r3, 0xa, 0xffffffffffffff9c, 0x1) gettid() r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x4000000004006) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000280)) recvmmsg(r0, &(0x7f0000007980)=[{{&(0x7f0000001780)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000001800)=""/65, 0x236}, {&(0x7f00000005c0)=""/64, 0x40}], 0x2, &(0x7f00000019c0)=""/147, 0x93}}], 0x1, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f00000001c0)=@md5={0x1, "ec160a907b2dd4735ee5aa940dd96ef8"}, 0x11, 0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000780)={0x0, 0x0, {0x3, 0x7, 0x2021, 0x9, 0xa, 0x7, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000600)={0x3, 0x3, 0xea, 0x3, 0xcf}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r6}}, 0xc) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f0000000640)='y\x00', 0x2, 0x1) 11:15:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x18b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 413.018794] binder: 30578:30585 ioctl 40046207 0 returned -16 11:15:37 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) r2 = dup3(r0, r0, 0x80000) getsockname(r2, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) name_to_handle_at(r0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000000000000200ff4cfe3e6b3c8983952441166b94145a785d18d9fd6ec79"], 0x0, 0x1000) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup2(r0, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:37 executing program 3: syz_emit_ethernet(0xfffffdba, &(0x7f0000000080)={@empty, @broadcast, [{[{0x9100, 0xfffffffffffffffb, 0x6, 0x4}], {0x8100, 0x4, 0x4, 0x201}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x2, 0x4, 0x4, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x94}, &(0x7f00000001c0)=0x8) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 11:15:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x3) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x7, 0x6, 0x100, 0xfffffffffffffffe, 0x1ff, 0x79, 0x4000, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x1f, 0x2, 0x359, 0x7, 0x2}}, &(0x7f0000000640)=0xb0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000680)={r3, 0x2}, 0x8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000540)="341bfe56c38ec2812bffa623f7218ea7e6a648189ff5a71976c2306539af48bd8c8cc8a0b4cdab1dfd77da48299a53b74822016a7a8d302371205c20227080466b88f682d8d1f66b5d96a55c2f4bd548b073c76664a2a43511a3d60d0dd31dcbddb13c4c9c1823dbd1826030671f9f3c0abbe77c8ae8dfd5f2d3f6fd3ecafba45647af08de5c4f4aaa6b2e4dad95c1629b3f8bc5f62db6a762c257f179e2020cc101dd70e0547ff8c2208356df6d47845ede3c4d20e629eed8815c1321e9be5da816b7d23bc8f0af2c80ab1ec1cde370db0dc627ee77faf9e913ae8ddf49cedda2808ec70899a24e64ace29dbd772ed583af6478554e72a5b6fb394a00") fchownat(r1, &(0x7f0000000100)='./file0\x00', r2, r4, 0x1000) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000440), &(0x7f0000000400)=0x46f485bcdcb9e07e) pread64(r0, &(0x7f00000006c0)=""/210, 0xd2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xc0, r5, 0x72c, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x1, 0x5b, "94a348bd8f50c5bc179664bdbd63672f11f1ad8804f23b1aa82e88fb63684de2ba687bebb5a03970edc7559448d3d1c0a6b0b8f22227f0aae5134920b48d05d12a5b7bc8c58ca4e4c7716f75813b08a70bf543e7bbc8b345bad210"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:37 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x14, 0x29, 0x4000000000037, '\x00\x00\x00\x00\x00'}], 0x14}, 0x0) [ 413.326139] binder: 30753:30754 ioctl c0046686 20000040 returned -22 [ 413.353207] binder: 30753:30772 ioctl c0046686 20000040 returned -22 11:15:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$sock_ifreq(r0, 0x8b21, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) getgroups(0x5, &(0x7f0000000080)=[0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0xee01]) fchown(r0, r2, r3) r4 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x134e}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40086436, &(0x7f00000001c0)={r5, 0x3}) r6 = syz_open_dev$binder(0x0, 0x0, 0x400000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="034dff40edf41bd16994e3a489d7346a61f71ca07945b2aca811161e9fd53641f33e8a6d1c8a2fd36da82fef92eed8a2ddc7cfebd870e6ce36c71285788037b7fb41cc324000b549b77f0c1a2b6e3ff8911db31fab30d5749ba3ac4ccd017524bda66a85e4521e13ddea5ef825c2cc0848ba9698a8f16c29a1a47a891e6db887a58740f26602762113c76f504aef47ec08024c1ba70d2065167c68fdf6f21e7c31659abb3a8b56"], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ipddp0\x00', r1}) r7 = dup3(r6, r0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00e4f700000000000000000000000000"], 0x0, 0x0, 0x0}) 11:15:38 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) 11:15:38 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x32680) read$alg(r1, &(0x7f0000000100)=""/152, 0x98) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020200020b00000000010000000000000100080000000000030006000000000002000000e0000001000000000000000002000100000000000000fb0000000000030005000000000002000000e00000010000000000000000"], 0x58}}, 0x0) 11:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TUNGETFILTER(r2, 0x800854db, &(0x7f00000000c0)=""/203) ioctl$TIOCEXCL(r1, 0x540c) 11:15:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) accept4(r2, &(0x7f0000000280)=@can={0x1d, 0x0}, &(0x7f0000000200)=0x80, 0x800) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000300)={@broadcast, @broadcast, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @dev}, &(0x7f0000000400)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000580)={@mcast1, 0x0}, &(0x7f00000005c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000780)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000009c0)=0xe8) getpeername$packet(r2, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000c00)={0x4e8, r3, 0x600, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x134, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xdc}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x462}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x18000000000000}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xd0, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x81, 0x9, 0x2, 0x8}, {0x1ff, 0x80000000, 0x7f, 0x9}, {0x7ff, 0x7ff, 0x4, 0x3ff}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x0, 0xffffffff, 0x80000001, 0x50}, {0x3, 0xfffffffffffffff8, 0x6, 0x7fffffff}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1ec, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x380}}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x40}, 0x4091) 11:15:38 executing program 5: r0 = socket(0x10, 0x803, 0x0) getsockopt(r0, 0x54b, 0x6, &(0x7f0000000040)=""/172, &(0x7f0000000100)=0xac) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x7, &(0x7f0000000180), 0x10) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "32a7ff44e04244dcfb92b2ecd1214fb0"}, 0x11, 0x2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x5) 11:15:38 executing program 2: r0 = socket(0x40000000014, 0x6, 0xfdfffffffffffffe) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x4}}, 0x1, 0x4, 0xfffffffffffffff8, 0x7fffffff, 0x400}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x4, 0x1, [0x0]}, 0xa) [ 413.899224] binder: 30898:30899 ioctl 8933 20000100 returned -22 11:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_ivalue=0xe0}) 11:15:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x401, 0x82000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="31000000130009006900060000000010ab008048130000004600010700000014080003c025640200000003f50000000000", 0x31}], 0x1) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x802) [ 413.942113] binder: 30898:30899 ioctl 8933 20000740 returned -22 [ 413.980939] binder: 30898:30899 ioctl 8933 20000bc0 returned -22 11:15:38 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000040)='trustedcpuset#\x00'}, 0x30) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x6, 0x2, 0x3, 0x6, 0x0, 0x3, 0x400, 0x2, 0xda9, 0x7, 0x800000000000000, 0x80000001, 0x3f, 0xffffffffffff0000, 0x4, 0x2, 0x0, 0x1ff, 0x1, 0x0, 0xe2a0000000000, 0x1f, 0xd1, 0x1, 0x0, 0x81, 0x4, 0x8, 0x412, 0x7, 0x7, 0x8, 0x101, 0x5, 0x6, 0x5, 0x0, 0x9b5f, 0x6, @perf_config_ext={0x0, 0x1}, 0x20000, 0x3, 0xfffffffffffffff9, 0x65c4fdd79c3547, 0x100000001, 0x4, 0x1e}, r1, 0xa, r2, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 414.026688] binder: 30898:30953 ioctl 8933 20000100 returned -22 11:15:38 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0xdd8, 0x1, 0x1000, 0x1f, 0x1f}, 0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x3}, 0xce) close(r0) [ 414.067727] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 414.076987] binder: 30898:30945 ioctl 8933 20000740 returned -22 [ 414.092705] 0: renamed from caif0 [ 414.102252] binder: 30898:30945 ioctl 8933 20000bc0 returned -22 11:15:38 executing program 2: r0 = socket(0x40000000011, 0x5, 0x8000000000000000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x401, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000100)=""/102) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000000000000010000000000000004000000000000001f000000000000007f00000000000000017f0108000000000000000000000000002000000a0000000000000000000000000000000000000057673eb8dda71d6cca4c36164ee4c34bf3d43548d27003f6e91840bd2ea7bd6fd5c730e68cd0750ebc54b924e10629b1bb1ef080bcd1a54265451161eb8e8cf7031f2eec3b3ba94307abcfa568b3a03bcb6fd17aed69143c5d52f4605934dfafd0a55585e9010000008f4f84c1cf4017eaca7c0edcde2b59a4fbc4124ac48049676f1931bd5957cbf4fa46e94b429a452f2b023f9fa26151b88ef308b5c26a81621a"]) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000280)=0x5) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000180)={0x8000, 0x10001, 0x4, 0x1}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc04c561a, &(0x7f0000000200)={0x3, "eabbf11c635316ca7c3377ff7b9ad506cdd468d60679fb78ad8a9ac1b13f4488", 0x1, 0xc82, 0x3, 0xffffff, 0x201, 0x6}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000001c0)={0x2, 0x102, 0x4, {0x2, 0x3769, 0x4fd, 0xad}}) sync_file_range(r0, 0x8000, 0xff, 0x6) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='team_slave_0\x00'}) 11:15:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x5c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x2, @loopback, 0xffffffffffffffe0}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23, @rand_addr=0x3f8}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x6, 0xffff}, 0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0x8001, 0x4, 0x6, 0x0, 0x0, [], [], [], 0xfffffffffffffff8, 0x595c000000}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc0485510, &(0x7f0000001000)) 11:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sigaltstack(&(0x7f0000fef000/0x11000)=nil, &(0x7f0000000000)) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0563044000d394f1"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/101, 0x2b) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 11:15:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e23, @rand_addr=0x8}}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @remote, @loopback}, 0xc) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4200010, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0xffffff2a) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x619) 11:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x400000008b1a, &(0x7f0000000080)={'team0\x00', @ifru_hwaddr}) [ 414.354794] binder: 31044:31050 Acquire 1 refcount change on invalid ref -241904896 ret -22 [ 414.384896] binder: 31044:31050 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:38 executing program 0: socket$pptp(0x18, 0x1, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x480100) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) connect$netlink(r0, 0x0, 0x0) 11:15:38 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) connect$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0xffff}, 0x14) sendto$packet(r0, &(0x7f0000000000)="903aa776b42825a05d5b8a82f8e3b911e8138ca044e436fe7251c247b029e63ae9693e7564fa54515994b1e461", 0x2d, 0x40, &(0x7f00000005c0)={0x11, 0x1f, r1}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 414.466736] binder: 31044:31050 Release 1 refcount change on invalid ref 0 ret -22 11:15:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="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", 0x1000, 0x0) r2 = geteuid() r3 = getgid() keyctl$chown(0x4, r1, r2, r3) prctl$PR_GET_TSC(0x19, &(0x7f00000010c0)) [ 414.539154] binder: 31044:31113 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 414.546547] binder: 31044:31050 Acquire 1 refcount change on invalid ref -241904896 ret -22 11:15:39 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r0}) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x9}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8f9c02b0f7812b06) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x80000001, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000240)={0x3, 0x1634, 0x1}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x1f}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0xfffffffffffffffe, @loopback, 0xfff}}, 0x7, 0x1f, 0x9, 0x80000000, 0x9}, &(0x7f00000003c0)=0x98) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000400)={0x4, r0}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x4, 0x3ff, 0x0, 0x200}, {0x7, 0x8000, 0xffffffff80000001, 0x1ff}, {0x80, 0x100, 0x100000000, 0x3}]}, 0x8) r3 = signalfd4(r0, &(0x7f0000000500)={0x8}, 0x8, 0x800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000540)={0x2, 0x6, 0x5}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000005c0), 0x4) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000600)={0x6, 0xfffffffffffffffd, 0x8000, 0x25e, 0x1, 0x5}) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000640)={0x20000000000, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @multicast1}}}, 0x104) getdents64(r3, &(0x7f0000000780)=""/188, 0xbc) ioctl$RTC_AIE_OFF(r0, 0x7002) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000840), &(0x7f0000000880)=0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000008c0)=""/129) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000980)) getsockopt$inet6_dccp_int(r0, 0x21, 0x1b, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000a40)={0x8000, 0x0, {0x3, 0x2, 0x1, 0x3, 0x9}}) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc044560f, &(0x7f0000000b00)={0xf1d, 0x8, 0x4, 0x6, {r4, r5/1000+30000}, {0x1, 0x2, 0x9, 0xde, 0x9, 0x7fff, "dc965a74"}, 0x81, 0x3, @fd=r0, 0x4}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000b40)={0x3, 0x1, [0x1f10, 0x1, 0xdc, 0x84, 0x10000, 0x8, 0x7, 0xa1ae]}) 11:15:39 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x201, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0445609, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, {0x0, 0x7530}, {0x7, 0x1, 0x3, 0x4, 0xfff00000000, 0x8, "edae8eba"}, 0x2, 0x3, @planes=&(0x7f00000000c0)={0x1, 0x20000000, @fd=r3, 0x5a}, 0x4}) 11:15:39 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xdf48, 0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x100000001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x8002, 0x7fff, 0x0, r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000040)={0x6, 0x8, [0x7f, 0xff]}) [ 414.644323] binder: 31044:31113 Release 1 refcount change on invalid ref 0 ret -22 11:15:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f0000000100)=0x88) 11:15:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3a91044000000000"], 0x0, 0x0, 0x0}) 11:15:39 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@rand_addr, @dev}, &(0x7f0000000200)=0xc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @local, 0x4}, 0x1c) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) getresuid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) fstat(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a80)={0x3f8, 0xffffffffffffffda, 0x8, [{{0x5, 0x0, 0x1f, 0x9, 0x8, 0x1, {0x4, 0x8001, 0x0, 0x7fffffff, 0x6, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x6a9, 0x5, r2, r3, 0xfffffffffffffff7, 0x7}}, {0x1, 0x3f, 0x3, 0x8000, 'sh\x00'}}, {{0x4, 0x3, 0x80000001, 0x8000, 0x80000001, 0x8, {0x4, 0x4d32, 0x2bc00000000000, 0xa9, 0x7f, 0x1ff, 0x2, 0x100, 0x9, 0x1, 0x80000000, r4, r5, 0x8000, 0xffffffffffffffff}}, {0x0, 0xfff, 0x19, 0x10001, 'bdevvboxnet0]vmnet0vmnet1'}}, {{0x4, 0x3, 0x73, 0x6, 0x5, 0x8d6, {0x4, 0x8000, 0x6, 0xffffffffffffffff, 0x0, 0x10000, 0xff, 0x78f, 0x2, 0xffff, 0x8, r6, r7, 0x400, 0x6}}, {0x4, 0x2, 0x8, 0xfffffffffffffff7, 'vboxnet0'}}, {{0x3, 0x1, 0x8001, 0x2, 0x43078fdf, 0x4, {0x1, 0xffffffffffffbe79, 0x8, 0x911, 0x0, 0x4, 0x7f, 0x6595, 0x200, 0x9, 0x3, r8, r9, 0x4, 0x3f}}, {0x0, 0x4, 0xa, 0x10001, '/dev/cec#\x00'}}, {{0x2, 0x1, 0x0, 0x9, 0x2, 0x401, {0x1, 0x3ff, 0xc51, 0x1f, 0xff8, 0x6, 0x6, 0x36, 0x7ff, 0x0, 0xfffffffffffffffe, r10, r11, 0x8001, 0x6}}, {0x5, 0x72, 0xf, 0x4, 'system,md5sum*\\'}}, {{0x0, 0x0, 0x5, 0x5, 0xffffffff, 0xffffffffffffffff, {0x1, 0x9, 0x101, 0x8001, 0x2, 0x4, 0xad, 0x7, 0x5, 0x0, 0x8, r12, r13, 0x7, 0x3}}, {0x1, 0x7, 0x5, 0x3ef7, '!bdev'}}]}, 0x3f8) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x3f, @empty, 0x4e20, 0x3, 'sh\x00', 0xb, 0x400, 0x5d}, 0x2c) r14 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x0) write$FUSE_NOTIFY_STORE(r14, &(0x7f0000000240)=ANY=[@ANYBLOB="2900000004000000e20000000000000000000000000000000500000000000000010000000000000000d191389c0acb708fa5c6c94466eb201ff8aae7fdedfbfb6e45cc38933bfa0177ea08db6015bb431cc6c7d63ddd7cd0d0558af0f52b169223cd9244133111dcccc3f479402015eea95f2360132038f029ff175bc232c17b027c5a594450c86f209a0fbac908c63c620f0fadf7c5a45fdbdcb71d777a82e96f357406cc"], 0x29) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'\x00', 0x200}) 11:15:39 executing program 0: getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(r0, 0x5) r4 = dup3(r3, r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x7fff, 0xfff}) prctl$PR_SET_PDEATHSIG(0x1, 0x12) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x1, 0x5, [@empty, @link_local, @remote, @dev={[], 0x24}, @dev={[], 0x10}]}) write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) [ 414.919316] binder: 31215:31220 unknown command 1074041146 [ 414.935780] binder: 31215:31220 ioctl c0306201 20000240 returned -22 [ 414.983262] binder: 31215:31220 tried to acquire reference to desc 0, got 1 instead [ 414.984086] binder: 31215:31268 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 415.042720] binder: 31215:31299 unknown command 1074041146 [ 415.084021] binder: 31215:31299 ioctl c0306201 20000240 returned -22 [ 415.198686] net_ratelimit: 9 callbacks suppressed [ 415.198697] protocol 88fb is buggy, dev hsr_slave_0 [ 415.208573] protocol 88fb is buggy, dev hsr_slave_0 [ 415.208717] protocol 88fb is buggy, dev hsr_slave_1 [ 415.213819] protocol 88fb is buggy, dev hsr_slave_1 [ 415.223919] protocol 88fb is buggy, dev hsr_slave_0 [ 415.229017] protocol 88fb is buggy, dev hsr_slave_1 11:15:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x4e23, @rand_addr=0x8}}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r2, @remote, @loopback}, 0xc) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4200010, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0xffffff2a) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x619) 11:15:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r2 = dup(r1) setsockopt$inet_udp_int(r2, 0x11, 0x6f, &(0x7f0000000100)=0x7ff, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 11:15:39 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000000a0607031dfffd946fa2830020200a00090001003f1d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff9, 0x42000) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/244) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="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"]) 11:15:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2a, "6203bab8d70fd8f4812b596be66b0edbc67ee43aa8460882ac7c4ff81171a5640c4147fdb84a97be6ded"}, &(0x7f0000000100)=0x32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x8001}, &(0x7f00000001c0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0563044000ff9711cea4530e26b8c6cbe1bce8b4b6643e904ff0f5f2954cb1eadcff4a5dc3ba9f434b67aeb7012d3a5f7553c3bdaf6f4b34b2566f14ef22ec3c1b0559430b55132d3f38cd31a914f548ffa79f42e0f976326f46cbcfad755870bda2ca2599beaae32a6b66b3bd027f2ef793f8b007c2bb35fc0f55ffda557ae7e58a56b41b48440e9fabf48c26b5b2c802f11dfc90c407259913c14efee3031d4a2995a996117e0832d75dc011489434eeb50f540d34d0176b113703580d364831db2c6ebe1c9bef2fea1e6be8bc81186ff80a9821"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'Seam0\x00\x00\x00\x00\x00\x00\x00\x01\xfc\xff\xff', @ifru_flags}) 11:15:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x10000, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x14000) [ 415.489528] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 415.528300] QAT: Invalid ioctl 11:15:40 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x101) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/128, &(0x7f00000000c0)=0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast2, @empty, @mcast1, 0x8, 0x7483, 0x10001, 0x100, 0x4, 0x20, r2}) 11:15:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001380)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x2]}) 11:15:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x0f\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8120000, 0x0, 0xf}}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x8004, 0x1ff, 0x8, r1}, &(0x7f0000000140)=0x10) 11:15:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) r2 = dup(r1) setsockopt$inet_udp_int(r2, 0x11, 0x6f, &(0x7f0000000100)=0x7ff, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) [ 415.678563] protocol 88fb is buggy, dev hsr_slave_0 [ 415.683722] protocol 88fb is buggy, dev hsr_slave_1 [ 415.684684] binder: 31366:31369 ioctl 4010ae42 20000040 returned -22 11:15:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4d}, 0xffffffffffffffe7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8927, &(0x7f0000000100)={'ip6tnl0\x00', @ifru_settings={0xffff, 0xf4, @te1=&(0x7f00000000c0)={0x0, 0x6c4, 0x6f3d, 0xbed}}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000300)) write$evdev(r1, &(0x7f0000000400)=[{{0x77359400}, 0x0, 0x9, 0x1}, {{0x77359400}, 0x0, 0x3, 0x1}], 0x20) r2 = dup(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000180)={'veth1_to_bond\x00', @ifru_hwaddr=@remote}) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x0, &(0x7f0000346fc8)=ANY=[@ANYBLOB], &(0x7f0000000000)='\x1dNL\xc0\x00', 0x20000, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x63000000]}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) [ 415.755992] binder: 31366:31414 ioctl 4010ae42 20000040 returned -22 11:15:40 executing program 3: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) socketpair(0x1b, 0x0, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80, 0x0) sendfile(r1, r2, 0x0, 0x8) fcntl$setpipe(r1, 0x407, 0xa586) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40400, 0x0) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000140)={0xfff, 0x7fffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x4) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x31, &(0x7f000002eff0)={0x247}, 0x10) 11:15:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team_slave_1\x00', @ifru_flags=0x400}) 11:15:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:40 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x10001, 0x3, 0x80, 0x2, 0xe07e, 0x80000001}) r1 = getpid() write$P9_RREAD(r0, &(0x7f0000000180)={0x6b, 0x75, 0x2, {0x60, "b7b6fbafe42adc5208350cf2297e36f25ab57013aaf6fd1007ffff6cbcb1c4f0c01b3eb7b1746aa0202ad5058b735a21113343b26330afe790794dd25b9c57d3df29ce56d59f020badc1a91cab405ebd14dbe935a308c15781e665e94dd4013c"}}, 0x6b) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) getpgid(r1) ptrace$pokeuser(0x6, r1, 0x100, 0x0) 11:15:40 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket(0x15, 0x200000000080002, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$packet_rx_ring(r0, 0x107, 0xe, &(0x7f0000000880)=@req3, 0x1c) [ 415.966612] binder: 31453:31459 unknown command 0 [ 415.995043] binder: 31453:31459 ioctl c0306201 20008fd0 returned -22 11:15:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) [ 416.038043] binder: BINDER_SET_CONTEXT_MGR already set 11:15:40 executing program 3: 11:15:40 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x6, 0x3, 0x0, 0x8, 0x5, 0xffffffff, 0x3b7, 0x400, 0x0, 0x100, 0xc3, 0xe4f, 0x7, 0xfffffffffffffffe, 0x6]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0xf48, 0x75, "dfe0eae4784e6675a1ce623981781efee08a87f87750bccc4e280c7a19036b3b7373142ba7e9c13eda30245df6d306116784b38b7a71944f489fa79fe8e08dab4adc32f70009a0a1a54767e560c0bff928d91e34a02c3eacd08f5e01835f8ae4309d3ed31c5d951331af40146992e3f9ad6e0bfb39"}, 0x7d) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 416.062949] binder: 31453:31459 ioctl 40046207 0 returned -16 [ 416.102691] binder: 31453:31471 unknown command 0 11:15:40 executing program 3: r0 = memfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000140)=0x8000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x8b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x35d, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/246}, {&(0x7f00000007c0)=""/240}, {&(0x7f00000008c0)=""/163}, {&(0x7f0000000980)=""/234}], 0x6b, &(0x7f0000000680)=""/31, 0x1f}}], 0x3f747b8cbf977b6, 0x0, &(0x7f0000000b40)={0x0, r4+10000000}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, 0x0, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, 0x0, &(0x7f0000000180)) mlockall(0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xb8) connect$unix(r5, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 416.122835] binder: 31453:31471 ioctl c0306201 20008fd0 returned -22 11:15:40 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000001c0)=0x800, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8970, &(0x7f0000000080)={'ifb0\x00', @ifru_flags}) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000240)="2cc6543330871601e98554634c5662958d13fb12e4b5f01179223d4911fe30a21bb867adc45a7034eeb059144934b45957b9d2865520c84d2512de9111aacc745d53e291ae07dcbbfda244a43deca553b98a4e3f30730e34a212ee35baee3cf1416181535f0f4b234cee1cff84ad1387a7088abf795d1f5f993291059e8183af090c6ba748776aa4a155c779d1e0a1de761153b04b125430f3fdeebf155146120e002b02937bd8e5106bb31cc89ae744bc9c550dec2f94257e25c820ca982e17951552770cad17d53dd2f0c012bec20aa53c4c2bf84c8d41c3dfb8e6863f2655ecce7825c6", 0xe5) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000340)={0xffff, 0x3ff, 0x4, 0x0, 0x0, [], [], [], 0x6, 0xf227}) fcntl$setflags(r2, 0x2, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xc424, 0x400002) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffe, 0x1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000200)={r4, 0xffffffffffff6174, 0x3}, 0x8) 11:15:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x800) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000080), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 416.238574] protocol 88fb is buggy, dev hsr_slave_0 [ 416.243764] protocol 88fb is buggy, dev hsr_slave_1 11:15:40 executing program 0: syz_emit_ethernet(0xffffffffffffff47, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff9100330081003c0008004600002c00000000002f9078ac141400ac1423bb860300000e009078000000000000e9000000000000000000"], 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x1) 11:15:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x8000000003) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f7026b95250e630c40e907d655d5ddc10b5c1d67a4"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xff}, [@IFA_ADDRESS={0x14}]}, 0x2c}}, 0x0) 11:15:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x87, 0x0, 0x200, 0x1, 0x9, 0x80000001, 0x6, 0x9, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @multicast1}}, 0x200, 0x4}, &(0x7f00000001c0)=0x88) 11:15:41 executing program 5: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000480)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000900)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000940)={0x0, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0xbb9, @loopback, 0x891a}}}, &(0x7f0000000580)=0x84) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) r4 = add_key(&(0x7f0000000880)='big_key\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f00000016c0)="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", 0xbf0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r4) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@loopback, @empty, @local, 0x100000001, 0x7, 0x6, 0x100, 0x0, 0x0, r3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}, [0x4, 0x8, 0x3, 0x4, 0x0, 0x7, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffff01]}, 0x0) flock(r1, 0xb) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) fcntl$addseals(r1, 0x409, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40246608, &(0x7f0000000740)={0xe, 0x1000, 0x10000, 0x99f, 0x2, 0x6000000000000000}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f00000000c0)={0xa, 0x4e20, 0x40, @mcast1}, 0x1c) listen(r1, 0x7ffffffd) r6 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3}, 0x10) write$9p(r0, &(0x7f00000009c0), 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000980)=@assoc_id=r5, 0x4) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000840)) [ 416.545399] binder: 31703:31704 unknown command -1788149001 [ 416.552125] binder: 31703:31704 ioctl c0306201 20008fd0 returned -22 11:15:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x600000) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:41 executing program 0: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x600000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20000, 0x0) personality(0x0) r2 = getpid() r3 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x2, r3}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000002c0)={r1, r1, 0x5}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x7, 0x1ff, 0x6, 0x2, 0x2, 0x7}, 0x1c) r4 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000380)={[0x4, 0x5004, 0x4, 0x100001], 0xfffffffffffffff7, 0x80, 0x9de2}) ptrace(0x4206, r4) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x7fffffff, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000340)=0x4) ptrace(0x4207, r4) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 416.615071] binder: 31703:31714 unknown command -1788149001 [ 416.653645] binder: 31703:31714 ioctl c0306201 20008fd0 returned -22 11:15:41 executing program 2: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001a00)=""/94, 0x5e}], 0x2}}], 0x1, 0x0, &(0x7f0000001e80)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) socket$inet(0x2, 0xe, 0xc3c) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580), 0x0) 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:41 executing program 3: r0 = memfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000140)=0x8000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x8b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x35d, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/246}, {&(0x7f00000007c0)=""/240}, {&(0x7f00000008c0)=""/163}, {&(0x7f0000000980)=""/234}], 0x6b, &(0x7f0000000680)=""/31, 0x1f}}], 0x3f747b8cbf977b6, 0x0, &(0x7f0000000b40)={0x0, r4+10000000}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, 0x0, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, 0x0, &(0x7f0000000180)) mlockall(0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xb8) connect$unix(r5, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 11:15:41 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x44903, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x7fff, 0x240) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'nlmon0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r2) recvfrom$rxrpc(r0, &(0x7f00000002c0)=""/230, 0xfffffffffffffc96, 0x2040, 0x0, 0x218) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x228002, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0xffffffffffffff35, 0x0, 0x1fd, 0x0, "b8c4c8e73aefe8edcebf169d3a1aa1ffa76f4697bc45246fd2f62889ca5c34af"}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406055c9, &(0x7f0000000080)={0xc, 0x7f, {0x0, 0xffff, 0x20cd, {0x10001, 0x1}, {0x101, 0x5}, @const={0xe0, {0x3, 0x393dec50, 0xffffffffffffff80, 0x800}}}, {0x52, 0x5, 0x2, {0x1, 0x4}, {0x1ff, 0x400}, @rumble={0x100000000, 0xcbb}}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000293c7ffe83918998359e000004000000"]) 11:15:41 executing program 2: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001a00)=""/94, 0x5e}], 0x2}}], 0x1, 0x0, &(0x7f0000001e80)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) socket$inet(0x2, 0xe, 0xc3c) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580), 0x0) 11:15:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3b, "3615c97605055b05343651e6c92bf024f1ed7803ebf3f05ea4b519e8c45af4f35a9c0912ceb49e2dfb79596aa4d81ed72ff360764b63d627d661f5"}, &(0x7f00000000c0)=0x5f) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="cad07a1b973af162997b8d64ed55449b01f3b9ef50c8887ebf13105aec75383766fed267e75cc036c55f2cea94a611edc4f102b51ed0317848d82e8d25845a8a3b752edfb4c555b018515c"], 0x17) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x77740580, 0x1) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000280)="84604d3c16ddd7bf66da976b13d0229a71e24b8c7d476b8cee3cadfb1286bd504d9b37006713e3e85acb1ce253374e1c0edb10f03b64189c768f4a99b9aaeae226ed3bc63e06cb51d8893538d2822a69c333e764b04b96b9ee4eca93a2e5811a8a5d78806b89bced72d625003a1d3bffc64962efc3a9b07e356bbd68de7ef9176d8da82f7196f34ea1a310d6db81cb006f6298ec6b2ab7c17372aa548e46dca36ce47e3c35a2ee0d128d65d731996c9d65880cd288da0d65ff9e50eec1b255f9241c73f6170f2ed6d1d24fa0e758eb7de70b412887931ad0ea6f8887207bcaa23ae5b789cdf9fc47c920278d857e0d13fe9ca1117e4e33f8f62bc0b98beeeb9e") getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:41 executing program 2: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001a00)=""/94, 0x5e}], 0x2}}], 0x1, 0x0, &(0x7f0000001e80)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) socket$inet(0x2, 0xe, 0xc3c) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580), 0x0) 11:15:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x4e20, @local}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000080)=0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000100)='#][ppp0a-selinuxppp1\x00', 0x15, 0x1) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x930000000000, 0x0, 0x5, 0x0, r0, 0x0}]) 11:15:41 executing program 5: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001780)=""/203, 0xcb}, {&(0x7f0000001a00)=""/94, 0x5e}], 0x2}}], 0x1, 0x0, &(0x7f0000001e80)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) socket$inet(0x2, 0xe, 0xc3c) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000580), 0x0) 11:15:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x181400, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 417.591143] binder: 31981:31982 Acquire 1 refcount change on invalid ref 0 ret -22 [ 417.650695] binder: 31981:31982 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 417.663665] binder: 31981:31982 Acquire 1 refcount change on invalid ref 0 ret -22 [ 417.672513] binder: 31981:31994 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:42 executing program 3: r0 = memfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000140)=0x8000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x8b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001080)=[{{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x35d, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/246}, {&(0x7f00000007c0)=""/240}, {&(0x7f00000008c0)=""/163}, {&(0x7f0000000980)=""/234}], 0x6b, &(0x7f0000000680)=""/31, 0x1f}}], 0x3f747b8cbf977b6, 0x0, &(0x7f0000000b40)={0x0, r4+10000000}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, 0x0, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$vsock(0xffffffffffffff9c, 0x0, 0x210000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, 0x0, &(0x7f0000000180)) mlockall(0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xb8) connect$unix(r5, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 11:15:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000100)=0x1e) r1 = fcntl$dupfd(r0, 0x406, r0) write$capi20_data(r1, &(0x7f0000000140)={{0x10, 0x1, 0x84, 0x83, 0x6, 0x80000000}, 0x1000, "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"}, 0x1012) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000011c0)={0x3, 0x2, 0x3, {0x9, 0x10001, 0x7, 0x1f}}) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001180)={0x10000008}) 11:15:42 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80}, 0x0, 0xffffffffffffffff, r0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400004000000000a) clone(0x48000, &(0x7f0000001400), 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x5ad00, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, 0x0, 0x40000) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xc1) getpeername$netlink(r2, &(0x7f0000000140), &(0x7f0000000200)=0xc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000180)=0x0) syz_open_procfs(r3, &(0x7f0000000280)='net/anycast6\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x1004e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, &(0x7f0000000000), 0x101) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) 11:15:42 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x25e) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) dup3(r1, r2, 0x0) 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = gettid() ptrace$setregs(0xd, r1, 0x3091, &(0x7f0000000000)="b4a51a623ce4096db4b73bd8ea8948f90fb7ac6729ea3cdd566daaab263943850e28") getpgid(r1) 11:15:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x78d, 0x5, 0x3, 0x96}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:42 executing program 0: r0 = socket$inet6(0xa, 0x40080000000001, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @ipv4}, 0x4b) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000007000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 11:15:42 executing program 5: perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 11:15:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff8, 0xc0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000900)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14, 0x800) recvmmsg(r0, &(0x7f0000005e00)=[{{&(0x7f0000000a40)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/107, 0x6b}], 0x1, &(0x7f0000000b80)=""/22, 0x16}, 0x7fffffff}, {{&(0x7f0000000bc0)=@rc, 0x80, &(0x7f0000003080)=[{&(0x7f0000000c40)=""/229, 0xe5}, {&(0x7f0000000d40)=""/229, 0xe5}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/106, 0x6a}, {&(0x7f0000002ec0)=""/241, 0xf1}, {&(0x7f0000002fc0)=""/187, 0xbb}], 0x7, &(0x7f00000030c0)=""/36, 0x24}, 0x5}, {{&(0x7f0000003100)=@hci, 0x80, &(0x7f0000003280)=[{&(0x7f0000003180)=""/22, 0x16}, {&(0x7f00000031c0)=""/6, 0x6}, {&(0x7f0000003200)=""/78, 0x4e}], 0x3, &(0x7f00000032c0)=""/4096, 0x1000}, 0x8}, {{&(0x7f00000042c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004340)=""/234, 0xea}, {&(0x7f0000004440)=""/216, 0xd8}, {&(0x7f0000004540)=""/64, 0x40}, {&(0x7f0000004580)=""/157, 0x9d}, {&(0x7f0000004640)=""/190, 0xbe}, {&(0x7f0000004700)=""/250, 0xfa}, {&(0x7f0000004800)=""/79, 0x4f}], 0x7}, 0x3f}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/134, 0x86}], 0x1, &(0x7f00000049c0)=""/3, 0x3}}, {{&(0x7f0000004a00)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/90, 0x5a}, {&(0x7f0000005b00)=""/236, 0xec}, {&(0x7f0000005c00)=""/195, 0xc3}], 0x4, &(0x7f0000005d40)=""/186, 0xba}, 0x1ff}], 0x6, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x80024, &(0x7f0000005ec0)={@multicast1, @initdev, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005f40)={0x0, @dev}, &(0x7f0000005f80)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000005fc0)={@mcast1, 0x0}, &(0x7f0000006000)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006080)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000060c0)={0x11, 0x0, 0x0}, &(0x7f0000006100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006140)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006180)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000006280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000065c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@broadcast}}, &(0x7f00000066c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000006bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006b80)={&(0x7f0000006c00)=ANY=[@ANYBLOB="50040000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="7801020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f706f62745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000044000100240001006270665f686173685f66756e63000000000000000000000000000000000000000800e80000ae6d7c1ab80d48dfd25257d903000b0000001400040005000424080000002f0d010300020000400001002400010071756575655f696400000000000000000000000000000000000000000000000008e5020003000000080004000000000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="b40102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000104000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="f800020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ff0300003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r17, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000008000008000600", @ANYRES32=r18], 0x450}, 0x1, 0x0, 0x0, 0x14}, 0x8000) [ 418.395728] binder: 32223:32228 ioctl c028660f 20000040 returned -22 [ 418.450580] binder: 32223:32228 ioctl c028660f 20000040 returned -22 [ 418.519460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:15:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@v2={0x3, 0x3, 0x5, 0x3, 0xff, "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"}, 0x109, 0x1) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:43 executing program 3: dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) pipe(&(0x7f0000000440)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050d0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) statfs(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) 11:15:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x3f, 0x8}) 11:15:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x2ddc83c0, 0x0) 11:15:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f0000000200)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x0, r1+10000000}, 0x0, 0x0) pipe2(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, 0x0) 11:15:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000000040)) [ 418.971278] binder: BINDER_SET_CONTEXT_MGR already set [ 418.983401] binder: 32349:32359 BC_REQUEST_DEATH_NOTIFICATION death notification already set 11:15:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='#}\x00\x9a\x1b\xc2_R\xea\xd3\xddT\xd0\xec;\xa4\x9dV>\xa4\x11\xa4\xac\x9e\x1e\xac\xaaT\xd5\xd3\xf8<\xd7Yb\x04I\xdct,&\xe90\xa8\xaf\xff\xd3\xcd\xcd-\x90\'\xa2v\xbal\xa3l\"\xa0G\xebD\x1d\x8c\x8e\x15\x8d``\xb2\xdb\x9e\'\xef_\xde?i\xacl\x03\xaa\xdc(\x96\xbed\x9b\x1d\x95\x13\xbe\xe7\xb8\xa3\x13>\xdd}\x87\xc7Y\xf1\x92\xe3BIky\xe8\x85\xe9^\x1d\xb2\xd2Ycn\x9d\xafQ\xb1\x02\x99z\x81\xff\xc2\xdd)\xfe\'\xb8\"X@\xd6,\xb5\xa6\xa2\xe1:\xecG\x1d\xfe\x86\x85\xe7\xd4\xf6!C\xa3\xcf\xf3S\xeaA\xd7\x11\xc9O\x8e+\x94\x8c\x1f\xd6\x88\x97\xd0\xdd*\x90)\"\xda', 0x2) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r1, 0x409, 0x8) 11:15:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffff9c) open$dir(&(0x7f0000000080)='./file0\x00', 0x41, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000140)=ANY=[]) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f00000002c0)='keyringppp0\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x6, 0x4, 0xffffffff, 0x1e86679d, 0x0, 0x0, 0x4, 0x8, 0x8, 0x0, 0x100000000, 0x7, 0x48, 0x60, 0x7ff, 0x6, 0x0, 0x0, 0x37c3614, 0x0, 0x9, 0x20, 0x0, 0x0, 0x80000001, 0x8, 0x0, 0x4, 0x7fff, 0x4a396e51, 0x2, 0x0, 0x80000000, 0xffffffff, 0x0, 0x4f702a54, 0x0, 0x3f, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x5, 0x9, 0x5, 0xffffffffffffffd4}, r4, 0x7, r1, 0x2) sendmsg$key(r3, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB]}}, 0x0) dup(0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000003c0)={0x5}, 0x4) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 11:15:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000040)={'H1l\x00', @ifru_flags}) [ 419.019842] binder: 32349:32354 ioctl 40046207 0 returned -16 11:15:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='/dev/binder#\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup2(r0, r0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x3, 0x9, 0x1, 0x0, [0x0]}}, 0x29) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="b5488a9229f83cb6"], 0x0, 0x0, 0x0}) 11:15:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea\x94\xe0\xeb\x9e\xf4\x00=v\xe3\xeaY\xees\xe9z\xaf\xf9\xce6\xa1\xe0', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) flistxattr(r1, 0x0, 0x0) 11:15:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00 \xe5w\xee\x8aA\xbc!\b\xae\xb7IAF\xc7\b9n\xaa\xfd\xbd\x9b\x80\x1e\xdc\xe9\xd3\xf85H\x01\x00\x00\x80\'\xd1\x92*G\xa2\xd2F\xcc,\xd6\xa7*\xb9\xab`\xf8\xbd:b\xdf\xa2I5') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:15:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) ioctl$FICLONE(r0, 0x40049409, r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="141aff8d83918f93fe1c39bb0adde9652115a910b589059ff31ba10e2c16bea0fcf454", 0x23, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='team0\x00', 0xfffffffffffffffd) keyctl$unlink(0x9, r1, r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x8, 0x80, 0x0, 0x2}) [ 419.217570] binder: 32473:32484 unknown command -1836431179 11:15:43 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {}, [{0x2, 0x1}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x3}], {0x10, 0x6}}, 0x3c, 0x2) [ 419.273588] binder: 32473:32484 ioctl c0306201 20000240 returned -22 [ 419.307465] binder: 32473:32496 tried to acquire reference to desc 0, got 1 instead 11:15:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001a01000001801f70a889e4ef6000007d"], 0x18}}], 0x1, 0x0) 11:15:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='#}\x00\x9a\x1b\xc2_R\xea\xd3\xddT\xd0\xec;\xa4\x9dV>\xa4\x11\xa4\xac\x9e\x1e\xac\xaaT\xd5\xd3\xf8<\xd7Yb\x04I\xdct,&\xe90\xa8\xaf\xff\xd3\xcd\xcd-\x90\'\xa2v\xbal\xa3l\"\xa0G\xebD\x1d\x8c\x8e\x15\x8d``\xb2\xdb\x9e\'\xef_\xde?i\xacl\x03\xaa\xdc(\x96\xbed\x9b\x1d\x95\x13\xbe\xe7\xb8\xa3\x13>\xdd}\x87\xc7Y\xf1\x92\xe3BIky\xe8\x85\xe9^\x1d\xb2\xd2Ycn\x9d\xafQ\xb1\x02\x99z\x81\xff\xc2\xdd)\xfe\'\xb8\"X@\xd6,\xb5\xa6\xa2\xe1:\xecG\x1d\xfe\x86\x85\xe7\xd4\xf6!C\xa3\xcf\xf3S\xeaA\xd7\x11\xc9O\x8e+\x94\x8c\x1f\xd6\x88\x97\xd0\xdd*\x90)\"\xda', 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r1, 0x409, 0x8) [ 419.335623] binder: 32473:32484 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:43 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x6, 0x0, 0x40, 0x400, 0x3, 0x3, 0x8, 0x173, 0x40, 0x1c4, 0x80, 0x7, 0x38, 0x1, 0x7, 0x200, 0x2}, [{0x4, 0x2, 0x100, 0x0, 0x2, 0x0, 0x8001, 0x81}], "605011ea9a7d27175b4802bc153d6c718b7e0a2029f9607834b66e9e622c1c797716fb595cde0fc5c470e63a5c842520f2709b29d4b5113c20f9194594ae2e645d42de41dae0669e7ad9b3555f8cd298849c22dd18af78e467545541b706f7b393ae144a5891f206229cc0ebb9c0c41be66335d94e6167d91eeb85c4aa7177b841e501aca9e24d0b4250", [[]]}, 0x202) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000000)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0F\x0e\x99\x1b\xa6\xb3\x89b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc>\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xe8=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x9f\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\x00_\xa8\xd8$s\xc7\xfb\xf3\xec\x10\x81\xec\x01\xa9:{;\xa1\x10\xbe}\x87\xfbf\x8ee\x99\xb2\xfc\x91\x12T\xce*\xe2\xe7\x7fjC\xf7\x01\x9c\xf0\rm\xf2\x9f\xfez\xc7\x1ar\x82\xba\x8bEh\xa0@\x155\xcb\\\x1a\x16D\x18\x8e\x1a\xc7\"\xa1\xb1\xaa<\xbfx\x06\x139\x1e\x8e\xbc\xdfp\x101\xf2\xf6k\xa1\xef\'\xec\xc2)\xa5\x86\xbdlr\x94MG\xfb\x8d\x94\x7f\x84\xd3G\xb1\x1f\x05\xd6\xe3\xb6\x0e\x04\x99|\xe4\x91s\nT\x99\xd5\xad\xae+\xee\x03\x19\x96\xe9[n\xbe\xa2\xe9\n4\xd9K\xea![\x96a\x86\r\x9f\xa4y\xda\x8f\x83\xcae\xf1\xa6I\xfc\xb8\xcf\xc8\xd9\xe0.9\n\xde\v;\xc7=VX\x9eQ\xd4\x7fd$_\x81*\x13\xf8\xb7\xeb\xc9;\xed\v\x9d\x84\x1c\xc8\xfcX\xb7*.\xdf\xba\xd9\x1e\xa8CK\x1c\xafc/\xbb\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) 11:15:43 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="390071554f6677fff79c00003824c6840eedfb734912827b9c5015561edb002000ff080088e8790a42b075257685ad8a8aa821e90000000047"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:15:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e63ca315b8371c9564b1aa7e2e75da5131345af525486823e4f0642"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:44 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x400000002, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000000000000000000001827adf85ffcafe408149fc5397ef5bbf67edd21fe1966059c664cadc51079ecc7090ecb4e24b8ed707f326f58160a1095742c4d9bb8f213042e5753d8c08fead0cea6274db3"], 0x1) 11:15:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x46200) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v2={0x3, 0x3, 0x12, 0xa5, 0xbc, "39c631be52d93f7dbde67c1e4f918d5d6eb2d7978671491472e53393cb85892048d827d48d210eef7088917e05c0eaf6a85cd2f79f8d94fccf27888441c900451fece998f6e5dc712df46abaeed9e2d0681c24eef8358111a92e085bdd64b10e7c6da5f965eaf4f19c85e1b2300b296f23516a88725dddce5e71f53179f5ed116969bcfda5b1cbedce397e845a6ff64fe31db6548fa369dd03afa74d3ef67d572be71e0d4dd0cac4915b0a44aafcef0afc7633a9662c415209f53ad9"}, 0xc6, 0x0) 11:15:44 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmsg(r2, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) r3 = gettid() tkill(r3, 0x16) [ 419.540561] binder: 32526:32538 unknown command 835347214 [ 419.547968] ptrace attach of "/root/syz-executor.2"[32537] was attempted by "/root/syz-executor.2"[32540] [ 419.566986] binder: 32526:32538 ioctl c0306201 20008fd0 returned -22 11:15:44 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) [ 419.650255] binder: 32526:32582 unknown command 835347214 [ 419.673999] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.685971] binder: 32526:32582 ioctl c0306201 20008fd0 returned -22 11:15:44 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') sendfile(r2, r3, 0x0, 0x80400002) 11:15:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x120000, 0x1, 0xfffffffffffff6a4}, 'syz1\x00', 0xc}) write$P9_RXATTRCREATE(r1, &(0x7f0000000180)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1ff, 0x2801) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000380)=0xe8) geteuid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235000100000f30c402b8f31589d60000b8010000000f01d9400f07470f0176e40f235bb96c0a00000f320f20c035010000000f22c066ba210066ed2e440f21fb", 0x47}], 0x1, 0x32, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x8001}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0xff, @loopback, 0x7}]}, &(0x7f00000004c0)=0xc) io_setup(0x80, &(0x7f0000000500)=0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) io_pgetevents(r4, 0xffffffff, 0x7, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000680)={r5, r6+30000000}, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'t\xe0\x9c\xfe\x97\xfc\x00', @ifru_flags}) ioctl$RTC_VL_CLR(r2, 0x7014) 11:15:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0]], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 419.701976] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.720914] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.744330] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.776142] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.808233] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 11:15:44 executing program 3: dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000005500000000000000000000000000000005000900df0000000a00000000000000fe8000000000000000000000000000ff000000000000000002000100000000000000050d0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) [ 419.823911] binder: BINDER_SET_CONTEXT_MGR already set [ 419.852315] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.862305] binder: 32650:32651 ioctl 40046207 0 returned -16 [ 419.875180] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.889970] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.897449] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.904741] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 419.911173] binder: 32650:32651 unknown command 536871168 [ 419.925363] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 419.932632] binder: 32650:32651 ioctl c0306201 20008fd0 returned -22 [ 419.961423] binder: 32650:32733 unknown command 536871168 [ 419.967154] binder: 32650:32733 ioctl c0306201 20008fd0 returned -22 11:15:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = getpgrp(0x0) ptrace$poke(0x5, r2, &(0x7f0000000180), 0x1b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xffffff5b, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12634840030000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="85616466000000000a0000000000000002000000000000000900000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000100000000000000"], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="4000d0be000000000000000000000000"], @ANYBLOB="ff00000000000000"], 0x0, 0x0, 0x0}) 11:15:44 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x6}, [{0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}], {0x4, 0x2}, [{0x8, 0x3}], {0x10, 0x6}}, 0x44, 0x2) [ 420.006137] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.029592] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 11:15:44 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4$inet(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) getpeername(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000240)=0x80) [ 420.058016] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.098151] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 11:15:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) write$ppp(r1, &(0x7f00000000c0)="aadecfc195cb5b4771c58bca769b4e42e2285fe88cba4d3b4079c93badd8a552482e59c7827ffa0e07357b2a166773eb20e43708b9b8015c0ed6c93b3f904c8c02d1faa976f524517be587cf6f22453f799e674106b77fac0f875fb4eea3e946d265776693", 0x65) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$input_event(r1, &(0x7f0000000140)={{r2, r3/1000+10000}, 0x16, 0x5}, 0x10) [ 420.105297] binder: 32761:32764 got reply transaction with no transaction stack [ 420.120670] binder: 32761:32764 transaction failed 29201/-71, size 0-0 line 2801 [ 420.143898] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.159912] binder: BINDER_SET_CONTEXT_MGR already set [ 420.167360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.182343] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.189606] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.196575] binder: 32761:32764 ioctl 40046207 0 returned -16 [ 420.204921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.217331] binder: 32761:313 got reply transaction with no transaction stack [ 420.219666] binder: 32761:305 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 420.233548] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.240658] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 420.252908] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 11:15:44 executing program 0: 11:15:44 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0xffffffffffffffff) [ 420.286022] binder: 32761:313 transaction failed 29201/-71, size 0-0 line 2801 [ 420.362037] binder: undelivered TRANSACTION_ERROR: 29201 [ 420.367545] binder: undelivered TRANSACTION_ERROR: 29201 [ 420.398597] net_ratelimit: 18 callbacks suppressed [ 420.398607] protocol 88fb is buggy, dev hsr_slave_0 [ 420.408661] protocol 88fb is buggy, dev hsr_slave_1 [ 421.438641] protocol 88fb is buggy, dev hsr_slave_0 [ 421.438646] protocol 88fb is buggy, dev hsr_slave_0 [ 421.438693] protocol 88fb is buggy, dev hsr_slave_1 [ 421.443792] protocol 88fb is buggy, dev hsr_slave_1 [ 421.458987] protocol 88fb is buggy, dev hsr_slave_0 [ 421.464021] protocol 88fb is buggy, dev hsr_slave_1 [ 421.918620] protocol 88fb is buggy, dev hsr_slave_0 [ 421.924032] protocol 88fb is buggy, dev hsr_slave_1 11:15:47 executing program 2: madvise(&(0x7f00001c0000/0x4000)=nil, 0x4000, 0xa) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:15:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)=""/131, &(0x7f0000000040)=0x83) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 11:15:47 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) 11:15:47 executing program 3: r0 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f00000000c0), 0xc) 11:15:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x0, 0xd, &(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) r4 = geteuid() getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) r6 = getpid() fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000440)={0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f00000005c0)=[@cred={0x18, 0x1, 0x2, r3, r4, r5}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @rights={0x2c, 0x1, 0x1, [r0, r1, r0, r2, r2, r2, r0, r2]}, @rights={0x1c, 0x1, 0x1, [r0, r1, r1, r1]}, @cred={0x18, 0x1, 0x2, r9, r10, r11}], 0x90, 0x4008000}, 0x20000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) read(r0, &(0x7f0000000900)=""/4096, 0x1000) ftruncate(r2, 0x80080) sendfile(r1, r2, 0x0, 0x2008000fffffffd) [ 422.719327] binder: 424:430 unknown command 0 [ 422.733441] binder: 424:430 ioctl c0306201 20008fd0 returned -22 11:15:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000600), 0x4) 11:15:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\"\x00\xe2\xff\xff\xff\xff\xff\xff\xff\x00', @ifru_settings={0x10000, 0x8, @fr_pvc_info=&(0x7f0000000040)={0x7, 'veth0_to_bond\x00'}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e21, @loopback}}) [ 422.771198] binder: 424:449 unknown command 0 [ 422.780519] binder: 424:449 ioctl c0306201 20008fd0 returned -22 11:15:47 executing program 0: 11:15:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x8010, r0, 0x4f) r3 = mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0xa012, r1, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xc1070, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x114, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, r2, 0x1}, @reply_sg={0x40486312, {{0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000040), &(0x7f0000000080)=[0x68, 0x60, 0x0, 0x0, 0x48, 0x58]}, 0x1ff}}, @increfs_done={0x40106308, r3, 0x2}, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x18, 0x28, &(0x7f0000000100)=[@flat={0x73682a85, 0xa, r4, 0x4}], &(0x7f0000000140)=[0x78, 0x78, 0x28, 0x0, 0x38]}}, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x20, &(0x7f00000001c0)=[@fda={0x66646185, 0x1, 0x0, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x3f}], &(0x7f0000000280)=[0x20, 0x40, 0x0, 0x38]}}, @release={0x40046306, 0x1}], 0x39, 0x0, &(0x7f00000002c0)="ea37e3900c204b25f2f9b42ef3776ba478a1e119d476f93cfd4a06af8b5114146186a7da2b93cfc5222a456e15b55eba110779aa8e77aacdef"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 11:15:47 executing program 2: 11:15:47 executing program 3: 11:15:47 executing program 0: [ 422.979584] binder: 541:553 BC_INCREFS_DONE u0000000000000000 no match 11:15:47 executing program 5: 11:15:47 executing program 2: [ 423.044333] binder: 541:553 got reply transaction with no transaction stack 11:15:47 executing program 3: 11:15:47 executing program 0: [ 423.120169] binder: 541:553 transaction failed 29201/-71, size 0-48 line 2801 [ 423.147917] binder: 541:557 unknown command -373870170 11:15:47 executing program 2: 11:15:47 executing program 0: [ 423.199200] binder: 541:557 ioctl c0306201 20000240 returned -22 [ 423.252692] binder_alloc: binder_alloc_mmap_handler: 541 20ffb000-20ffc000 already mapped failed -16 [ 423.296653] binder: 541:557 BC_INCREFS_DONE u0000000000000000 no match [ 423.325930] binder: 541:557 got reply transaction with no transaction stack [ 423.353504] binder: 541:570 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 423.381779] binder: 541:573 unknown command -373870170 [ 423.402126] binder: 541:573 ioctl c0306201 20000240 returned -22 [ 423.418602] binder: 541:557 transaction failed 29201/-71, size 0-48 line 2801 [ 423.428909] binder: undelivered TRANSACTION_ERROR: 29201 [ 423.434391] binder: undelivered TRANSACTION_ERROR: 29201 11:15:47 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x20000) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:47 executing program 3: 11:15:47 executing program 2: 11:15:47 executing program 0: 11:15:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @clear_death={0x400c630f, 0x4, 0x2}], 0x0, 0x0, 0x0}) 11:15:48 executing program 3: [ 423.595023] binder: 580:581 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 423.647038] binder: 580:581 tried to acquire reference to desc 0, got 1 instead [ 423.648563] binder: 580:586 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 423.717751] binder: 580:592 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 425.598622] net_ratelimit: 10 callbacks suppressed [ 425.598632] protocol 88fb is buggy, dev hsr_slave_0 [ 425.608557] protocol 88fb is buggy, dev hsr_slave_0 [ 425.608704] protocol 88fb is buggy, dev hsr_slave_1 [ 425.613659] protocol 88fb is buggy, dev hsr_slave_1 [ 425.618752] protocol 88fb is buggy, dev hsr_slave_0 [ 425.628728] protocol 88fb is buggy, dev hsr_slave_1 [ 426.088618] protocol 88fb is buggy, dev hsr_slave_0 [ 426.093823] protocol 88fb is buggy, dev hsr_slave_1 [ 426.220814] IPVS: ftp: loaded support on port[0] = 21 [ 426.450745] chnl_net:caif_netlink_parms(): no params data found [ 426.484089] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.490887] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.497937] device bridge_slave_0 entered promiscuous mode [ 426.506120] device bridge_slave_1 left promiscuous mode [ 426.512588] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.559819] device bridge_slave_0 left promiscuous mode [ 426.565383] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.638617] protocol 88fb is buggy, dev hsr_slave_0 [ 426.643807] protocol 88fb is buggy, dev hsr_slave_1 [ 430.351848] device hsr_slave_1 left promiscuous mode [ 430.413317] device hsr_slave_0 left promiscuous mode [ 430.465015] team0 (unregistering): Port device team_slave_1 removed [ 430.476926] team0 (unregistering): Port device team_slave_0 removed [ 430.490980] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 430.522773] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 430.616108] bond0 (unregistering): Released all slaves [ 430.733273] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.740686] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.747715] device bridge_slave_1 entered promiscuous mode [ 430.767122] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 430.777514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 430.794271] team0: Port device team_slave_0 added [ 430.799351] net_ratelimit: 12 callbacks suppressed [ 430.799358] protocol 88fb is buggy, dev hsr_slave_0 [ 430.799412] protocol 88fb is buggy, dev hsr_slave_1 [ 430.815593] team0: Port device team_slave_1 added [ 430.870313] device hsr_slave_0 entered promiscuous mode [ 430.922667] device hsr_slave_1 entered promiscuous mode [ 431.021734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.061821] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 431.071696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.079033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.088602] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.098765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.106624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.114746] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.121156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.139499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.146915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.155610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.163553] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.169972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.178215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.187098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.205391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.215557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.227596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.236061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.244790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.254002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.280236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.286846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:15:55 executing program 5: 11:15:55 executing program 0: 11:15:55 executing program 2: 11:15:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@rand_addr=0x6, @in=@multicast1, 0x4e22, 0x8, 0x4e22, 0x3, 0xa, 0xa0, 0x20, 0xec, r1, r2}, {0xffff, 0x8000, 0x9, 0x8, 0xffffffffffffffe0, 0x7, 0x11c, 0x1}, {0x0, 0x80000001, 0x2, 0x4}, 0x80000001, 0x6e6bbb, 0x2, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d6, 0x3b}, 0x0, @in=@rand_addr=0x4, 0x0, 0x3, 0x3, 0x80000000, 0x8, 0x1, 0x7}}, 0xe8) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:55 executing program 3: 11:15:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x24, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1, 0x2}, @increfs_done={0x40106308, r2, 0x4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r0, r0, 0x1000000000000000) getsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000040)=""/29, &(0x7f0000000080)=0x1d) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000300)={0x17, 0x6, 0x1000}) fanotify_init(0x42, 0x80000) clone(0x800, &(0x7f00000001c0)="cb315a3038eeef24b5a5022b399f8f0b3924b450913b4b766d9c9eda430825663313acf730f1cfdce041bd2c2a77", &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)="437e06435d7c6cb57cd1a6f092d2853b845b92b7ac4a289222f6fc33183e574238f4d6590fabde1945bedc781ff88617cf59573f99a5be18cb") [ 431.358618] protocol 88fb is buggy, dev hsr_slave_0 [ 431.363717] protocol 88fb is buggy, dev hsr_slave_1 11:15:55 executing program 3: [ 431.454297] binder: 603:604 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 431.478570] protocol 88fb is buggy, dev hsr_slave_0 [ 431.483654] protocol 88fb is buggy, dev hsr_slave_1 11:15:55 executing program 2: 11:15:55 executing program 0: 11:15:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'-\x1cm\xf3DL\x00', @ifru_flags}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x8001, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x3, 0x20, 0x100000000, 0x2, 0x1, 0xffffffffffffffcd, 0x6}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x44}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x8009, 0x0, 0xffffffffffffffff, r2}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r3, 0x47c0f8ac, 0x6, [0x0, 0x8, 0x7, 0x7ff, 0x9, 0xffff]}, 0x14) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x67, 0x20000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x0, 0x5, [0x60000000, 0x6d93, 0xa419, 0x7, 0x1]}, &(0x7f00000001c0)=0x12) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r5, 0x6aeb}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)={r6, 0x1, 0x1, [0x6]}, &(0x7f0000000140)=0xa) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000200)) [ 431.508406] binder: 603:611 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 431.510718] binder: 603:604 BC_INCREFS_DONE u0000000000000000 no match [ 431.598598] protocol 88fb is buggy, dev hsr_slave_0 [ 431.603753] protocol 88fb is buggy, dev hsr_slave_1 11:15:56 executing program 5: 11:15:56 executing program 0: 11:15:56 executing program 2: [ 431.649323] binder: BINDER_SET_CONTEXT_MGR already set 11:15:56 executing program 3: [ 431.718629] protocol 88fb is buggy, dev hsr_slave_0 [ 431.723786] protocol 88fb is buggy, dev hsr_slave_1 [ 431.734748] binder: 603:620 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 11:15:56 executing program 0: 11:15:56 executing program 3: [ 431.762620] binder: 603:604 ioctl 40046207 0 returned -16 [ 431.789179] binder: 603:620 BC_INCREFS_DONE u0000000000000000 no match 11:15:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x3) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_settings={0x0, 0x4, @fr=&(0x7f00000000c0)={0x78f, 0x0, 0x200, 0x0, 0xffffffff80000000, 0x7, 0x9}}}) [ 431.837901] binder: 603:604 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:15:56 executing program 5: 11:15:56 executing program 0: 11:15:56 executing program 2: 11:15:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0x77ff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:56 executing program 0: 11:15:56 executing program 5: [ 432.020053] binder: BINDER_SET_CONTEXT_MGR already set 11:15:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1b, &(0x7f0000000080)={'team0\x00', @ifru_flags}) pread64(r0, &(0x7f0000001100)=""/20, 0x14, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10180) flistxattr(r0, &(0x7f0000001140)=""/105, 0x69) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x2, {0xc0, 0x2, 0x5}}, 0x14) recvfrom$rxrpc(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x2040, &(0x7f00000010c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xfd4, @local, 0x6}}, 0x24) 11:15:56 executing program 2: 11:15:56 executing program 3: [ 432.061201] binder: 644:653 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 432.097451] binder: 644:649 ioctl 40046207 0 returned -16 11:15:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x2ddc83c5, 0x0) 11:15:56 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:15:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002800)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) fstat(r1, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002980)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000002a80)=0xe8) r10 = getgid() r11 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002ac0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000002bc0)=0xe8) getgroups(0x6, &(0x7f0000002c00)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xee00]) r14 = fcntl$getown(r1, 0x9) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() sendmsg$netlink(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)={0x2470, 0x3f, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="0425bcc378c86eeca8b6d87174a2cc97bc7ad79bff7ca23aa3627615324e95c79740c8b99b0508d91c394d9ac8731fe8c43e75a64f8627122037d69721b67331ad311bea974a1792bf3bb3e8ba7aebd384adcfd1f7b5d2cf347726947651aefe0a1af54c8f553242ebb49cc1e568", @nested={0x2164, 0x68, [@generic="a9a8257025d0b599df0b30e509d67ce97399b3e5ce00ea2966e008c9038eec17761beae3557c2e6ec716", @generic="e20572420d9a888e45fa4da5c60cb11725b53fb166e22ada132af3335655023fec55af68", @generic="d623b8fc9beb268ecb148cd30df3ed9a0cbabbaa85cfbd2c42bc622c", @generic="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", @generic="e060136f6e0b2aa63f4d7ea4e17a4e44fb2f8e811e293b10cdd70fabd810b8f663f500cd30eaecb57fec97ef1439ce698407bfdf66e4e43bdb1521002722fe437919bdc4336fc92842319e48255d83e35559e740497ae45a59c1bdc8b22a03f3523ca8d97f0f65166d9d52d711e54ea3528c59d3f10a39dfe36cf75a837b93f4acb93aa01d3e29e07248dd34a2bb7ea9a9657edff9c9c2d47971f78707d09b22d05b5f6011fe86458b37c932fc2f42d92fe441bbf7d1629b71dc4dd6e940c0946ad15253b3c0498873425543c22b580ee09d7272a206d27f5ba32dc5a33771695abaf03511018f1d2eaf9734ae28c9ce7f270c79", @generic="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"]}, @typed={0x8, 0x1b, @u32=0xeec}, @nested={0x284, 0x88, [@generic="2ba466ddc6d37f1b5d9bbbfc7698f6e08d5ed1cef54cbd3ea1184dad6126b43721f965901bd8ae262ea437ba55987cda9a5a30f90b03e196bb8d48e14e485d19e14a2456395715b17423b4ffe8d0ef2b638bd9a1563a803db40ec036db879b31112017d024492f7051a48bb496c2891bb543be1e4a5b70290bd85c897396ed11c8674c840583ca3ab775b39f6cd7f2e3e884f915977181ca1b3895abe33986bf410180652aac4f938c5ac20167d508cb3d10f7192c91f9560a69d43d64a90e5e65fa3cda3411", @generic="cfef2da1a9910740fd1ab5aa834c56dc66cecada432bed284de1b14bd63df07b8b2216d68f09223334171e6a3bcaa32c3933cf4e9111b5432f389eb5128c84ac8d02ffc051380b8c465bce1d02", @typed={0x4, 0x29}, @generic="5f47caf04afe4c2fb578ce0fac28e28ceef027f333ae40bd79d2938773cc40aaa8681a8dad499100e1f4aa842a46c19c6d878b739da6e51d0dbdeef4c6dba6164cdfb150df325eb1fc308d7f9b5b8f8a5d0fdd7ad1152d82ebcf93f689c0efdb5b5acc1181a3fac648acaedc8de16dd7b006bf86b3b5f13940f3c2ac96f14eee81269d631738ffc57a68d5b7fa6dd843264cb5906d62a70ab869c105032ed84ea2c6ef6ee48dedf3df", @typed={0xc, 0x39, @u64=0x8}, @generic="0def379d9d88a0c4adbd8837d5ab8e8ae544aad56cc24da9ccaf93a33c3d4711ed2fb3b7482372886feb94bd7fa2e79110bdc22846bc0431e25bd3aaa87c11f81acd7451de2240e20d5fa5b04101b2c9e6d3d91990e7c6fcc814866943418c2fd36d739c722d3fb5fa58ba9d4ca2b1eab761384bbd2adec5ada6d6c628bbb4455b3cbad528", @typed={0x14, 0x89, @ipv6=@loopback}, @typed={0x8, 0x2a, @uid=r3}, @typed={0x8, 0x77, @u32}, @typed={0x8, 0x87, @pid=r4}]}]}, 0x2470}], 0x1, &(0x7f0000002d00)=[@rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @cred={0x18, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r1, r1, r0]}, @cred={0x18, 0x1, 0x2, r11, r12, r13}, @cred={0x18, 0x1, 0x2, r14, r15, r16}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r0, r0, r0, r1, r0, r0]}], 0xc4, 0x44000}, 0x1a52422a62ffff5d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r17 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r17, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='#}\x00\x9a\x1b\xc2_R\xea\xd3\xddT\xd0\xec;\xa4\x9dV>\xa4\x11\xa4\xac\x9e\x1e\xac\xaaT\xd5\xd3\xf8<\xd7Yb\x04I\xdct,&\xe90\xa8\xaf\xff\xd3\xcd\xcd-\x90\'\xa2v\xbal\xa3l\"\xa0G\xebD\x1d\x8c\x8e\x15\x8d``\xb2\xdb\x9e\'\xef_\xde?i\xacl\x03\xaa\xdc(\x96\xbed\x9b\x1d\x95\x13\xbe\xe7\xb8\xa3\x13>\xdd}\x87\xc7Y\xf1\x92\xe3BIky\xe8\x85\xe9^\x1d\xb2\xd2Ycn\x9d\xafQ\xb1\x02\x99z\x81\xff\xc2\xdd)\xfe\'\xb8\"X@\xd6,\xb5\xa6\xa2\xe1:\xecG\x1d\xfe\x86\x85\xe7\xd4\xf6!C\xa3\xcf\xf3S\xeaA\xd7\x11\xc9O\x8e+\x94\x8c\x1f\xd6\x88\x97\xd0\xdd*\x90)\"\xda', 0x2) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(r1, 0x409, 0x8) 11:15:56 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0xffffffffffffffff, 0x4000, 0x0) fstatfs(r0, &(0x7f0000000100)=""/250) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)=""/36) r2 = socket$inet_tcp(0x2, 0x1, 0x0) eventfd2(0x6a, 0x80000) ioctl$sock_ifreq(r2, 0x8b1f, &(0x7f0000000040)={'\xecp6tnl0\x00', @ifru_map={0x80000001, 0x5, 0x80000001, 0x0, 0x3, 0x3}}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xb) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e21, 0x100, @remote, 0xfffffffffffffff7}], 0x2c) 11:15:56 executing program 5: syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6cf76f", 0x28, 0x0, 0x0, @initdev, @dev, {[], @tipc=@name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) [ 432.361125] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:15:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) clock_gettime(0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x18) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) gettid() ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) 11:15:56 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl$VHOST_GET_FEATURES(r0, 0x80044dfd, &(0x7f0000000140)) [ 432.452625] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:15:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x7}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:56 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x1, 0x3, [0x1, 0x9, 0x6]}, &(0x7f0000000240)=0xe) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @multicast1}}, 0x80, 0xb54}, 0x88) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xfffffffffffffffb}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0xfffffffffffff801, 0x3799}, 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @empty, 0x6}, 0x1c) listen(0xffffffffffffffff, 0xd) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x10d, 0x10, &(0x7f0000000040), 0xc) 11:15:57 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10d000, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xe, 0x2, 0x4, {0x7, 0x15, 0xc1bc, 0x7fffffff}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:57 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:15:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7fffffff, 0x840) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e24, @multicast2}}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000001c0)=0x5) [ 432.654246] binder: 698:702 ioctl 1 20000000 returned -22 11:15:57 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:15:57 executing program 1: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x802, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 432.709515] binder: 698:711 ioctl 1 20000000 returned -22 11:15:57 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x2}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8200, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = fcntl$getown(r0, 0x9) sched_setattr(r2, &(0x7f0000000080)={0x30, 0x6, 0x1, 0xff, 0x80, 0x0, 0xc5fb, 0x7}, 0x0) 11:15:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x80805, 0x8010000020000087) listen(r1, 0x4000) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 11:15:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x7fff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_buf(r1, 0x6, 0x19, &(0x7f0000000240)="9f9c4eb200cfd74ffd459db36740240ca1a42d130d9c03ec16b9c3a8afbc178ae3e74ba80c31ff25ef0733aaf6153db2d784d4ac6cf35e84024d0db8d55064d7a2e8e1fe2aa393c5fe910b037a203c131e56e5fa0f37a857ff124d0c29f0384687f4", 0x62) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x7fffffff, 0x9, 0x3) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000000c0)={0x281, 0x3}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x9, 0x3, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r2, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) [ 432.878906] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:15:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa6) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x6c, 0x31, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x8, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x12, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x16, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffff9}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x81) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0)=0x1f, 0x4) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:15:57 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 432.976804] binder: 733:743 Acquire 1 refcount change on invalid ref 0 ret -22 [ 433.010562] binder: 733:744 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 433.024572] binder: 733:740 Release 1 refcount change on invalid ref 0 ret -22 11:15:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000800feffffffeb71d9ba4dc95e8c8875171d9dbea9d3da4c93fdeb9fcd04a8e7142ccf39bc3f3faa1a68d7888df415834abd4c3f36ff63f295fed4cb7bab185265a3a733d5d21cb4fe6846cd32fa8fdbb785"], 0x3c}}, 0x0) r1 = socket(0x11, 0x803, 0x300) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r2, &(0x7f0000000140), 0x0, 0x22, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f00000000c0)=""/102) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000080)=0x5, 0x4) 11:15:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x7ffffffffff, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000080)={@link_local, @empty, [], {@arp={0x8864, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @multicast1, @random="93e3ce93d3a1", @dev}}}}, &(0x7f00000000c0)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000001380)={'filter\x00'}, &(0x7f0000001400)=0x44) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x40) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x7f}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={r3, 0x1000, "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"}, &(0x7f0000001300)=0x1008) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x200040) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r5, 0xc0245720, &(0x7f0000000140)={0x1, {0x77359400}, 0x9, 0x4}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001340)=@assoc_value={r4, 0x100000000}, 0x8) 11:15:57 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) ioctl$TCSBRKP(r0, 0x5425, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) r2 = dup3(r1, r1, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x74f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe082}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000090001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) [ 433.149404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:15:57 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) exit_group(0x0) 11:15:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 433.232850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 11:15:57 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) exit_group(0x0) 11:15:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000858000/0x4000)=nil, 0x4000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x2000000000000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000380)=""/218) 11:15:57 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) ioctl$TCSBRKP(r0, 0x5425, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) r2 = dup3(r1, r1, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x74f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe082}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000a43ba5d806055b6fdd80b40000000090001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) [ 433.391925] binder: BINDER_SET_CONTEXT_MGR already set 11:15:57 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) exit_group(0x0) [ 433.470027] binder: 777:778 ioctl 40046207 0 returned -16 11:15:57 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:15:58 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r1, 0xaa64}, 0x8) ioctl$sock_ifreq(0xffffffffffffffff, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0x2, [0x0, 0x9]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0x7e1, 0x20, 0x20, 0x80000001}, &(0x7f0000000140)=0x18) 11:15:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x6d, 0x9, 0x0, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000500), 0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000003c0)="cd28e0eeb79762b913024f9693d6f91d49b06e544f4c858f7ba1d108712e8bb59160208548fe4ef55c344409f88375fcd3e7484bde3f0165fe91afdf60d37bcdc643590cfab887369a8b3c4fce4795a21d095762aa84c66a0e46ed0c34f0f6ff8bee67a95be0e6cc68028084180a1987a66e8930f02d23301f82596afef22d1938baa8736ba61d35ddf994af17baad60c4555e90920eefcb61e819f17bd9b16778988a6c6b213b8856ad2c8d69d170f4b428220aea686db70b7cbe0925fc5cb292771aa5230dcfe5", 0xc8, 0x0, 0x0) getresuid(&(0x7f00000002c0), 0x0, &(0x7f0000000080)) getgroups(0x3, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0x0]) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="29b91733d0fdc77ddefe4923413d4604705eae952a8f7b5bca6f33d36e4c63e4bf3744f35dbc6107127c2ccbd3a4e06b614f5141e5f44bca25125031f6e8b155b00e14b6248d7e8280bc0d53e34d8f5b73df65536941f5c3e661c4f882486b11429fb23f2aa2faa5b03eb75247571b5d1ab4939b1a292d10dfa546", 0x7b, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x41e5, @loopback, 0x100}, {0xa, 0x0, 0x5, @mcast1, 0xffffffff}, r2, 0x200000002000}}, 0x48) unshare(0x40000000) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)) getegid() syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bcsh0\x00', @ifru_names='veth1_to_bridge\x00'}) socket$inet(0xa, 0x806, 0x84) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0xffffffff, 0xffffffff}, 0x2) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) [ 433.600355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 433.762867] IPVS: ftp: loaded support on port[0] = 21 11:15:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000800feffffffeb71d9ba4dc95e8c8875171d9dbea9d3da4c93fdeb9fcd04a8e7142ccf39bc3f3faa1a68d7888df415834abd4c3f36ff63f295fed4cb7bab185265a3a733d5d21cb4fe6846cd32fa8fdbb785"], 0x3c}}, 0x0) r1 = socket(0x11, 0x803, 0x300) r2 = socket$inet(0x2, 0x80003, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) recvmmsg(r2, &(0x7f0000000140), 0x0, 0x22, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f00000000c0)=""/102) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000080)=0x5, 0x4) 11:15:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) prctl$PR_GET_SECUREBITS(0x1b) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:58 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:15:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'veth0_to_bridge\x00', @ifru_map={0xffff, 0x7, 0x6, 0x8, 0xffffffffffffffe0}}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) r2 = request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='/dev/input/mice\x00', 0xfffffffffffffff9) r3 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='$\x00', 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="a3c19c75286b6d426457130c79fa824224f34d80eed2522140cc502e16801bac72a71de8d15f2bf9d48f8e062a4143f685aaf496fc71a630d2f57c6e8856fc4a4159db363638c308ded3f25f441003f7223db86812573a7ae24c3cdf25910761824ada4ee0f47e7b92f08f4636316b1d6e2dcf5b48a04b5dc013c963362e599a0c9d5c93bf2ddd899efca63e1b4e284b342bc8845d406f6df18d75d57d7198a995969b37cf7bb4f5c0368ebc22e82f5594d34d3c8b7af8ddbd79a48b88ca4cc1e57f9aa3566710c14aa1760aa37cf3c1580ef1a9f435fa292b528af2410af250f59ddc2bee2df1c648675a57c21e30213abca0359215", 0xf6, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r2, r3, r4}, &(0x7f0000000400)=""/57, 0x39, &(0x7f0000000580)={&(0x7f0000000440)={'sha224-ce\x00'}, &(0x7f0000000480)="2e7d390a2d9f850f5a562ef56be71ea020644c4dca93d3adc659f7d7ec85423ef9468415d452142456472675637cefa7655e6a4d323bc22ce6e6ead8f37cc972fe3b3e045b351a0ffc147fe9fc58821182be2d155f15fd1064e9184f53b1f548307e3c11295e2b2c6a8f9543fcef1da88524424bfe8ba4f6fb35ee2e86d5b3601fb859c6a024f726cbc9fe8b039631be3b6f919ce87c6c9ac69dac179f33f36b682098b2e7c6beea5ef5db4f09fd13fc3332c911ba2df059baeff5d4c1505523cf9c7703ef1c0bac2bce585924d261cc52ce33d2e2", 0xd5}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000000000/0x3000)=nil, 0x3000}) 11:15:58 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='reiserfs\x00', 0x0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='.\x00') [ 433.854425] binder: 817:819 ioctl 40106614 20000040 returned -22 11:15:58 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 433.975739] binder: 817:819 ioctl 40106614 20000040 returned -22 11:15:58 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x20, 0x1, 0x2147a3760, 0x32, 0x0, 0x56d, 0x4, 0x9, 0x1, 0x0, 0x9c77, 0x4, 0x3, 0x8, 0x4010000000000, 0x82f, 0x6, 0x4, 0xff, 0xb1aa, 0x9, 0x1, 0x8001, 0x190c, 0x2, 0x8, 0x8, 0x5, 0xffffffffffffffc0, 0x3ff, 0x401, 0x4, 0xfffffffffffffffc, 0xffffffff, 0x92, 0x1f, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4008, 0xa9, 0x7, 0x2, 0x2, 0x5, 0xa617}, r2, 0x5, r0, 0x0) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x0, @remote}}, 0x1e) 11:15:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:15:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3ff, 0x131000) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:15:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', @ifru_flags}) close(r0) [ 434.191970] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:15:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 434.421989] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 434.553663] IPVS: ftp: loaded support on port[0] = 21 [ 435.848676] net_ratelimit: 18 callbacks suppressed [ 435.848685] protocol 88fb is buggy, dev hsr_slave_0 [ 435.853761] protocol 88fb is buggy, dev hsr_slave_1 [ 435.998637] protocol 88fb is buggy, dev hsr_slave_0 [ 435.998642] protocol 88fb is buggy, dev hsr_slave_0 [ 435.998698] protocol 88fb is buggy, dev hsr_slave_1 [ 436.003756] protocol 88fb is buggy, dev hsr_slave_1 11:16:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/56, 0x38) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180), 0x0) 11:16:00 executing program 3: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x807fe) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xf000, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000340)={0x0, 0x8000}) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2000000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={r3, 0x0, 0x8, 0x4, 0x5}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x800) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000300)) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x24000, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000200)=0x6) 11:16:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) accept4$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000640)=0xffffffffffffff47) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000020c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f00000021c0)=0xe8) accept4$packet(r1, &(0x7f0000002200)={0x11, 0x0, 0x0}, &(0x7f0000002240)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002700)={&(0x7f00000022c0)={0x43c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x1c4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x20b61282, 0xfc, 0x5}, {0x1ff, 0x1, 0xfffffffffffffff8, 0x101}, {0x0, 0x1, 0x81, 0x4}, {0xffffffffffff7959, 0x3f, 0x200, 0x8}, {0x7, 0x200, 0x8000, 0x8c}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r5}, {0x210, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x9, 0xae69, 0x3, 0x4}, {0x1, 0x2, 0x6b0a, 0xc02}, {0x5, 0x5, 0x80000001, 0xf35}, {0xfff5, 0x80, 0x20200000, 0x3}]}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}]}, 0x43c}}, 0x40000) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'team0\x00', @ifru_map={0x1000, 0x80000001, 0x9, 0x10000, 0x5, 0x8}}) 11:16:00 executing program 4: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) fchmod(r0, 0x10c) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffe0, 0x200c00) bind$rxrpc(r3, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) r4 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:16:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) exit(0x6) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x1}, {0x80000008, 0x9da}]}) [ 436.109315] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 436.147393] binder: 872:884 Release 1 refcount change on invalid ref 0 ret -22 11:16:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x200000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0245720, &(0x7f0000000080)={0x0, {0x0, 0x989680}, 0x4, 0x80000001}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x80) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000440)={0x0, 0x0, 0x101, 0x3, {0x100, 0xc314, 0x9, 0x80}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video1\x00', 0x2, 0x0) r3 = fcntl$dupfd(r0, 0x406, r2) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000040)={0x0}) r6 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x910, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000000c0)={0x0}) fgetxattr(r3, &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000300)=""/199, 0xc7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x48, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r5}, @free_buffer={0x40086303, r6}, @increfs_done={0x40106308, r7, 0x1}, @dead_binder_done={0x40086310, 0x4}, @clear_death={0x400c630f, 0x0, 0x1}], 0x64, 0x0, &(0x7f0000000180)="fef02d82647b5551f05fd6800576988bb1338d1347ac3784daf3c230c9b70a55c7b697aec3b16858e768e18ca3358fabb22c5ca9186748c89451ca16cd51e7a11ec4b1e8d894af2c3d64fb70a955d36c88ae4a08df76dbbffc29f5f5e96c3c17a7043cdb"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r8, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:00 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 436.351620] binder: BINDER_SET_CONTEXT_MGR already set [ 436.372546] kvm: emulating exchange as write [ 436.413255] binder: 890:891 ioctl 40046207 0 returned -16 11:16:00 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f00000000c0)={'t\x00', @ifru_hwaddr=@local}) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0xad0, 0x4) [ 436.479179] protocol 88fb is buggy, dev hsr_slave_0 [ 436.485303] protocol 88fb is buggy, dev hsr_slave_1 11:16:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='}\x00', r1}, 0x10) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffd) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000540)=0x1) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000003600)='\xe3\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0563044000002200764725aa"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03409320ac19b95f64c2224362cef45b0a1d68973da9dde43002ac4233411611873357274b0c6c487daa8dfaac49d77712083abff258867626a3f78f5382fa70be92d2a449ac7cea3ac63573777cac79e9e8a22dbb716391621c72890e362d13fea74277ef98ede49769b88c89c9f0357be66dfec33b21891605d5c8d18b9d6a92bbb750938796b9a8beda46e4d9a316af21c32503764a4a7de77580fc1098acbda38213e1a999e2d63a9d1e44c06cc338f355031f674375d18dd17a60e52c12bab32f9101f684195e1dd6a4bf19ec2c71800486a8417d"], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0xffffffd9, 0x0, &(0x7f0000000180)=[@release], 0x328, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000005c0)=0x1ff, 0x4) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000380)=""/188) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000580)={{&(0x7f00006fc000/0x1000)=nil, 0x1000}, 0x1}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x84, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x84}}, 0x4080) [ 436.572793] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:01 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000001c80)=@abs, &(0x7f0000000400)=0xfffffc62, 0x80000) recvfrom$unix(r1, &(0x7f0000001d40)=""/147, 0x93, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x7}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3422, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18) 11:16:01 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 436.693176] binder: 907:908 Acquire 1 refcount change on invalid ref 2228224 ret -22 [ 436.750651] binder: 907:913 unknown command 546521091 [ 436.788843] binder: 907:913 ioctl c0306201 20008fd0 returned -22 [ 436.817996] binder: 907:908 Release 1 refcount change on invalid ref 0 ret -22 [ 436.844689] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 436.856209] binder: 907:908 unknown command 0 [ 436.868744] binder: 907:908 ioctl c0306201 20000240 returned -22 11:16:01 executing program 3: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x807fe) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xf000, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000340)={0x0, 0x8000}) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2000000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={r3, 0x0, 0x8, 0x4, 0x5}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x800) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000300)) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x24000, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000200)=0x6) [ 436.889437] binder: 907:913 ioctl c020aa04 20000580 returned -22 11:16:01 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xe2e, 0x2) recvmmsg(0xffffffffffffff9c, &(0x7f00000083c0)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/12, 0xc}], 0x2, &(0x7f0000000280)=""/94, 0x5e}, 0x8}, {{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/152, 0x98}, {&(0x7f0000000540)=""/162, 0xa2}], 0x4, &(0x7f0000000640)=""/72, 0x48}, 0x3}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/207, 0xcf}, {&(0x7f0000001840)=""/220, 0xdc}, {&(0x7f0000001940)=""/32, 0x20}, {&(0x7f0000001980)=""/254, 0xfe}, {&(0x7f0000001a80)=""/70, 0x46}, {&(0x7f0000001b00)=""/218, 0xda}], 0x7, &(0x7f0000001c40)=""/7, 0x7}, 0x8}, {{&(0x7f0000001c80)=@caif=@rfm, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/253, 0xfd}], 0x1, &(0x7f0000001e40)=""/7, 0x7}, 0x8}, {{&(0x7f0000001e80)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f00)=""/236, 0xec}, {&(0x7f0000002000)=""/189, 0xbd}], 0x2, &(0x7f0000002100)=""/86, 0x56}, 0xd4}, {{&(0x7f0000002180)=@rc, 0x80, &(0x7f0000003500)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/72, 0x48}, {&(0x7f0000003280)=""/108, 0x6c}, {&(0x7f0000003300)=""/22, 0x16}, {&(0x7f0000003340)=""/138, 0x8a}, {&(0x7f0000003400)=""/197, 0xc5}], 0x6, &(0x7f0000003540)=""/149, 0x95}, 0x72}, {{&(0x7f0000003600)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003680)=""/118, 0x76}, {&(0x7f0000003700)=""/80, 0x50}, {&(0x7f0000003780)=""/8, 0x8}, {&(0x7f00000037c0)=""/162, 0xa2}, {&(0x7f0000003880)=""/225, 0xe1}, {&(0x7f0000003980)=""/245, 0xf5}, {&(0x7f0000003a80)=""/47, 0x2f}], 0x7, &(0x7f0000003b00)=""/254, 0xfe}, 0x6a1}, {{&(0x7f0000003c00)=@nfc_llcp, 0x80, &(0x7f0000008040)=[{&(0x7f0000003c80)=""/82, 0x52}, {&(0x7f0000003d00)=""/178, 0xb2}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/142, 0x8e}, {&(0x7f0000005e80)=""/61, 0x3d}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/187, 0xbb}, {&(0x7f0000006f80)=""/189, 0xbd}, {&(0x7f0000007040)=""/4096, 0x1000}], 0xa, &(0x7f00000080c0)=""/19, 0x13}, 0x200}, {{&(0x7f0000008100)=@can={0x1d, 0x0}, 0x80, &(0x7f0000008340)=[{&(0x7f0000008180)=""/104, 0x68}, {&(0x7f0000008200)=""/30, 0x1e}, {&(0x7f0000008240)=""/232, 0xe8}], 0x3, &(0x7f0000008380)=""/53, 0x35}, 0xfffffffffffffffc}], 0x9, 0x40000000, 0x0) r2 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000aa80)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f000000ab80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000abc0)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f000000acc0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f000000b040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f000000b000)={&(0x7f000000ad00)=@polexpire={0x2f0, 0x1b, 0x2, 0x70bd2a, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x4e22, 0x8, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0x6b, r1, r2}, {0x80, 0x4, 0x779f, 0x44, 0x8, 0x4, 0x6, 0x4}, {0x4, 0x80000000, 0x3ff}, 0xe71, 0x6e6bb1, 0x2, 0x0, 0x2, 0x3}, 0x9}, [@proto={0x8}, @tmpl={0x144, 0x5, [{{@in6=@local, 0x4d4, 0xff}, 0xa, @in=@multicast2, 0x0, 0x2, 0x1, 0x4b9e0000000, 0x4, 0x5, 0x10001}, {{@in=@empty, 0x4d2}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3505, 0x3, 0x0, 0x5, 0x9, 0x80, 0x9}, {{@in6=@rand_addr="a73b498fb08c305f9f903cc3a192bba7", 0x4d2}, 0xa, @in=@multicast1, 0x3501, 0x2, 0x3, 0x5, 0x8, 0x2, 0x80000001}, {{@in6=@mcast2, 0x4d4, 0x33}, 0xa, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3506, 0x3, 0x3, 0x4, 0x4, 0x1, 0x401}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4d2, 0x6c}, 0x0, @in=@loopback, 0x3506, 0x5, 0x3, 0x2, 0x3ff, 0x800, 0x6}]}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x0, 0x4e22, 0x7fffffff, 0x940357cd45ae6d73, 0xa0, 0x80, 0x84, r3, r4}, {@in=@empty, 0x4d6, 0xff}, @in6=@empty, {0x1000, 0x100000001, 0x7fffffff, 0x975, 0x37, 0x4, 0x5, 0x1}, {0x8, 0xffffffff80000001, 0x20, 0x8000}, {0x700daf75, 0x6, 0x5a9749f1}, 0x70bd28, 0x0, 0x24bc7e3f85364592, 0x7, 0x5, 0x8}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4000811}, 0x40000) getsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000008500)=""/251, &(0x7f0000008600)=0xfb) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x1ffffffffffd) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) 11:16:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) capget(&(0x7f0000000180)={0x0, r1}, &(0x7f00000001c0)={0xfffffffffffffff8, 0x7, 0x0, 0x1, 0x0, 0x3}) rt_sigqueueinfo(r1, 0x31, &(0x7f0000000100)={0x3, 0x8, 0xe22}) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) close(r0) [ 436.985602] binder: 907:913 Acquire 1 refcount change on invalid ref 2228224 ret -22 11:16:01 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:16:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x14000, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000002c0)={0x1, 0x4000, 0x9, 0x0, 0x10001}) r3 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="12f1945478cc295a85b5e59a59e1a56283911e32cc8a43b6d282f551755e0b281617e9c1dad85f34ba5566c6f2954ef5059b521957f23d787ea31f59bf722f84e0446bf4455054055c", 0x49, 0xfffffffffffffff8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x2000000000000000, 0x0, 0x8000000000000000, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x6, 0xfffffffffffffffe}) 11:16:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/52, 0x34}], 0x1}, 0xffffffffffffff0e}, {{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/63, 0x3f}], 0x4, &(0x7f0000000400)=""/232, 0xe8}, 0xffff}], 0x2, 0x0, &(0x7f0000000580)={r1, r2+10000000}) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f00000005c0)) [ 437.038579] protocol 88fb is buggy, dev hsr_slave_0 [ 437.043766] protocol 88fb is buggy, dev hsr_slave_1 [ 437.135021] binder: 907:908 unknown command 546521091 [ 437.182805] binder: 907:908 ioctl c0306201 20008fd0 returned -22 [ 437.183353] binder: 907:947 Release 1 refcount change on invalid ref 0 ret -22 11:16:01 executing program 3: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x807fe) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xf000, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000340)={0x0, 0x8000}) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2000000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000002c0)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={r3, 0x0, 0x8, 0x4, 0x5}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x800) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000300)) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x24000, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000200)=0x6) 11:16:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x3f) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) pipe(&(0x7f00000001c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x40000) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000040)=0xcf8) [ 437.238186] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 437.254239] binder: 907:947 unknown command 0 [ 437.278036] binder: 907:954 ioctl c020aa04 20000580 returned -22 [ 437.379592] binder: 907:947 ioctl c0306201 20000240 returned -22 11:16:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x9, 0x4000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1beb963149992a98d66bf13eb8a60c461f86c8663da5d4c21cbc4f50107954fffb00000000000000000000002b3e5b4c76ff037e000000"], 0x0, 0x0, 0x0}) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1eaf9bcc, 0x2000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="066304400001485689d2acc9badb0000"], 0x0, 0x0, 0x0}) 11:16:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0x50) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r0, 0x0, r2, 0x0, 0xffffbfffffffffff, 0x800000000003) 11:16:01 executing program 0: r0 = socket$inet6(0xa, 0x8000004000001, 0x8000002) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r0, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x8000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={r3, 0x920, 0x3, 0x80}, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @ipv4={[], [], @multicast1}, 0xfff}, 0x1c) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000140)=0x4, 0x4) 11:16:01 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:16:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr="737ef9a3504561f80236ef18924ccd2b", 0x7}}, [0x5, 0x9, 0x10000, 0x6, 0x6, 0x401, 0xffffffff, 0x2, 0xda55, 0xfffffffffffffff7, 0x6, 0x7248, 0x5, 0xbeb, 0x2]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r1, 0x10001, 0x5, [0x6, 0x7, 0x408, 0x0, 0x816]}, &(0x7f00000001c0)=0x12) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000240)={r2, @in={{0x2, 0x4e22, @empty}}}, 0x84) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:02 executing program 1: r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) readahead(r0, 0x80000000, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) 11:16:02 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:16:02 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000000)=0x100) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000640)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') flock(r1, 0xffefffffffffffbf) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000080), 0xfffffd52}, {&(0x7f00000000c0)=""/54}, {&(0x7f0000000100)=""/89, 0xfffffffffffffe39}, {&(0x7f0000000240)=""/139, 0x50}, {&(0x7f0000000580)=""/180, 0xa6}, {&(0x7f0000000400)=""/77}, {&(0x7f0000000480)=""/167}], 0x2000000000000214, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) 11:16:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2d5, 0x0, &(0x7f0000000040)=[@dead_binder_done={0x40086310, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4004240b, &(0x7f0000000100)={0x3, 0x70, 0x3ff, 0x3ff, 0x2, 0x3e000000000, 0x0, 0x5, 0x80, 0x1, 0xffffffffffffff42, 0xd2, 0x6, 0x1, 0x7, 0x3, 0x4, 0xff, 0x8, 0x101, 0x9, 0x9, 0x6, 0x3, 0x1f, 0xffffffffffffff73, 0x7fff, 0x5, 0x0, 0x9, 0x3ff, 0x2, 0x0, 0x71, 0x1, 0x7, 0x100, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x80, 0x8, 0x9, 0x0, 0x4, 0x2, 0xfff}) ioctl$sock_ifreq(r0, 0x28b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002a40)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002a80)={'team0\x00', r2}) [ 437.838747] binder: 998:1000 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 437.845955] binder: 998:1000 unknown command 0 [ 437.881943] binder: 998:1001 unknown command 744770663 [ 437.907138] binder: 998:1001 ioctl c0306201 20008fd0 returned -22 11:16:02 executing program 3: r0 = memfd_create(&(0x7f0000000080)='nodevtrusted}+wlan1][eth1\x00', 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4200, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200)=0x3, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x100000001, 0xffffffffffffffff) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000180)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{0x0, 0x7530}, {0x0, 0x2710}}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) 11:16:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_open_dev$swradio(&(0x7f00000006c0)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$l2tp(0x18, 0x1, 0x1) prctl$PR_SVE_GET_VL(0x33, 0xe69d) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8004700d, &(0x7f0000000680)) r3 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0x5f, 0x6, 0x1, "b24db5566bd79b1beb7e9969c99c86f8", "772e48e155b9781128b575c306191f4c63b64b9dfb0790da5179361f3ba5984664b814d8061ccf337f87ab4a3ae0a792196e5b475755bed4bb16cd1d29746cede77a951ffd8a0fea43df"}, 0x5f, 0x2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000840)={&(0x7f0000000100), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) inotify_rm_watch(r2, r3) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00024010000000000000000000000000000000000000000000000002c006573700000000000000000000000000000000000000000000000000000006a0004d5000004d25d0000002c007463700000000000000000000000000000000000000000000000000000004e244e224e712f7485244e2001000000000000000000000000000000000000000000000000010000001800000000000005000000004e220400e0000002e0000001ff000000000000ff76657468305f746f5f626f6e6400000069705f76746930000000000000000000000000000000000000000000ff0000000000000000000000000000000000fbff00000000000000000000000000000000000000000000000000000c0001010000000000000000000000000000bc00f000000000000000000000000000000000000000000000000000240074746c0000000000000000000000000000000000000000000000000000000003000034004d415351554552414445000000000000000000000000000000000000000001000000449b209fe0000001e00000024e244e23000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800cc000000000000000000000000000000000000000000000000003400534e415400000000000000000000000000000000000000000000000000000100000006000000ac1e0001e000000c05004e210000000500000000ff000000ffffffff73797a6b616c6c657230000000000000626f6e645f736c6176655f3100000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016006a4000000000000000000000000000001401480100000000000000000000000000000000000000000000000050006f7366000000000000768f00000000"], 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000a00)={@rand_addr="bd412373efac8474bf91c49ae4b48c07", @local, @loopback, 0x0, 0x354c, 0x0, 0x400, 0x9, 0x1}) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r5, &(0x7f0000005b40)=[{{&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/82, 0x52}, {0xfffffffffffffffe}, {&(0x7f0000001c40)=""/19, 0x13}, {&(0x7f0000001c80)=""/120, 0x78}, {&(0x7f0000001d00)=""/134, 0x86}, {&(0x7f0000001dc0)=""/211, 0xd3}], 0x7}}, {{&(0x7f0000001f00)=@hci, 0x80, &(0x7f0000002640)=[{&(0x7f0000001f80)=""/246, 0xf6}, {&(0x7f0000002080)=""/159, 0x9f}, {&(0x7f0000002140)=""/76, 0x4c}, {&(0x7f00000021c0)=""/224, 0xe0}, {&(0x7f00000022c0)=""/26, 0x1a}, {&(0x7f0000002300)=""/252, 0xfc}, {&(0x7f0000002400)=""/200, 0xc8}, {&(0x7f0000002500)=""/177, 0xb1}, {&(0x7f00000025c0)=""/68, 0x44}], 0x9, &(0x7f00000026c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000036c0)=@nl=@unspec, 0x80, &(0x7f0000003800)=[{&(0x7f0000003740)=""/5, 0x5}, {&(0x7f0000003780)=""/42, 0x2a}, {&(0x7f00000037c0)=""/22, 0x16}], 0x3, &(0x7f0000003840)=""/176, 0xb0}, 0x5}, {{&(0x7f0000003900)=@can, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003980)=""/83, 0x53}], 0x1, &(0x7f0000003a40)=""/168, 0xa8}, 0x1}, {{&(0x7f0000003b00)=@rc, 0x80, &(0x7f0000005240)=[{&(0x7f0000003b80)=""/67, 0x43}, {&(0x7f0000003c00)=""/230, 0xe6}, {&(0x7f0000003d00)=""/70, 0x46}, {&(0x7f0000003d80)=""/231, 0xe7}, {&(0x7f0000003e80)=""/164, 0xa4}, {&(0x7f0000003f40)=""/195, 0xc3}, {&(0x7f0000004040)=""/48, 0x30}, {&(0x7f0000004080)=""/140, 0x8c}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/236, 0xec}], 0xa, &(0x7f00000052c0)=""/205, 0xcd}, 0x9}, {{&(0x7f00000053c0)=@l2, 0x80, &(0x7f0000005980)=[{&(0x7f0000005440)=""/78, 0x4e}, {&(0x7f00000054c0)=""/150, 0x96}, {&(0x7f0000005580)=""/102, 0x66}, {&(0x7f0000005600)=""/91, 0x5b}, {&(0x7f0000005680)=""/112, 0x70}, {&(0x7f0000005700)=""/7, 0x7}, {&(0x7f0000005740)=""/135, 0x87}, {&(0x7f0000005800)=""/188, 0xbc}, {&(0x7f00000058c0)=""/167, 0xa7}], 0x9, &(0x7f0000005a00)=""/12, 0xc}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005a40)=""/63, 0x3f}], 0x1, &(0x7f0000005ac0)=""/84, 0x54}, 0x10001}], 0x7, 0x40000040, &(0x7f0000005c40)={0x77359400}) 11:16:02 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 438.002610] binder: 998:1000 ioctl c0306201 20000080 returned -22 [ 438.057891] binder: 998:1007 unknown command 744770663 [ 438.067797] binder: 998:1001 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 438.092553] binder: 998:1007 ioctl c0306201 20008fd0 returned -22 [ 438.129599] binder: 998:1001 unknown command 0 [ 438.145611] binder: 998:1021 Release 1 refcount change on invalid ref 0 ret -22 [ 438.163089] binder: 998:1001 ioctl c0306201 20000080 returned -22 11:16:02 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r7, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) keyctl$clear(0x7, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 11:16:02 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) exit_group(0x0) 11:16:02 executing program 3: r0 = inotify_init1(0x0) r1 = getpid() syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x40003) fcntl$setown(r0, 0x8, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000002280)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 11:16:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x1000, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000000c0)="8eb2d8dfe2023db512d5d5fbefec81edca78d5cae0f1350b87147379afa1f7d56334319fa5d900f7e52bd5ea4b98f3543606840c2649e2de102f2073f63479f873e2db7b847fa38327c3b039d39cbb266d4541c8afe3b4412f495dd14d17109ed38d2f528a908442", 0x68, 0x7, 0x0, 0x1}, &(0x7f0000000180)) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000)=0x2, 0x4) 11:16:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 438.317647] binder: 1028:1030 ioctl 4030ae7b 20000040 returned -22 11:16:02 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) exit_group(0x0) [ 438.391898] binder: 1028:1043 ioctl 4030ae7b 20000040 returned -22 11:16:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000540)=""/4096) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000001f80)=""/65, 0x41}}], 0x1, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a, 0x1) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=ANY=[@ANYBLOB="1000ac23e448000000000000"], 0x10}}], 0x2, 0x8000) 11:16:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440fcff0000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) shutdown(r0, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000340)={@dev, 0x0}, &(0x7f0000000380)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) [ 438.573232] cgroup: fork rejected by pids controller in /syz2 11:16:03 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000140)=""/227) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011, 0xb00, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x4) [ 438.625563] binder: 1060:1063 Acquire 1 refcount change on invalid ref 65532 ret -22 11:16:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)={0x1000000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) 11:16:03 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x0) exit_group(0x0) [ 438.693150] binder: 1060:1063 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 438.729506] binder: 1060:1063 Release 1 refcount change on invalid ref 0 ret -22 [ 438.800668] binder: 1060:1063 Acquire 1 refcount change on invalid ref 65532 ret -22 [ 438.834113] binder: 1060:1075 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 438.886718] binder: 1060:1086 Release 1 refcount change on invalid ref 0 ret -22 11:16:03 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100, 0x40000) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/89, 0x59, 0x101, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 11:16:03 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) 11:16:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, &(0x7f00000000c0)='fuseblk\x00', 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r4, 0x10001}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) geteuid() getpgrp(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 11:16:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200101) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x4, 0x0, "752775a3693736da44a24963386a5af8cfaf63bd9e72e817aeb93133bd4fdae66649ef4b4cedecb6521b55aecae07d932d866f1d2478e0979db08363d43e297d4c427533d7650200656fac232ce2eeb7"}, 0xd8) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="e111c2fa3f19bf3e771af81b66334e12ce6183c0c74d0664f51c8707317287a2f66e2733ab5ea81beff07086e1c4df0e4c5ca73338eab80fe9216b8594976a7919b2235d522cba34a1c562ba25fa9702da7b3a6e75b140e4265a14cdf31ad97631b29b3d226e300cf5fcfebc5a7fd086ac800cf1960cbcb6e295432cbedb3ac5a7c02258a879ab215106b05207cdeb67595c885ba893e92932e643ac0976f3"], 0x0, 0x0, 0x0}) 11:16:03 executing program 0: msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = dup(0xffffffffffffffff) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") syz_execute_func(&(0x7f0000000000)="cd80c20000b0b06969ef69dc00d945a58adcd0d01192000880410fd1b02db5d90000007cc481c653fb0fcdc4e3a95fd965eabe3c3b4d4ddfdf400e01efc4a1fd28d29d7d2f67450f483b1c0a1a63460fc4c161fc1f96040476789f") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000080)={{0x0, 0xffffffff}, 'port0\x00', 0x80, 0x0, 0x8, 0x7fffffff, 0x0, 0x64d, 0x7, 0x0, 0x2, 0x96c5}) 11:16:03 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r7, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) keyctl$clear(0x7, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x0) [ 439.128953] binder: 1093:1094 unknown command -87944735 [ 439.148698] binder: 1093:1094 ioctl c0306201 20000240 returned -22 11:16:03 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) 11:16:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) fstatfs(r0, &(0x7f0000000180)=""/178) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x5, 0x8000) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x200040) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r3) [ 439.215318] binder: 1093:1094 tried to acquire reference to desc 0, got 1 instead [ 439.264967] binder: 1093:1114 unknown command -87944735 [ 439.288018] binder: 1093:1108 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 439.329795] binder: 1093:1114 ioctl c0306201 20000240 returned -22 11:16:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, &(0x7f00000000c0)='fuseblk\x00', 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r4, 0x10001}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) geteuid() getpgrp(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 11:16:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x800) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) 11:16:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:03 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, 0x0}, 0x0) exit_group(0x0) 11:16:04 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)}, 0x0) exit_group(0x0) 11:16:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, &(0x7f00000000c0)='fuseblk\x00', 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r4, 0x10001}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) geteuid() getpgrp(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 11:16:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000040)={'team0\x00', @ifru_flags}) clock_getres(0x6, &(0x7f0000000000)) 11:16:04 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)}, 0x0) exit_group(0x0) 11:16:04 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r7, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) keyctl$clear(0x7, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 11:16:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xff9f, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0xd5b9, 0x80000000, 0x40}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000100)=[@release], 0x0, 0x0, 0x0}) 11:16:04 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r7, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) keyctl$clear(0x7, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 11:16:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x80000008b1d, &(0x7f0000000000)={'team0\x00', @ifru_flags}) 11:16:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() mount$fuseblk(0x0, 0x0, &(0x7f00000000c0)='fuseblk\x00', 0x20, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r4, 0x10001}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) geteuid() getpgrp(0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) 11:16:04 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)}, 0x0) exit_group(0x0) [ 440.109195] binder: BINDER_SET_CONTEXT_MGR already set [ 440.126287] binder: 1165:1181 ioctl 40046207 0 returned -16 11:16:04 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x2000) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x2b}) getitimer(0x0, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:04 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[]}}, 0x0) exit_group(0x0) [ 440.177217] binder: BINDER_SET_CONTEXT_MGR already set [ 440.244452] binder: BINDER_SET_CONTEXT_MGR already set 11:16:04 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x4788}}}}}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x40, 0x4) 11:16:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10) r1 = dup2(r0, r0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000000c0)) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 440.316314] binder: 1165:1181 ioctl 40046207 0 returned -16 [ 440.329185] binder: 1165:1185 ioctl 40046207 0 returned -16 11:16:04 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:04 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[]}}, 0x0) exit_group(0x0) [ 440.560292] binder: BINDER_SET_CONTEXT_MGR already set [ 440.612200] binder: 1216:1219 ioctl 40046207 0 returned -16 [ 440.654903] binder: 1216:1222 BC_REQUEST_DEATH_NOTIFICATION death notification already set 11:16:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x14, 0x0, &(0x7f0000000080)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x3, 0x81, 0x0, 0x6}) 11:16:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b20, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x875c, 0x402) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x7, 0x7, 0x5, 0x2, 0x0, 0x60fd, 0x241, 0x1, 0x1, 0x7, 0x200, 0x1, 0x0, 0xf55d, 0x5, 0x7, 0x80000000, 0x81, 0x9, 0x1, 0x1, 0x200, 0x8118, 0xa4e9b11, 0x0, 0x100000001, 0xffff, 0x29, 0x4d, 0x8, 0x81, 0x3, 0xd3fd, 0x6, 0x9, 0x23b, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x20, 0x28, 0x47f, 0x2, 0x3, 0x6, 0x80000000}, r1, 0x5, r2, 0x5d154f0fbf94d6f4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r4 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xf5, 0x40000) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e21, 0x7ff, @ipv4={[], [], @remote}, 0x40008}, r3}}, 0x38) 11:16:05 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$alg(r0, &(0x7f0000000080)=""/104, 0x68) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x4, 0x401, 0x1, 0x0, 0x0, [{r1, 0x0, 0x8}]}) 11:16:05 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r7, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) keyctl$clear(0x7, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 11:16:05 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[]}}, 0x0) exit_group(0x0) 11:16:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:05 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/251) 11:16:05 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB]}}, 0x0) exit_group(0x0) 11:16:05 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000070000000000000000000000000000000000000040000000000000000000000000000ce99027feea808dd9e5000000000000000000000000000000005877f0ae2ab243fa41d45c51e1dd4f6287740d9d46ba45b889a57cda66e09d2de3fbfeaa4f7cb9bf21fda87cdbc5cd14fc4d5197f9256dcb00a6763fe100ee72212fe821f14a2492f3ed702731b1c42af6feeab9dfebddee91e51c338455c2936a534fab1e3e26"], 0x0, 0x0, 0x0}) [ 441.198605] net_ratelimit: 18 callbacks suppressed [ 441.198615] protocol 88fb is buggy, dev hsr_slave_0 [ 441.208726] protocol 88fb is buggy, dev hsr_slave_1 11:16:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x70, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x50, 0x2b, [@IFLA_XDP_FD={0x4c, 0x3, {0x6, 0x0, 0x0, 0x0}}]}]}, 0x70}}, 0x0) 11:16:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0445611, &(0x7f0000000100)={0x2, 0xb, 0x4, 0x200000, {r2, r3/1000+10000}, {0xe2c5adf7c6fba2e9, 0xe, 0x0, 0x3, 0x6, 0x3, "c5c8b6bc"}, 0x3e7, 0x1, @fd=r4, 0x4}) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 441.424781] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 441.433791] binder_alloc: 1258: binder_alloc_buf, no vma [ 441.442822] binder: 1258:1259 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 441.446017] binder: 1264:1266 transaction failed 29189/-3, size -1653946963151814656--1884319384239986800 line 3035 11:16:05 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB]}}, 0x0) exit_group(0x0) 11:16:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='vxcan1\x00') ftruncate(r0, 0x645c) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) clock_gettime(0x5, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x400, 0x113100) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000180)={0x81, {{0xa, 0x4e21, 0x2, @rand_addr="5956f9decb0b23f00d28ece14c895ecf", 0xc7b}}}, 0x84) [ 441.470112] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 441.481234] binder: 1258:1265 Release 1 refcount change on invalid ref 0 ret -22 [ 441.495731] binder: undelivered TRANSACTION_ERROR: 29189 11:16:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) write$nbd(r2, &(0x7f0000000280)={0x67446698, 0x0, 0x3, 0x3, 0x1, "33fc7f5084a0bb314a88c6a6dc32d4ec62147c5dae064f19e67242ef8f525cf285d3f7fbd51bf322765a84af9269727bbf24c862136d2e727fb00960bfbe1c39abd251c52886abedc90a5d2bff293e3fcb871aacdb1ec2aba7ff119424fba47b8b1bcf876496573f236fcd063cfb8bbeca278cbb7c40b135c3e43cb1c39410fddfedca6b92572448fa8416ba7bf1c5cdc8181511bf"}, 0xa5) 11:16:06 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) keyctl$clear(0x7, 0x0) 11:16:06 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000082) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x3}, 0x1c) listen(r1, 0x18) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 11:16:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x40000023]}) 11:16:06 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB]}}, 0x0) exit_group(0x0) 11:16:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x3e800, 0x100) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x0, 0x0) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e6000000", @ANYRES16=r3, @ANYBLOB="00012bbd7000fddbdf2504000000240006000800010008050000080001000000000008000100ff01000008000100200000000c000500080001006962000084000100080003000000000008000300060000000c00010069623a79616d3000080003000800000044000400200001000a004e2480000001ff02000000000000000000000000000103000000200002000a004e2200000400fe880000000000000000000000000001b30f0000180001006574683a76657468315f746f5f68737200000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4040000}, 0x90) 11:16:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) fallocate(r0, 0x2, 0x7, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:06 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c00"], 0x16}}, 0x0) exit_group(0x0) 11:16:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0xb, {0xfffffffffffff800, 0x4, 0x400, 0x3}}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000a00000000000000ff3858010000000000000000000000000001000000000000000000000000000000e9ef00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000064f28614eb0cd344b75ee251bbd8d2c0d0ccde170d4293f253f7caff070abbed0ddb886389f650"], 0x8c) 11:16:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0663044000de0000"], 0x0, 0x0, 0x0}) 11:16:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x67, 0x400000) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0x0, 0x4, {0x1ff}}, 0x18) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="110300000000000000001600000004000100"], 0x18}}, 0x0) 11:16:06 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c00"], 0x16}}, 0x0) exit_group(0x0) [ 442.078598] protocol 88fb is buggy, dev hsr_slave_0 [ 442.083773] protocol 88fb is buggy, dev hsr_slave_1 [ 442.113761] binder: 1337:1338 unknown command 0 [ 442.174260] binder: 1337:1338 ioctl c0306201 20012000 returned -22 [ 442.213482] binder: 1337:1351 ioctl 80044323 20000040 returned -22 [ 442.238579] protocol 88fb is buggy, dev hsr_slave_0 [ 442.238614] protocol 88fb is buggy, dev hsr_slave_1 [ 442.243744] protocol 88fb is buggy, dev hsr_slave_1 [ 442.277701] binder: 1337:1357 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 442.325048] binder: 1337:1338 Release 1 refcount change on invalid ref 56832 ret -22 [ 442.382433] binder: 1337:1351 unknown command 0 [ 442.387163] binder: 1337:1351 ioctl c0306201 20012000 returned -22 [ 442.499916] binder: 1337:1357 ioctl 80044323 20000040 returned -22 [ 442.523332] binder: 1337:1361 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 442.545830] binder: 1337:1351 Release 1 refcount change on invalid ref 56832 ret -22 11:16:07 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) 11:16:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x80, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5e, 0x9, 0x0, 0x1, 0x0, 0x553a9c53, 0x0, 0xa, 0x8, 0x7c66, 0x7f, 0x0, 0xdf2, 0x2, 0xfffffffffffffffd, 0x9, 0xdb, 0xcf12, 0xfffffffffffffff7, 0xf2, 0x9, 0x100, 0x20, 0x7f, 0x10001, 0x3, 0x6, 0x1f, 0x6ce8, 0x88, 0x44e9, 0x2, 0xfffffffffffffffc, 0x0, 0x1, 0x8, 0x0, 0xfffffffffffffffd, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x4000, 0x1, 0x5, 0x7, 0x9, 0x9109, 0xd20b}, r1, 0xe, r2, 0x8) 11:16:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001900)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000001a00)=0xe8) connect(r0, &(0x7f0000001a40)=@ll={0x11, 0xb, r1, 0x1, 0x1, 0x6, @random="300ea2c69f79"}, 0x80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b519b02e149f63c0fdfb3836ac3fe8666b63692b2397caf3", 0x18) bind$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x4e0641, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0xffffffffffffff88) close(r0) 11:16:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f0000000340)=""/150, &(0x7f0000000440)=0x96) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x895d, &(0x7f00000002c0)={'bcsf0\x00', @ifru_hwaddr=@random="5f41d5025afd"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) rt_sigtimedwait(&(0x7f0000000400), &(0x7f0000000500), &(0x7f0000000480), 0x8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) mq_unlink(&(0x7f00000005c0)='bctf0\x00\x00\x00\x00\x00\x00\"\x00') r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) finit_module(r3, &(0x7f0000000580)='$\'em1]@x@-.\x00', 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) pipe2(0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="00fb3d000287dc0872b6ba769def135b850c9bc8720f48d6adf319aae7a4ea6d7d2fdcb035f4b67e7c647056de77ebb1d9766803d4d777ac3796cfd63bdd49aaefdcbf58"], 0x1, 0x3) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 11:16:07 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c00"], 0x16}}, 0x0) exit_group(0x0) 11:16:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 442.700771] binder: 1371:1378 ioctl 6685 0 returned -22 [ 442.718572] protocol 88fb is buggy, dev hsr_slave_0 [ 442.723695] protocol 88fb is buggy, dev hsr_slave_1 11:16:07 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c"], 0x21}}, 0x0) exit_group(0x0) [ 442.752838] binder: 1371:1381 ioctl 6685 0 returned -22 11:16:07 executing program 3: mmap(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xed, 0x48a0, 0x1, 0x8, 0xa}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x0, 0x2, 0x100, 0x9b820000000000, 0xa5, 0x9, 0x0, {r3, @in6={{0xa, 0x4e21, 0x400, @remote}}, 0x6, 0x3, 0x80000000, 0x20, 0x1}}, &(0x7f0000000280)=0xb0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @rand_addr, @remote}, &(0x7f00000002c0)=0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0xcfbe, 0xc1bf, 0x2, 0x2, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="3b460634622bf915ea63a864da064f3ad08979f0f535a2fd11c857847e9d6b6b5b1dcbfcaa8c50a060ddf83f70b72fb1346b476bbdae51788325e71397245c7a3a593b7d43f5b13e76c18e491c989cad29244278ee16d3dfbc5482c5bdd4c1b93dac303e99aedeb5bc149ada76fce75bf6d0cde86ef21e9cd183b5d79f635ae14572"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000400)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score\x00') preadv(r7, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000080)={r8, 0x7}, 0x8) ioctl$TCSBRK(r6, 0x5409, 0x8001) getsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000100)={{0x9, 0x5, 0xffffffffffffffbb, 0x2, 'syz0\x00', 0xc1}, 0x3, 0x602, 0x3f, 0x0, 0x5, 0x5, 'syz1\x00', &(0x7f00000000c0)=['/dev/snd/controlC#\x00', 'wlan1/security\x00', '\xd7:\x00', '@GPL\x00', 'vmnet0!\\lolo\x00'], 0x37, [], [0x2ff, 0x18000000000000, 0x800, 0x400]}) timerfd_create(0x0, 0x800) 11:16:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0xadd1, 0xfffffffffffffff7, 0x8}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:07 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c"], 0x21}}, 0x0) exit_group(0x0) 11:16:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) socket$inet_tcp(0x2, 0x1, 0x0) [ 443.278582] protocol 88fb is buggy, dev hsr_slave_0 11:16:07 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:07 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x20) getpeername$inet6(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x80000000, 0x8, 0x7, 0x1, 0x3f, 0x2, 0x400, 0x4}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000004c0)=ANY=[]) getsockname(0xffffffffffffffff, &(0x7f0000002840)=@hci, &(0x7f00000000c0)=0x80) ioctl$NBD_DISCONNECT(r1, 0xab08) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 11:16:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 11:16:07 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) 11:16:07 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) fstat(r0, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:07 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c"], 0x21}}, 0x0) exit_group(0x0) [ 443.412185] binder: 1417:1419 unknown command 0 [ 443.430656] binder: 1417:1419 ioctl c0306201 20000240 returned -22 11:16:07 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c000200000022"], 0x27}}, 0x0) exit_group(0x0) [ 443.465082] binder: 1417:1419 tried to acquire reference to desc 0, got 1 instead [ 443.465756] binder: 1417:1431 BC_REQUEST_DEATH_NOTIFICATION death notification already set 11:16:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000040)={'nr0\x00', @ifru_flags}) open$dir(&(0x7f0000000000)='./file0\x00', 0x141240, 0x80) getegid() [ 443.592920] binder: 1417:1445 unknown command 0 [ 443.611253] binder: 1417:1445 ioctl c0306201 20000240 returned -22 11:16:08 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c000200000022"], 0x27}}, 0x0) exit_group(0x0) 11:16:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x20) getpeername$inet6(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x80000000, 0x8, 0x7, 0x1, 0x3f, 0x2, 0x400, 0x4}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000004c0)=ANY=[]) getsockname(0xffffffffffffffff, &(0x7f0000002840)=@hci, &(0x7f00000000c0)=0x80) ioctl$NBD_DISCONNECT(r1, 0xab08) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 11:16:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x201, 0x28) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000200)={0x5cd, 0x7, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x208000, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r6 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 443.922850] binder: 1462:1464 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:16:08 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) 11:16:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x1, 0x4}], 0x0, 0x0, 0x0}) [ 444.159849] binder: 1472:1474 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 444.174848] binder: 1472:1474 tried to acquire reference to desc 0, got 1 instead [ 444.205507] binder: 1472:1476 BC_REQUEST_DEATH_NOTIFICATION death notification already set 11:16:08 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) 11:16:08 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c000200000022"], 0x27}}, 0x0) exit_group(0x0) 11:16:08 executing program 3: r0 = socket(0x13, 0x4, 0x7ffff) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000006180)='/dev/amidi#\x00', 0x1, 0x101000) write$P9_RCREATE(r2, &(0x7f00000061c0)={0x18, 0x73, 0x2, {{0x8, 0x4, 0x4}, 0x9}}, 0x18) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="99abf3406764fd3209f702c8dd", 0xd}, {&(0x7f0000000140)="a1d24382d9b9fb999584c1d8324242b37e44a8076310d02ef249fe48ec58fa69588919258c6cbd30270dea2ccd4243403cb7148fd73276ebd410459f071e9036e6e866366410ebabcb570c715545e897bd1b3e6f7d77197243f8c243cb727e8706615e1f896518e450b1a27a780711d740cbdc0df18a69e98b9e0c8d1f854a76028659b8f4d876", 0x87}, {&(0x7f0000000200)="2f696ed644dba0de99b6250787854d2eabefd6071de541a32993cff40a17d5fd7baeab463d64af2257121577e93efc8582761c421c9f415ab3171b026cbffb86c60b2d7f4105e0f7d0d49265e0d76a23cd2e21e17fd47a68ebc0ca60b215f6e3d91322061133b8eda5d61af0c49b26c9d87f62d08929c0c3bd45ed17016b97cb6debf87bdc8d9c8c39c98593a50b0abebc198780a3f31818e731d8c7a340a0573c855dd764ceae0fe8fb7647458ff0f8d9c843da84d7338fafdf73063d31d8e2ebcd029115e13e14edcc0c6c716ce17c9b62b339b6f48425bd25c61829d080ececce96c29a3a104c7e8aec82124ff108fb3868cc04fd", 0xf6}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="8bf1c3842358fc3e63f7a915b0322a59755230fa0701a025a8b852996405c1b7434a06be98e53527c9f456fa23ce68017a64abcb3b11bf1e727299b6eee173a5523b16384e1126f9eeca5f4117702d30bbb28e5f2e8d1f5590d861d22e602ec95f278163614ec81bf863df598bb8850f2806f75e3abc4d4c2e080e57e96008f2224a3bed37f466326085ebc84d68a7815ea1", 0x92}, {&(0x7f00000013c0)="873f6982d4380634c59f7e1bd66bf7d9525ba415d29464f054a78a9250e009d175c1846bddc195a9915d5a8a40e353bd0bbbe14bc1b97c917ab0244d023de217e832cbdb7a69a5ac4e6d5d3127358b7d4a7da4f91b272e934ead6ff9ea36ca063c3d403f1c0f96e333e8e36fcbc640d446ae7a84d7", 0x75}], 0x6, &(0x7f0000001500)=[{0xec, 0x11f, 0x10000, "979fc77548da85fe3c617f573c28a59f53e8c5a373a5f993f4253a3d683cf578e5476ae4e970e389844002fe356d078396577bd2ed2100f58fc0456f368730a49714ee83b5b77846c00aa5b02dd02d0ea25d482574db289d0b27805cb34dd9911e12a0651a8cc3de67d3cf87a527b7601ebc0941f8b9b6cc4b44bf7a5ce85640407f5ae700ddde21ee81939911383090dca2d80d8b22637d06b1ca95d243cba47bdc2ed83973b8cc5cf03f5927b5b9dee1e873ffe653b4aaa2621cf806f8ce7d3d002b2d67f9e7656b66a31d67d59cf913050ff13907acdc107a9e0e19066c"}], 0xec}, 0x8001}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001440)="e8ae0856c60ac5a4e6f57555998d68d83f11939cb4acaafe85ddd2a4b1ad76f194647f74ce19721d5804418bc5304a6ce9ff22f7e2f1f453651242c80050bac1497a9a50326d70dbaa87849455da8e979a75c5ff93755adb", 0x58}, {&(0x7f0000001600)="6063ec39d5f6a261e0a6f6c80ff68555dd21ff13a409b5ef877058a81be10baa02f2926221a42b1c4f54f5c9dddb76daaa36500189be6818cd099b34f557521eb3a597ab86d7ea8a1912f2cede897520326ff95054c2f940028fb85d06395c533d5be1e60a564e5852f4aa723a699587c0e6d56b4829b930a8dc291cd6aaf44c8514308e2a6960ad7a2d1ec5e3a1b4a6626939a36dd7e20754b8d07ffce94395abc2aea5de8f62c191fe5740ec53f6bfa64801879d017a0c62e106ee1861f2b057a15b46e469bac1b7e9b7e98c166d0f9e802c161c9de3d2dca5f64efd9ba282e584e15778ff37ac91f1", 0xea}, {&(0x7f0000001700)="5aa24f82071c5f50a57d637ec0fe33b1b0f135ff182d84841a9f0cd82084bca11690b110f8cea5e8372e4a417746be3d58d00a541a827f6ae1325b8fda591d4b8f87043df617cca08ae02194349c60aec74c59632e775200be2b709c63611706e37953134265dc1abd5e1b2eb026e1529441ee66f27a9e008192264fa4ec01827a1484f149836242bea328e971074ad754f5596528b9a5f3ee517090c698325dce64aa19d159ef088752b7eebaad79ade47e93c851ebcd3d7e101298305ba8", 0xbf}, {&(0x7f00000017c0)="a713b273793ab1d22e650cdb", 0xc}, {&(0x7f0000001800)="c7ae8c023940e1c5b633eb43ca79edfeb4a75bf904773fea62883ef4e9e317f40f557509e7cf", 0x26}, {&(0x7f0000001840)="7fccf0ab053f37a24f5ef6ff80659205a4b3f2d44fa9bd7c7f73490f7448ffadd3298886a21aa62547ce8c8005c495ae3bc185ca83427ee83563be6fc0394db6a2195ae9641742995cd08464ee686a03293d80cfad835ed14f048eb0d9161b24315302a5780b354ce0af3dbd0eed76842a0311", 0x73}, {&(0x7f00000018c0)="31cdd9b7007c3bd3bd1e3ec2257836d7d7e91f0f66061ea8b6711a97a74c07e28d24167783aca5066edbf37ddf3ae5254e2e9f8fb52943635b071e7a2cfb8e8ab0ed1850b07ce0c6f3116bc9e0898c032304b002c1a13f8f36bf12a1508e61e1e9db4a03f4987ecf880925230f7f15efaead8795626e816a9af55f0f1460a024e14b3abc8c872fe0a098dcb55dbacd84cb9a71beaead54a7178bc7389c70a8ef83cc4e120d9bdd0fc85396a20b33c0a2a07d22c874d1", 0xb6}], 0x7, &(0x7f00000019c0)=[{0xf4, 0x1, 0x0, "2ad3656f7f576525786e5799b08e87b58fd48b5e1c2092480fa8e6ffb9c47ee1b2dcdceea016941b0aa88e0826ad545621ee017e937ea2f252365628fc6b4bf8ddc241298c825c4b88ce605247e2ddd286a5647201085fb508e4b68ea8e23e3992e57000da1200f5f1c498966a92620d8e504c2fe78f7028193fe9ac71a892ce06072a028ecca382db4301710403015bb58d979d250f401bf0c2dc2044116ba37c60a2c1225d0eb68e5110dcf66ecc948756db3d73b0f3962a5a566ae50712af4f076170bb0a8626a847bd6f898c640b157c90b63257869763d767b1035e62c2a97bebd3b82a23f8"}], 0xf4}, 0x9}, {{&(0x7f0000001ac0)=@nfc_llcp={0x27, 0x0, 0x2, 0x7, 0x4, 0x5, "76eca1124fd107955a0f5b854ba80504919d5e090fd19cec82f315e81da2092375e032416ff344ca87ef5a524b84a6219d669636002c67a82b78f451fd4e43", 0xc}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000001b40)="0b10df3b7c459b4146dfb228a321ba9f6dfbf82805b2", 0x16}, {&(0x7f0000001b80)="4eda03044f81c49f48f668b996f0bd6866685418e372cd924a1ff85258d08b14f4a086b9cfb54018fa323edebb01d7f06054bc63d165942699b30a6321d1a99b0858323cf5b60396349e010ce550402c5d4919672dd2d11080a5998496c7d9926bbd77d985b22136d16d5ca2dc1488f64384c89d206720efda8ab5b4612464e80b", 0x81}, {&(0x7f0000001c40)="cc7486f526e70b462ed39904565f98071bc8229480fa94f1e36c93841f4c688c050ab421cf46e9f37040fe1c81b3e8adbdf214dce051e619c3b23ff106219a99d489f29b056beaf11b3010be420ac28ae7d5baaffcf2c9a66e956f130cf80b3c1cd9a217f95e55cb2b64abde52062e3cedbc506da4c06ec232d470cca5fcd2bbec3162866cb5bda7e6649e7a6feef1981f5a2a52a76fa4bc10b8dfbee6f9e6f60b35a924bb478a444b3593cd3e8022e3055783a16a41151bb041a63c63615c1b19da494bb54295489db4b6", 0xcb}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="5ff90d4e398706f924c0647e8471405d742e2c157b70409fb48afe96078b6516df2af156bf21db943722811bf728e4a865cdff99c9873681db9ea7d3f312da8a944e77da68042954d95f6674e62ebaa6b8a8e55120b7f9ab3412e0176167d3802c1f2bb1434d07be485d741f9b3064992cb9ad64844f5d1d35ddf0024f3bc9671db6d9ef624dbcddb92b5ea49eea805d81109010e361c845b9424a1a57b05f8c0b7a09b6839b76889fc6f69acd6def9effe18a2a3749497e8942cbd7735560af9dbecc87766a3112fa6f574f459fbc66abaf9efe0c275177e8738714a741ca88b4a0b3cc910ed7", 0xe7}, {&(0x7f0000002e40)="bca855dbe276b230b20e22bdd7653c9795c4b5bda4c294444144a3be7bff343ccadfa21c1d11d86b2e75017ae53d", 0x2e}, {&(0x7f0000002e80)="77789ed9a570a47548de7e694748fd5e0f0045e3017be32e0af1fa1a7f9ba1c38d56d3609db5cd70342a1427198f645c33f611ad1415d770f7ec14a3c31030f7809438651994c8575d9bbcc0da35b971039e7de539c5a6544f", 0x59}, {&(0x7f0000002f00)="8bd56080776714a7bd4ec5ce03847c95fe413e93a05aca743d499444b6090c0177ee601aaee18d040a1159c1451733c0e3dbba1806de7253c53ab9e396f096d71e7122ce0da00a3f5faf517bff8e46c5a8540ee60ecb7205b641a89b81c5a945e3d3d073f5d0b89fc5c0f5e2b3a89e3f88fdd8ed6a1fcd6bc9c88ceeb15b16e0858fb9cbe3130cdaf3edae0c9d53e0681f2359ddd762ae10f3973069ec8252ed2b70b77d8d6b802154dbdbfc1dc5ebe4da65b9ec0c64d70c2b809e5abbfdd9ae8b924ae6d982d8e222497ae39b7abcfba98499a3f990b49ee805a48792bc491fea936f42f61ae5f80d0d2226a97ff30dc78475af7bf2d595d948c1ddd2cedb5c75643350798e0494c464b7fd1470c1179aae567c77a04bbd0c8a4e5f978abbfd719ce91187b23555098cc16eadba3361dbd654d500dd9b33bdb3f7abe1fd11dff4f6bbd27a6eb2f37fe5656a27e4f855207ce6416a3e05a36b195db6004fec63fa864511354a95da236d1b97fdce8286fe0e317411e0511621d55106c51571e3f8cb48f3451b7e5a7743d242714cd29e804c8554985002abd9d477d944e69c5ff262ee31502dc25daeb263b8e056b365e79ac706c22c28e6cc0479d908451762cd4eedce944d2f5fc1cc336aebcad5e43bb94ef33bb5644e9452fb89065952223741195d59b63476322d46e82a51374853275e4ee41338f6d0793b982723643001badeec281acb7a067ebe0abc503723a572c34250be720610a792c1ef0f8b41b23c72e4d24b00e872dafb8289acb2d48cd6f81c079860496ae1fdb95bc15ef7720cced5693842b5c8860a54469ebdeb14ad67bf71f853ecb82639b450aa47842a80fd5ea87fe5c2f230e7603a7ce5eaa53819e56b00bed324b7b2d1a00ad0f9745f29df559ee55b287a96971ef9d554bfb3e34ed2b76e4494302769330823f110a21b93f5a38f625a2b4f77678aac45b30148fdfdc332789f564ee47d899c9638b70ebdd77bcceda6c2e62c82a785a060a53c58ed61b9f8284dbbe4c602ab5a74f58532064890573b435f98dce6c27145911ef1bf08c6280e6397326a7d3e62b90ba4ebba65348cd1ab75595e13083e96bba6ea51ff26f7faa4d87a0796ffc3b6ef589dc529a0944f8b8b2e3bab0a34c54ce06b7486e9e9ed16618d3fd3cc9c68fc18ef37ec906d568d07a7384fcf257be8bb4ac83ece1cfe8964dc2322fa325048fde04e758c17506f234d2511c2e13281fc75fef33cf24d40907febf57956878e49a198a055c860e5265f8bd46cabd0c93429bcf1d1a20e202578942fd8c94b7b855ebc84aaee29f99b4e4d2b5d436ef6e485d1fa46fb7cb8e14fc653eea6cbf8127d47929e56e5baed4cb3ff109ba5692c1f9e2892edc2f8c8ac41f48b7d6ba89981736bbb303bfb8f2c3099a02ca7fa491e8309f3692cb31ca37f7945b5d334c26e1e816575db711b77891ee226fd81116718e24b01914a857d9f7575d68d84893b37805fe7c42e0fc444dc7b3a7d05e294532a7735e64a1491888dcd4275dea93a21a8fd1c1634fe8cdf771c20c3c64bfd026fe361e792252ecb9c80d1e059d5e36494b9d59abc94202d5a459fa4148b4e9ec07b9dbfe231125cb052751ea465cfc0ffdcaecc48c31a2b9dca062c7fab5139f8eabfa95d9e8121e9cbdfb79e9e9e62ffa79a2819756b17521bed77b23af7560f70631463adecf994af87c46b548d04b6bd392c64191bccac3e94dfe5dd7e7d0666c20d988b8e5683f984face4981be8384bb67598fe6a516484a304ff66b38e2b04f616364c234548ab0cfc28d3ec2136b4e957b2b832e2bbff8b61b31c03151fa05cb2956990126b51bde0c3ee9e2e4d0f2c3777708242416d57cc9dc769cf17988347f12d6c6f037ef2f0337e8dde382b37846e3f1784aff13d393cf6942e8d10c7fae67690a1edad52b67b2056237fcb40c5cec8341d3db168c864326e38a8bb47a73369bb72c1efc8ffdb250773f55cb284a116dbd67e518c1fe0fd956aae9cac52dd603edf73a3202446fe23dca66414cb004d6d1f10f47c773e967dd311ba5248df5988d12846c357593886ce327c1d337b1d3febc75e208c0e0538041a80b7abce304114503c5222986751ed2cec7a733f81763c32fca4e2ef80672902692db8cd224167ee094c5b6adb3f0e3d0da49fdb2b1ee9298f8a7b3485e39090ee80676cbf2d71dd18af1c8997952cfa7e0bfb9750a9911c15a840a2cdd1175d193ea8c24b8fcafa1817d154b50e25822b584c4ab4370671cdfe97922bbf2d14dae6795e9626bbdffd3479602eeeba75dac7d9b26f088ed44d8563ccecae8ad388dff91da8bf9b7a9689b16c17ba7437250e289387b7832669b017192057aef753c153cdb99fb8ba95af66b38318254c600fec4bab57a0a17fdf84d427152202b4dd371dfcf7351c2efa09c574dfb9706b561b8ad22f3d3b12981c0c43249e880e6a3044a0e83513193866e90a1535df074533dd70fa2dc4c2f45cd7ac06e0992772446b519002ea2e769edcd5a05192a4fab50f8e976316b584700ad03c26046e43df7e9ab459d195c64fc404d14f6423a4c1f92989e16b1b170cf47177fb991b4784a48cc8e9396bc29ce8bea60953038ec7a73c9cf45fad2d07480843292a88318e886e097fb17eba176b7e4ce5e20e22a9219188e2ab6b5ee7956343fe5ac29d5d43527163d0822e49526b1afb89ffc05769affb00f8d2532778c5e6d20cca7cff560fe6cb021969f395a70e8fca3ee82f92e53e3fa9e7deec6d57a19546046ae652ec4d354df4265ab53a4a84fd538aac0f520a34e684f76e4c33bd8874b80299854654e11d0412733103c729eb3a831b47208756869f3929648e64b3c27b5a22a40c407dc0e4e74b4b0b88ad54ade27291c860b10756a5b5254aa8c20be4fdca1e886fbfa9da0ceda881ae6ea21191cefcae767bb7f221d4450c18ebc02bcf72f24a4dda1dbd4daf64566ea4d8039e87062ab90be5de5eb21d4fe7b87280cc5bf9e8947b0d9c0887e277067036cf180ca9a74722ff4bf9fead4f0eddc462758f685f03660b4a77e88f2a904e6c66ce34bdfcf39d8988d2c10723727804c8a89292f96af52910b3b7ec86fb68fd5506b7b38d066888f0b0fc1f44c4136aa0a836b5b9911e3cee613f1b5c1227700dee2d456b6b1182c367f34763b51e1dcd5c9844cefd84db7036638606a7e4ad72e0a6214cd97b5add1b2ba398b2ce7dac9e50d4e6d931fc3605fcac7cb3a113c26795ce0bbcf1fda079cb62603d9b6231e4f07f990d8ce001607b29f4f4192d620078ac4dc5aad241e60920dd20266d1c51e67fd4e38994f0691ade5a31f7e3156face3fc7802ad121a155b7b36f7cc5a57f9e8a62da33a5c6d2b87cd917a5d6d45cbea914bab20920c03581ead1ade7aae86a76e0128c8b58bbe037e9e72f179247ea8e2307e7112576c5a07263969b3fb72b186d62d094c25bb8fbd3cd58b93904fcf3ffdba924627fbb02fa015f12ee39f25ccfcc7d743181c7a5c2aa6218d59d9c84eac3c899bc5f6a25f4a7cfa1d6b217fb6df4b93a11cba6e625f4f1dde24b6483fcfe6573ea7bf396cd8b4bf2a6246b60807db94c4c0a0c2a2187cfd55cc313613168329cb2273545e11f9a58ea8ba720b40fae6240b2ef5bcf52aeeecdde45289dde401e76fbcaed77d68d1300b95cef12ed2aee4b5171cf7f70b60f027a916f73b7a28de29cd99431df4634d3803a9346a38e7946d6520d4189b95aedcf9c2596734f9d0018266208f9d6f5b3764544a40f5853d7fa494f68d5f3c7049ab351de9c92afa89d0ca2c6a6e9ec0ec26b8e6cc5e3bbeb1cbc2c8ac0e3cf83af19d7a82bc0b580e32fb6765af6647ff8a2863bb0b469ade0a72c6afd6e5093b9d467ceffc03d141b56b7939ff08970cb228dba4a786f1845521329da6d3b842291e735468d4667213dde0da6407b660c7bfa324f9070ae6843624d5d619b5e225c3cc6090dc45c0dff596c5732da59c81fad72153618b0a4dcf667581f783abee25ed2cc3ce4e274282badb02f84b8522a3400ea964484ae5b356cc2adbc1e62ce2987c89afba1058afcfb664b80f40fc8fe03927b02edac63a4ce431b6cae3060f562657e9615fdfd55e6f7acd8aaf4c92cfd647366a4b3b876a49acff7fc3d3a219e523376b469071b52cea6b9e66b97018a78eb98405683afc145d73fe6dc01320f9696045d40d36f9b0785894f213a7bb1dbd18687385f08ce1c31cac13da1b740edb9d42ae26192fe18e51939fd2fb47a5b8a18f9f4533f9ec3b683d05b594695a25b9de6dee5c576bf75acf2b03aff4906da4fa11f1d11ab6660798063ff7bd5dc74f2f06a6b3e64ac704fd5507e2c08447e3e4623b3c103ce700778f64d09703aaef3781ac9d09d37faf52b52ba4f538c074db0885a4d209f8e11cf1cd62733665d80bf774529c1b7b454e089c24ea74115e606ae30ac84cb3ca8430771fa67352f2d2922f244c4699b05f85651150510c7be480558cca895e579b6f01c660b3d82e9616fa0304d31aecfb1592d4d0fc9417fc82639878c08dda83477da0bb82c05cd341aeab48e0879abbf216f48d69d0fdcdbb04e14f855617258ec46d0ef0179d29fae9b6701a511e440078246c6994190cf7332c967f2dfeab3ec4f0e500c0a33b5059619e587afc4453beac50b785e47b9a20a70855a8ff95c0b87e32a09bb5b32d0d6936ba1cadf7223e93a2b8a4621d29797d53cd2fd0309a9b84d2bc882925a9dda4661f457e1d29b840753e9aac639cb2df3ab0a727f18bd39f095e0d26e6eed6668f4611af51e4b160976c3d70ce903d99386225312763cc58958b40671f406079c04b6a5967162b4e30f9e4edfd106185a9de3e2d6c4dab423e141f5aa327131057dd7199dcce0241c51a1820798bda40cf2fbedcc317f82b415aac5e285532234edd789d2b8fc76de9e332ff27a98bfb9f7aa7527db2017d1ae543324d9d805350ca52d0c662218443562671e8557243f02d19c0e227b292098fa0ff5fad78e84980dabc6554bedd9863ca44a8a38b4585fbdc696a0476ef95ba27cbb888d12a5770ae3df1b968739bffc90439392d9a4b09d6c8c1c14da2a28e55e7004342995ed22ec3601395e32a8b6e17b87addc79091777273d2ce219aaae8791a51e90a4b321b6652f52bd83f6702f748e8cff11ce54db9b581dc7ebe5eab6c77654423d40f6722863f569cdced7f24c94a7c80b6b74be1e8cbe6b251ebe92c7f99bd6b59197d90d297f2a08afe98fa5328dbe51a40ce9e9b9a2075883af22427edde666c4a74fce55f4ce29f52a91cc90b600a7ff2a80ccd929f7de14cd6159146cdd832393b06d7e2c351de276137c2a32a5adcaf21ee3fc83882382b74cc88e26887271b1a14d674fc838e9da79d81b335e1b8d76b5df3d3057a6068c09d96475ed4360d86886b70f8f45976a7f586cd6a10bfad97d3ccb6267763a39ce2ff22ffadb49c181ad939e5aa0c36a752ee336fe9088cd0ca0225047ae3eb2ea96801ec7c201b9dbbc6327f1ed9108f54134af8f16fe431a1371b736e78db2cb6245641f6bb399334dbe4158f3752b0b895f0d297e103dfa7bd21b42949651694de96fee29ffc35690b911c6be0fc985cb93268e81bf0416f1cb626fc0e88258fe9398f6b2b2bf010735d0ab7e1b5abb0b4558716d8817bac60b1b7e26ddfb9b85d29753055ea5c0f12e8e0d077c62ac335f2cc67a6605697448324f175ed72046ed5b382285e490ebc421a0d9c504bee486", 0x1000}], 0x8, &(0x7f0000003f40)=[{0x74, 0x197, 0x7ff, "4cf216486edcb30ef5d9367f8472232ee4edd50043a7cfe13d99cb8f5930710baeb028e5e45fe3a69cd9a1585387176efdade6d0a428bdbff39bd25f700672bb979e349361ec0f29ceeae3fd74cf35762680c84f7c04d2214d900ec47dce47550620e22235a9f8f0"}, {0x5c, 0xaf, 0x6, "61986b80d8d49b0fbd89a317a1fc74fbb5304dea4a77ccf1fac6e8f74076eb93bd9b2a706d965b2aea23cb42a27669464488e6653018f6e68a92aac4078d5b5924fcbc9168d221325f8796b164fb401d"}], 0xd0}, 0x7}, {{&(0x7f0000004040)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000004340)=[{&(0x7f00000040c0)="c44db099b42cc50f2aa6ce36e25812401392f3733afe00ee7d52d4ac", 0x1c}, {&(0x7f0000004100)="6ece4a8dcc792389e7463dc26d99f722bd2dd2c89b13f908747b4cb52ce6687772e22297d49222c23b8f93f14fa7", 0x2e}, {&(0x7f0000004140)="437e70ddecc3b4ad48ba8bd51fd6a0cf0ce167e7072854256ae67a0f89dfae4e3337f3f0f6a9cd15ab7ba4658d490d5414d09143b5305af4bc62e9bc78d6ffe84e078c9317b9b80f663054705250df9e1fed98116f2a2fb24de88eeffa52928acdb9efbc392eea4e037f46bc1a2ce4ad9d964bfcdf8c9d340e4d0fc289e9b01c334ebaae89bc7962d78fd9793ac985bd89dafd7b707417fc7b3c4ba9fd", 0x9d}, {&(0x7f0000004200)="db199b7def32bd735b81408906a6ef5f761239fe087e9e671d329f1ac3a281d0ad7d5e7658c3f64adbbdcc5db7a15c2932def56333238159ec10", 0x3a}, {&(0x7f0000004240)="5f9c2f76031a394a957d44f28b9533da210edc8438ee46c2f1f5a4f94de40831440e386411b1a5db0f856f6eefc0b8ca0e56e1118bb1bff44b9bd4f33615c3f8a5ba30bad00307c1cd2c120af019ad8af63e2b210121f7ced9588a14d7ba0c", 0x5f}, {&(0x7f00000042c0)="56c2f084a0388f66d9792f8618a166ab002cf5d66dd1b185476897a25f1e0378c4827ed13ead48cc8706d5fffdeda738622ef676afb0d4014abe09f10153b860770f89a675caca6f9aa9dd8385e80ab100983721dcfb1acb3de0a6d62e805b", 0x5f}], 0x6, &(0x7f0000004380)=[{0x60, 0x103, 0x101, "7a067e838a3cb206fdc8065983180ae3a0a7a3635a2b4386e953f66b5918f9881204196d636a1989e7c55a5174c5e1989f5a18c5707767dcc8643c774076a3958f66ecf7899a00d6cbb3679e7652132ce53f1d4f"}, {0xf4, 0x1, 0x3ff, "88c7ab61d28614ab65d1a01eaf153c25a210dd4e6a7405ffecbef5391827c7e2c2a02714897a489d7c2b4ab47250cc5eb2a5adb36bfee99c35f1d74dd4d7ca03a17429f242785ac516c2fbcaf66d6a7e2d691903ee7f9cd3c230865ecd02f46cc235bed284a6ea66d866016e366d80e588dc9bf56c9a22e76c587ee9acc6626f7e4a610c7447a1cc5ca625be2cfd939afc5be8f2000724cb3896b429326e3516297e5ff9cb948b444318a006dff5ea6055a60c904c3d7af9eb35e8160ad8c9d5240f845540faa6282213868804b868da8271c3204dbb1e19a346612832e04e3f1b612518a1a06df2"}, {0xb0, 0x116, 0x1, "f4eda1c7112418f0088826c220b6db1ad2d59e9361333eb4553328de707441ab2a497b0e50e58b0329c7ebf96ce29add446c0681486a6832103f4e2529129241213d568a8d9482e811a88fa7fee60038d4b48937a4ec305f26e67c4621bcd235e5826257542affa025476b38e52d22493bc0fb157a315cc70dcb5a520317b76567f0ef8d55aaf227a693147827872e707f1bc7176dbc1ab646b108fe84816f21fe"}, {0x44, 0x116, 0x0, "5b83ab3c6207e91ff6dd929de91bfc92c91094342cf6247c4966c9f18ce4280cb5f4e74dfcdf6ebe43b429a9bf3633d414c9ca28dd70fb"}, {0x40, 0x103, 0x7, "e13cedc38c23c3b885ddfa15bd119f09d8b77cbf760dcc0cd5745c642ce2eebc270ee09aa773712b04c32a16b80fe2aadb"}, {0xb4, 0x105, 0x4, "ba28074b9e81f769fc54b044b6de79696f72c9831860bf4d7a3a385d3276f9b04731964cb78e9bcca821a80e35e0258d6b4e9b794706f91212e678f103837850c3c520e824516d09449ae14655e86bff8fd14144f781750ad033268a2b701a791e1bbd46e4811ae6d9578c7b7a6ad6f3261d725a066444853ad31d3387c6010af10b8e9385dfc88722e34bf1ec31292ae30301b6036ba2dab1155665f668bcc9a0c22348e9"}, {0xd8, 0x0, 0x3, "66af3f30f3fa1b958d9b7dc4e9f24b08e12a208127a9e3f9378348158ae9e4430597fcc318abaf1fc57c3849ac7f23cbdd511590c9e7430d3eefe0fb1e6fd9619719b7740532c2e3a6886487a637bfaea6feae60fecf1aba73b04faa0017b732a0e8c8cdae904f57e9d1ec6e17d09172fc920db5d4f2b5f9aefe68dc5f50ffd3e4ec879712f7036b1abc6e9c0e49d646043d7e74d6c23b67bdd52ce5bb178565b7b70519f848c794c6aeb56ee35c55a5cdf603b8992c3d63640fe715a02c0b74db83ac2e5b0c6c0d94ac28"}, {0x1c, 0x1ff, 0x4800000, "87a66b2cb3326918f20adaa79b9bbd"}, {0xf4, 0x10f, 0xc066, "99c523ecd6527a71991990ad8e7e9aed153e9b3abbe38cd17558d7e5c30773431dbb0bfce0b00ab8c5fbe1663330a7677ba6a446bf42b84910469ce8d017e30aa270b99a51959f19a96feeffacc57a0c1ed3230cf243eb22c7610b44592d3f77d88ed5606615f60263cfa76e9632a32e843ed92c1afc7b81d3bddbb550d0c13193d7957991db89164ff7a7cbc673fb8eb12abedfea2b5cd4484050b37a00b32b7afa56150f8075da092f533684b86c17915852ee5bf411450a71df0d6596cabefdc30265b3993bce0f3d69cd3cb28cfdb1de4a1f72d3a3052422b5437a139a08da3ccdd009cac32b"}], 0x524}, 0x882a}, {{&(0x7f00000048c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004940)="8a00165c47b0df359e4ebb96b340eafa0c4d43ee65f26af8497701c395eab7354ef47200b4d4ef9627b6354d63c49c754a40c96cb8c9578e283068770bc3b7066ffab90f6fef9d8aef38ac73e274f34a9e9fd38286e554860fff47fd5ce24932124796c40143f19d170b6d0e52d20691fe3f75c3cd135652be53b11ed72d8451cf17792cdbb1cc536315ff408018cf80f460ffef86aecb2141f8b4a66668658871b30a803a7d9126dd4ec38df4ed00b555e63ce45ab3de81fd4dcf2f1bd9b88f52069e73dfc7e10252051327b12ed23f8e9db5edb490e9311a36440b38611cf23ebff2ac3afc1abba97071a688f1acbac73a7e7eb5c448", 0xf7}, {&(0x7f0000004a40)="e010c86813df7e39ed74c5d14443e74e86efe29a8290efd3c8ab", 0x1a}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="5c8933ebc514a64d51ee54183daebc56a4c45e1f23f9934fe7f2686aba16422a94ecb4741968a24b1576f778e883955f6dd2134732cb6fe3961da28b6e47685aa760", 0x42}, {&(0x7f0000005b00)="5e0edf067144245adbacd9c37d8ef25fdaadf87491a7473850dfca0245097713134deba6bfc5df27fd0519f48568e75cbbfdc81cfbb848e83a71b225deb8d370b6a6c969d42e6ce0f80efeeb8bcdff15d6649c959358ab3c83cd78a8a4d78711530606023ec36c8e97e57346347ff233c817a03656296ef57c1a49dc0ecb2d4cf8a579b78d1da9aacfc4516367c6d71f9fe9803f351c3cd4056c22d3b2dc12c482f76ca91d52d8621b44d952510e80", 0xaf}, {&(0x7f0000005bc0)="235fc7c4711042ef66ed457a19f5284f545414cb2c87c90fcbae3d9ab33fdb02228185d7225301b3dca8e7c4d1d24f39a2f8bb63c05525a84481fc44e676a2c47d6015dba6ce3b8b2de6d8a9dd08210498443c61db96efbc5b0c16d33daaabe73fefaecdde75fe2937b3625538da2fa101fa5d21072f640b90cc51af7e8ade3c54863f76ea94760b77cf5216536723656f632366f5b43f3bdc01abc0e8c2c9970db2493d4847587eaac24f0def80dcf707aeb696e2fba7db835f3b2a832c6cc29b54fccb7de4ba70d3ff3ce236f769806117c66d520ec30355e0b207e69ffee673bd7c", 0xe3}, {&(0x7f0000005cc0)="09629397c1aa7e61262a92bb29e9657e428356d77c024b3d715d8db0eac75f2485a139c8ea4771c79621649d496216fe327c66ed38620f1a68e1661e25289ce88d74f4bc98590727a90be89a7890fca22d45ea44a8ef86c518324541509553d7e037892054cdf1fecbf9828867f8b9ddce50820d7e244b3eb3c0ec7737ab6b4fb83118e44001", 0x86}], 0x7, &(0x7f0000005dc0)=[{0x20, 0x108, 0xffffffffffff0001, "8279326e7f88f363c8db1d728e9f7d81c5"}, {0x6c, 0x88, 0x6, "6e29d5784ae399491ed706fc8d05aed53d1d9ae23cad716f47d1a99d7ef66e9824f331412850416dca2ed46c9956fece32da71dec869b23e967a58695a1adcf27bead4655867233ff2f4319d5ccf0f558d807529349986779d46c75048ebe9"}, {0xcc, 0x10a, 0x7, "55c6c2c02514d425e84bbb2bfaaf04139e44775fcc745755f70af9e86e48dd7b3adf3757bac6b85893197b5875b866ae07c0e298f43cced36cacded75b837078a610294a1eb6b465020f4f189c20bab309bc85dc639428f76e1cba8adb2ed443e6e2ef594a4cd909fbcc353dc888981a748d081500436333355f83e0567ff3417454737abe06651a0b400efcb6c0e355c86b10784356231d01c6b7109cc1673c6bacaa8a67a624869bfa57bc51f3c0a16b236f4b38eee045c4f978a7f80fea"}, {0x38, 0x117, 0xffffffffffffffc0, "e5a47d891c9d6c2fcfcaba5d2d323e6b3e2f78e73c1cd2cedea8d10471688662a3b76fba8b63576494c0c3"}, {0x50, 0x10f, 0x6, "3453799a863331878c3fc99e2c54429c4dce7077bcf6cfcdc3ce1a662532308061e0cc5c97f23c1067ddf825517fd4e4bb404e1e2718c61b976e5c0b7c9f06acee"}, {0xa8, 0x11d, 0x7, "0501d29ed1a3e574071b32a7856527959f6cf824664a36c72af34c7d10568275229f9cd907468ca2ac63d73c783322762a97b28355f4263a29e04cc1aa533f78af871aea7f3c0df24e020848512b52a4a546a96dfbb151c8d9a9fbfe3950d76569b26608642e32f260600255eb7d653b763ffe552c0fe782e45a30fdf5125de7faa83c6b13673fdb12566215eb1c26f726f6bb8a1cf4233292"}, {0x4c, 0x1, 0x6, "cf6946249a5d6031739b3effac8650b9d9636954f19a6f9802e02faa99234664ca19ead1d170081e5824b8ce671adf991e7170b967c7758a29aa3ea197841963"}], 0x2d4}, 0x3}], 0x5, 0x1) sendmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@pppol2tp={0x1e, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0xf, 0x0}}], 0x2, 0x0) 11:16:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) write(r0, &(0x7f0000000040)="48d471309598c5140b87aeba8a2e7d9f691d39b5be17b363c13f8a01b961e9923b445a87e4032b987f0e9afae1c4a22b057fc86d9efbe31f40ad2067c6a6f116cc9c1a009f5b04d7a3e72fe05f76b2fbaa0faf04c3da69d39d0f994e9396d614f8b82e73f2fbed8b2d8dea83a0472f200c2808d581", 0x75) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/mcfilter6\x00') setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x7, 0x3}, 0x2}, 0x10) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) socket$alg(0x26, 0x5, 0x0) 11:16:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e24, @broadcast}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 11:16:08 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f0"], 0x2a}}, 0x0) exit_group(0x0) [ 444.500750] binder: 1492:1498 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:16:09 executing program 3: syz_emit_ethernet(0xffb6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffe0ff00fec300000000002f9078ac14ffbbe00000010000883eca88903a940000000000000000000000d89e7266eee96209fd4cf89f82afc3e8282d2b14ca5bc3a7b40517976ac8735f584f65f2d714e6f0d01817b8c42b053aad9848f7bd797fcb695ccf8a2945edd391b48c"], 0x0) 11:16:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\f@'], 0x0, 0x0, 0x0}) r2 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$clear(0x7, r2) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0xffffffffffffffa7, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01634040010000000000000002000000000000000000000010000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 11:16:09 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/192) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) bind$isdn_base(r1, &(0x7f0000000180)={0x22, 0xfae, 0x0, 0x1, 0xfffffffffffffe5d}, 0x6) ioctl$sock_ifreq(r0, 0x8b1b, &(0x7f0000000040)={'team0\x00', @ifru_data=&(0x7f0000000000)="67b57da8cef21ec07b5becb5439f2a4e6ee00aa3725a9387c0ce740ff73c0220"}) 11:16:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 444.708180] binder: 1515:1516 unknown command 1074528263 [ 444.725279] binder: 1515:1516 ioctl c0306201 20008fd0 returned -22 [ 444.735010] binder: 1515:1516 tried to acquire reference to desc 0, got 1 instead [ 444.743748] binder: 1515:1517 unknown command 1074528263 [ 444.750008] binder: 1515:1517 ioctl c0306201 20008fd0 returned -22 11:16:09 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) syz_open_dev$vcsn(0x0, 0x1fffc000, 0x0) 11:16:09 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f0"], 0x2a}}, 0x0) exit_group(0x0) 11:16:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x810, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xfffffe49, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x4}], &(0x7f00000001c0)=[0x68, 0x70, 0x30, 0x0, 0x48, 0x0, 0x38, 0x40, 0x30, 0x30]}}], 0x396, 0x0, 0x0}) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xfffffffffffffff7, 0x206000) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000240)=0x15) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x64, 0x0, &(0x7f0000000440)=[@dead_binder_done={0x40086310, 0x2}, @acquire_done={0x40106309, r2}, @transaction={0x40406300, {0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x58, 0x10, &(0x7f0000000300)=[@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x1, 0x1, 0x13}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r4, 0x0, 0x2}], &(0x7f0000000380)=[0x40, 0x30]}}], 0x0, 0x0, 0x0}) 11:16:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x0, 0x30}, 0xc) 11:16:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:09 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000140)=0xc) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x7fffffff, 0x0, "8bc8afdb808f9647c4c4616d4c21919e003541d004eb5aafcf99ad0d3c70f1602384f19e8f751f8db0bda4df85c39d1389955cad002f3cea8409f73fa80a7aa5f2d8499127a952beaf69ec57b84166de"}, 0xd8) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000000c0)=""/116) [ 445.407552] binder: 1543:1544 got transaction to invalid handle [ 445.436250] binder: 1543:1544 transaction failed 29201/-22, size 0-0 line 2896 11:16:09 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f0"], 0x2a}}, 0x0) exit_group(0x0) [ 445.511622] binder: 1543:1544 ioctl c0306201 20000140 returned -14 [ 445.610252] binder: 1543:1544 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 445.657098] binder: undelivered TRANSACTION_ERROR: 29201 [ 445.664331] binder: 1543:1544 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 445.696710] binder: 1543:1544 BC_ACQUIRE_DONE u0000000000000000 no match 11:16:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000000)={'team0\x00', @ifru_addrs=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}}) 11:16:10 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f000"], 0x2b}}, 0x0) exit_group(0x0) [ 445.723174] binder: 1543:1544 got transaction to invalid handle [ 445.738976] binder: 1543:1544 transaction failed 29201/-22, size 88-16 line 2896 [ 445.807440] binder: 1543:1586 got transaction to invalid handle [ 445.828094] binder: 1543:1586 transaction failed 29201/-22, size 0-0 line 2896 [ 445.894173] binder: 1543:1554 BC_DEAD_BINDER_DONE 0000000000000002 not found 11:16:10 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f000"], 0x2b}}, 0x0) exit_group(0x0) [ 445.964595] binder: 1543:1586 ioctl c0306201 20000140 returned -14 11:16:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 446.038649] binder: 1543:1554 BC_ACQUIRE_DONE u0000000000000000 no match [ 446.091616] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.128853] binder: 1543:1554 got transaction to invalid handle 11:16:10 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 446.134997] binder: 1543:1554 transaction failed 29201/-22, size 88-16 line 2896 11:16:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) futimesat(r0, &(0x7f0000000680)='./file1\x00', &(0x7f0000000840)={{0x0, 0x7530}, {r1, r2/1000+10000}}) r3 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000780)={0x0, r3}, &(0x7f00000007c0)={0x3, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x0, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x2300, 0x1000000000, 0x0, 0x4}, 0x0, 0xd, r0, 0x8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_CHILD_SUBREAPER(0x25) stat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f00000006c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x50, &(0x7f0000000500)}, 0x10) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x4000, &(0x7f0000000900)=ANY=[@ANYBLOB=',blksize=0x0000000000001600,blksize=0x0000000000001e00,max_read=0x0000000000000034,allow_other,max_read=0x000000000000483f,max_read=0x0000000000000007,blksize=0x000000']) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000000)) quotactl(0xb30f, &(0x7f0000000880)='./file1\x00', r4, &(0x7f0000000bc0)="a88cd8d8a11e33d42cd4f97ac02f2ca3484cd5a3a79e7278368012d9179063c4bdb4100196f70af535b32ca57d63bb922a874ef8e7336f6ffce96cb0656a6ffea7219381b3fa87e3204385936eef8a13118b87b870db5265040321a09db6964f3932cfc51e5de68320a0c11872d5f35170bd700444ae4758300bacc2c2701653a44290af41451444fb87fa4368b93336d8675098cd8a05d3e13b2a8773143f4e9574905f6b9d3303c1fd77e4c291d27a3bd5227cac8ee427ed6e9e041e683e762739139e658927992c3a8312f04a2e8a17182aed1a8e4ec4e89eae90f0e4c6d4ea2db60878d18b") ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000008c0)=@req={0x20, &(0x7f0000000800)={'bridge_slave_1\x00', @ifru_mtu=0x100000000}}) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7}, 0x7) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 11:16:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r2 = memfd_create(&(0x7f0000000080)='\xe2\xadG\xf3\xa8Y\tY\xdb\xcfj\x1ab\xaf\xadv\xcc\xb5c\x00\x00\x00u)\xe9\x0f\x14\xdar\xa7B\xd1Y\x82\x9a', 0x0) write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000102"], 0x6) write$P9_RWRITE(r2, &(0x7f00000000c0)={0xb}, 0xb) sendfile(r1, r2, &(0x7f0000000000), 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="d33ff9b2767825cee3266ff7747193bf1dba51c828c1647903f51f6c3d048bc4c85d2a9a018171780c2082889db22105e08c1d8effebcbeec984ba159934dc2e774a0410852be52783d111380a26dfeb37265b4e64f3c47d6e37e9bc2bcfd5579691cd2248bd9c5ac1945d2699e2b06183da89568ef8ac61e35d2d7057ff678194995389d10965118e24292d9f34371829d7d6ab105b5da4dbc858b6bc1af6221616b8eeb6de8d3fe1d729b6f79d5162eae81076e92438c056bd7e39eba96fe7b2b7e8ce93621b16f8283a702706014f34a61f7d"], 0x0, 0x0, 0x0}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x2, 0x1, 0xa8c, 0x1f, 0xb}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={r5, 0x8, 0x9, 0x8, 0x0, 0x0, 0x7fffffff, 0x7, {r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x8e, 0x3f, 0x8001, 0x5}}, &(0x7f0000000200)=0xb0) r7 = dup3(r3, r0, 0x80000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:10 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f000"], 0x2b}}, 0x0) exit_group(0x0) 11:16:10 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 446.238643] net_ratelimit: 11 callbacks suppressed [ 446.238651] protocol 88fb is buggy, dev hsr_slave_0 [ 446.238667] binder: undelivered TRANSACTION_ERROR: 29201 [ 446.244004] protocol 88fb is buggy, dev hsr_slave_1 [ 446.264815] binder: undelivered TRANSACTION_ERROR: 29201 11:16:10 executing program 1: r0 = syz_open_dev$audion(&(0x7f00000010c0)='/dev/audio#\x00', 0x100000000, 0x141001) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001100)=""/166) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001200)='/dev/rtc0\x00', 0x18000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f00000000c0)=""/4096) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x112800, 0x4) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 446.398617] protocol 88fb is buggy, dev hsr_slave_0 [ 446.399086] protocol 88fb is buggy, dev hsr_slave_0 [ 446.403733] protocol 88fb is buggy, dev hsr_slave_1 [ 446.414286] protocol 88fb is buggy, dev hsr_slave_1 11:16:10 executing program 2 (fault-call:3 fault-nth:0): clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 446.465619] binder: BINDER_SET_CONTEXT_MGR already set 11:16:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000080)={'team0\x00', @ifru_flags}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000100)=""/23) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="4893c0fc1c79ac08ce97318ad9e59644c188d44eb77f950cce74d9f220ee572ec77954bb8d3c95bab271e0dcd0d20b74c26b07cf0aed6e90acd2aa0f4edaf43e5b500892cfe4c8424c04808c734c38b047a3badbc828cdaaa8dc9a77fa36144cc7163e87f5df052b690088b96faca6118c51f5978f71032d214dd9ca6278239fe072bac184c0d41848a394daa19ed02348ab36f54241f4c0ef18c38a15440adc63baae5239dca33fca053479f6f3dd5eb1f1fefec7946ec76f6403c542d6b1524a586d07b138", 0xc6) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000140)=0x7ff) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x2) [ 446.507063] binder: 1615:1620 ioctl 40046207 0 returned -16 [ 446.584485] binder: 1615:1616 unknown command -1292288045 [ 446.612436] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 446.636321] binder: 1615:1616 ioctl c0306201 20008fd0 returned -22 11:16:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2000, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00751e5ba14619c44c8dd0dbf256cb01800000000000007ee84e70618b0cc4ff85676a66fce4106929bf72793b551e284181c74f69d2528e7973eaf13cee81ea19fc5ae259e957139c2e4564860b51caf98831006b951a2e662599840ff5b3dd07"], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080), 0xffffffffffffff29, 0x0, 0x0}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfffffffffffffc00, 0x0, 0x3, 0x20, 0x18, 0x40, 0x100, 0x5, 0x3, 0x3}) [ 446.879161] protocol 88fb is buggy, dev hsr_slave_0 [ 446.884668] protocol 88fb is buggy, dev hsr_slave_1 11:16:11 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) 11:16:11 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 447.049128] binder: BINDER_SET_CONTEXT_MGR already set 11:16:11 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 447.078072] binder: 1748:1753 ioctl 40046207 0 returned -16 [ 447.149029] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() ptrace$cont(0x38, r1, 0x40, 0x679caa8e) r2 = syz_open_dev$mice(&(0x7f00000056c0)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$KDMKTONE(r2, 0x4b30, 0x6) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmmsg$alg(r4, &(0x7f000000a400)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5246139cfd930025a215399e538e3b78bf657989fc5e40811561417a8add0e7c66228e8cc0a97ce4af3a8367b42d5fb7db6fd99dee7ce4f87e37898a84b3f5422bec9692255a4f76fc678b046352ef55b3a629146732e9a91a2810df69f764643f07a55b47806bdb1e0b73c036579e4e621e204a4f4b184cedda9b68ded52bb61d289a4f248df890d1356a468f6850c6adee5834dbfd80b4b8c06aa47c6e44b1601015cdb1a4fd3eea5945fb385537cb6af283330c052ea6941410eb8cf17a46553ba3597be6ba2f8f9f05523118e0a5ec5d140bc1cf87e0bc6dfbe216c60c2e81bfc41eee7fcc49", 0xe8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000001701000003000000000000009c0000001701000002000000890000001105e59288f87091eff6a294d874e7fe88617e1546f356fd689d60b089e570d576e809632f5e5bdcaf33327541ff8fdbfdc68336b0a4a7fb34a26fda0a1c649149cc38e9cc052f714ab23e15be1cbf3e296320c58e9ba74b9c6cf6179b85b38fb0c1626f1af7b6caff3b4d12ba661eebd659acf3bb80b6ce0761b750fded9b1afb04e0b1746b27cf47d6af48b61018adc81b0000003c00000017010000020000002a00000095f99e6bb0ef2f188d65506d670fb41685735ad7046377f138a16c6bac657da3b518dd"], 0xe8, 0x4800}, {0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)="ca102f2c728eea916ad24d2eedc63d6e20a481e5cf901eb8b3f15e46b3ff062953ecfd10c15bce5fc34dfe680e23e6e01e0423855a9d24c74a5f9dc41846", 0x3e}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000400)="01a439135d8f6bc6cee176795620f2b0332261e21c82fea145e26b8a3887f45d86988eecdfdf0c702bc956f0c5517571442c34a2620ff6d544b4951b51b85f1a10735f7589f4ccb45ad4c5429c21022e4ffd394db1e811adb369f20461a200147e649dc6f3521f865b267afc2f4ad3f1bbb1d386646dfad3902b73731f73c7a59c10713be4e358a6237b2dc31c190f1494c63525fe30fee469c7dc5563942b0b8024cbca319de36de58aa12d0ed56e203af2c7a0bc5d3d6705b96024b19a3d7de523e6520b62a463cb3823c77020bd50d96e97a53e17a5d2563d88edce86f0e3c8a1b4b559b51febccbfe41cbb944de8887eff832bd2c8d5a9", 0xf9}, {&(0x7f0000000500)="a82d04f168b2970cfe3e9e23f56b680ba8878c29da2a8fee54d6696780158912b7213022dca6b14c7387554bd032a8a9f9582b76435529ada593d06bb7dec95d1a193d728105880201265df43d52d87cfc70bc839f6a11", 0x57}, {&(0x7f0000000580)="546979731bd0679ab0275148c076501ad8bc4dd4aef5c5b2236afdd62f6de8d88c6f96f6b1281725a845f6cd73de290899cec3bf1f16c778b4b424552b6a258378203ee4588aa75cea4005bc6cdf7c0ac1e9681c9f6e4f928006b0d6872ef315643173f9bb63a0807bd9016a59ccfd2f3ddff508045d034ed31e90c52c1a777f10df91ff793f10017ed3e258719400b4a66393470fd24ca11d49a8626107e689850de5af304e94c434bafc998a9b5d23bd8a7f03fd5c471357c2b9d0e79f046e4e5690eed42712a8640c26656ea1b374b83bc8", 0xd3}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="08aeff1f00caa4b41eda05a5cbeadf37fcb21a0cc67494fcbcb065f9d510694c38da82e98f4df32fb6334fe562929969e6fdec3213d815bcc141fa6a95e6c16a97814b23c3a95e77eaa84fb01ea74330786245a448fecb35b80d907a532a1be608608179a43a84d52c9f32f4387ec8d97cfff68a7991ec6c9622c5ed05337e9948c99504333b529b1d5abb0f8acb5446cc33f2ec9bbb658bd05f2f05e7dd3960c2a77af48acf3c448fa9d8c7e76dd4723889f489c63d000a3a4d73b1bc52dd2231005d52b738ea0847fd0ce40e650d62364ddd3e04fda643aecc5d88f8d20fcb8a41f31d9dc065d1ea90029b53c62fb6d0c0305491fce78afd48e0cbeaba33583be81983c261dda083f828b7e35276e5cf0bcdcd72cbdcf88871e2eabfc8c8a8428c26ba0bf18e3ee6ad5d944a39b4ce855491a54da07fd70cb3e1338c02ad4ddbd847de4e93ff0e051deb6981370dae7a8575b264d2d9e7e95d7345edd1ab73694de203204b21ed8b3aecb3622c393379afa51e3d7364e71f61bfe42d5638a4f8ccb2cd0dd781c772fcace54cda9587b9685e085490e8c0d13e7449d4fe009c5ebc7ce5eccac09a5cf8110c058b767ce45fa404bc57b660a1a016dc493f7ca4a80ebbfcef9f80bbee425587abf7f7cbf55742eaa9583797a1fe0e412cb78f4ca7d5aef73ae88f165baadd9b703f6762b9b1bfddbf88dc254f379b9b6e49d77d53bcc7e1782c30c5464d8ff44a05e360b4dea2e353f7caa66c71be6d6bc921eeccaed53131f41702a8648ef39f4f032193b4dd0a246dae7725157e4043452af2d376c7aba5c8e6a4111870325dcb97bc66703d59ff57b5cd4179ad3e885413165c79a5757d0986f8c1ee033e2fcc09a726845aa978b548de9df133c1c4cc79710efb98346c30a31b1a6f462277c6c01fa2e5fec6a5239443096d6742cb0d452c08058b22b2b207d36821ee93f0182f79fea360c5e3b7ff78a8ed73653720717edd65d8493f402de200d4954e5a1118f8a39e99358edc0b16deb3305aba2a9140948b5c7525fbf354f15d0e990d80fd5b7f9ac24ab39f735f758bafc478a99f290933a649adfbcd6bcf27ff820942bc100747468d1e78376b12b9ff4b472728156112315a1c3e0012a37956ccd2782c583ba9edd92ed737c6cf06ec86c5ae1a8d6386d17bcb893f980828b1d20773fbfab204ca59a88d52e4ecf1e45aec9124d2a47ff300baddf838c669319190ff3ae322294617405a010f6aa4d8c206f8754c344c3f669a07f42e8cfb857dfa789afec69fa0e5d5eb07afcefba2d22424149bf8e9c44d59a4329960f4d6e979d9bcbfb27eb7f0f48b99f131db67dc659c8c99c7e0a6811005a58ab294a1d6927054eb2d828416bca4284d44bfb8c2a592b611c4556ba70c0fa47e138a997d354fb14aa9f394b0050ebcc59266a7e2980e1c5c18fc7faf14733ad0588798b54fee268488ae3862a1635c6f0ce50349c285e7651ec244352c9f3326ae6840aa433ef31e6da3fddbb253d5a210b1ba828461c5d32eeaa127c2bdee9370ada15dc52d10d43e22649004a7af8ed0a3c41f1cdff04eb77ae54385d85298317be52e60d0f2d9b1476346f8848365aa84d69d5bb2ed0691f75a780c585da973f8987811091a0800115763d3497e19440a3cc8c2246b6e748d4b46aebb9019c83e2e009ebbe07a0b3542c4a50e7273130e335f3e8def183857f335f97b845be0341a96a96f44b21d218a1e3758e4427ce65566a30be262e7c6b7f04660bf42bc8ae1308966b258f6c31b10cba053adeb7bcd658b7a7cba4f341646620de224e781f998fbc8871bff79c1636714ece2becbeccfd6c16c03e961f778a3cf465c43a1345e5bda7e8a03b7f7d21238b511dadec2fbd4d47f87a9c91822d7a6a7c6ff1e4bc80382bd456ef13554c7351d631e1f71190765561908e56c118cd2127eb6d026cd62d8eff896fd0703bbbd43655230c72d5688e553ebe2a17f84f89627de0051a916870b29af7fd08950431e2db0607e5e262c977d8fd28d22ed12e28642f6dd433cbe1f1d723fe6f3d4009f7c0aac981a92c38e85faff35fca19e4738dd45a0c45e787011427f6f348ffa8aee00b8f6218f1ebb78ff5c8725262b87703e016350df3d09a80188ab8cdc4e0f8e3e5e5d06549d01aa41bb1075b5fd3ab4a2c265463e47392e3807250ad2fbfe13004e5d5f3487614efca6fbd2680c9f9f775fa17f402aac9a856e77b31dcb1c8a1cfc64d9f011eb42e06f5e04e2b6b7c99c735cf74a861e287b3e791e31936c392ca601e3d620ded641eda04ac8010676ebb7d5c0072deadfc840470e75e8411e63b91ae853493d0dbada3334a2efe3f2cd93db0a6b49a652f6e8be54d3599aa7d99983d50bdb5b391451a793473ed78fda51bd448b3600d59ff46391c99ca1b32a0615f9222c0cd69757826ccc2699d1f8f0dbf9eb849c40cd5d452e812504f1bcb4e2fb774b7e01089df77b8deca4fee69831082ba927bb8a56c05b6ea445cc7b7ac926754aac7e364dce5a476c67d8cc6d5ffcc135180ddf847fb58327704ec2d621a3d32e6072862c3c1e865657de471be507ce78397f7086c5322b4d4f1b85cdc6448a228d93603c5ebe14dc0ed815fe2dee3fa269e206fc8029a53664a34569d9e772c7406d5d9184db2c13b853bb263efcab5e3bde4f0251075fb5e4c441d887ab827430d440bfb9eaddbb4585c0971775c2d1d441c5b2ad456c5801bdd0908eb0deead1501c0f0b95fa7a1f9ac524628657c820c92a49a66ec965a2f6af4b6bc4aae25009ba0c06f063dc1b578450d478d11224a2d49f5b3d2a108ceb02bf1d3281d1d888236fddc926174ce3f10d5df88282752e81d92647bfac19555e65f65734c226b78e1779ad6e512b88c258bd05e494681ebd1d40a25ae7e872856588f1bf50ba120c15812154ca5f4d94629a7f1b4440a2f1f560cb19114458973e3c742689f039dcf7abeb5db2be8d1ce91da58294ca8f1c0cc93a0c246b4d377304818b414dab9d16713526dfea0765aab0182eabf67974829c56d72b27b8a2198573830dac37844ad4ba14fe545b24e357c7d52f0fb642b873d6b6f946618225710886ae14b4b023b690fc23219d312c88d836fc134d8e952e3c2866b44c41c60739a7369e61b7ca936e70cfdb8dad840c73f294c11849021a7bd8a5fb7f109e3827c20f1fdf7d08d4fe2c0e02597eddc9897c2824cf71e1c3b023c1be257c74e368d3ddbb897f286c6d86963bf3a61caa828d3598c6abf1a9434a0f04568fd851e032f16b0076408a0dc9f4b8e063605e73755c9087705243024758bc1c01765e11cb9a45483fe971edb8be0f2bf0c846671e4d457a8f9d531a90a37f3907e60f93ef2e1201dcea6611a674fc37ba966fc6b6a44f2c301dccf45c972eaddd864d84468e1e7ca5b0a123ac2f0a6fd3872054ebbd8d1cbe4a7dff07631ad928ea27e1e962c26ff3a07687b3c4d25b5faf13b0abf0901ab0314d5bc760c666070b14faa0776a70de12705b50e0ba6f727fc3b397e214ee6308d2f22355931c65342f8ee8236802d703edf8361e2abc172813fbf99650e5922b4d41562ecbd3ea0c8da8744d7840de7c76be2a425b844adffb3b31f4a7e6d2259736d3288cea3f12e15464de3e53d3b1e10c1f666688a6635023f2579440a0d17eb41d55dfbba08093df444de4b4f64d1b6a1a943bae2a5f6fe09440c8c72266303099d2136e90e7207b294405d492094bc16bbc2b4192c5ecf427584cd01e1d8dc1f88fe7819c42872e1671b75b42b13f20bfbce5c210780668c886310f72067cbb34f187a2ad10fb46dedcf669146935dbb2c5f036c3468faa76b4f1df7cbcdb83ab1e1109cf64319ff2f89b2e312167743bb1682c11b82342a696f0dff37b69478677995c88f7f346c0431a983938c3e6f177b0b8ffbcfc05bdf7d9aaba4ad9a3f27c80ace1883199aa0e4a010949bc4a6578ccfd0072e5c4a4879a07d50db99f25df8e9c4b5118a271d0555fb066940805aeb6396e4b85d3e825f68855ee2cbab11be57726df8b12321237114874d0abc220af5e99690a0f08681c5595bafe3e2cd9bab8220dc843be4fca48ef8fd4b7c6d5c6ba8b3a6aadb1c10bb0c63b4c96d06f12ba1ae3a51fe59358c311a82a57b5b1704ae2fab5fd8aa7f827ae86b486787cd9e7396e8ad2020ecf71f9e3f4357a441c786af4781a94245686076784c67e31fff81dd2d97fd888b5cec9e2ce81f8a856cba03e2ae8434125cb4cfd16c30c695f45b35e3c6ad1c4139690959e167691e76de4a94cde044d60d8e3b637ca4a0b51d9a2279ee5678066cd4b31d28d67c4d8df5cf439dd8a3b28fa3256a483aa2bdfd308146c853b0ff8791a45690a80e04f011c0e05b08585bfb9688359b85d99ca1b6e9eda6df65127ce8c42e663d8dcd7fda03adb84a983f7c93d95b526d98ef4996b27127e5c80a8fbd20c782881875e04971e48fa3766359c6e87c5a7df52bf05cd6c8fce8cf014df62a7476cfc36f8b91e6b07987779d3f8948f5d48ac956d10ca75daf94b6f5bef75c9f0ce1bb32a0447a84f1e13cbd5f2d72a138e078eb3ad608b70a15f99f8e8905228ef82aa7391bd0ac701d72559d3eb57a4c610df2af20d286d4059fb9d677d8c1dd680f12c6fbebac705f103d4859c0c50d207fe33947ee0f02abafbb774421891ea903b42141f32d11499595fe38926b57dab78cea8438d942cd62669591c99cbe0351258f08c2c57121c2beeecf4838df081193cd7f81055c5f39f1ef8f12b6a4b300e51cad86aa39764d0fbe21965e5d8e05988b886d1d48592f3840012f9e01a9fa58cf40b51ebb706f7877d098bac9e081024a956b0c0baca8dc5e603028fcb55958b2e51524078f483796acd8f62f987e2ad1f99a97d3aaaae8b1b6c643a20695bf3067ad584e26268c4f1a973081ca8d56b4d110feb0d6edd13c581ace1d963cd493ee8ca3921636a4abe24dce8f95f95658d756329ac9430e86a7c15ae597880290cedc326f7e851224bee311395525ad965de488cca13c074cd699042cb1724769e89f6fa854e1181bfdcc6df101b8f335fe7f9b1a99d4f2829c658a7ae2601446fe66e75d76dfbf1b656325dd74a94580b4fc99629d62fc27e81929904816987208145ee5913537701ae29f6b45681e8f3f1764f0b18cb9d4714ebf24d9db938e5adc0af5ec0bbeeb757b77c8a467f79940978d626c6ff71a2c372952c7e571141b85b60453f89462d6a5dbaed6420b1facd2bc036c91c5105acb3f23bd55fdf4e59742e27bda278c8b1228b13ae5df55e2d8c53e1630a6497fd229c89a406da036b5a092373a47a824d4753c02b23d316ab7798c512784aad666c49e52f574e83f87cfba02668297df9d95e5beee591f482c8bc716744419814de002e497d5e200e2d67a095e9b34cf77c1e4959cbd1d629f997591e46fa111105b661ba8f21f169aefa89cff62213816a1fb88d50f4529753aecfd20a636f427409dec8760416c516ce872cabb55e8bd265a102b4fe0501716fa954cbc8ba19401386ef99960826c28be96578ae276dc9699ec56b617c7241ec85842a150a512298b19d9e7005c0608bf352b5eb652551621746bb2f0a510d2154e45d823759d4a8ebfbb6ea896470c32406c5fe6b6b928cd2945e18661f2dfac11a42a28bc2913c2bb93b5101af19435ad9eb886e22aac0a49ac9b030b42b14d4b0388b7e84dd12a956b7522468ebef8c488be2173cc865d1c7dd77e72d76b7a64fb18496", 0x1000}, {&(0x7f0000002680)="c7b7e2ec0bca07aa1fda2c35ea0c1dfba804b5ca702ff93ad67da9af35f8d8568117a309b9a0621bfbc469051eeefafe15f61f1c9654935b8fbab8619f292fc49739b75de215bd4b9720f55552a0550a5b38a1dce25f52e0e248a0781eeece9d7dc5785287fbfbf6bdbbd68aa480f9502e1623f87e01d76c28388da1747f157890a00ada47eae819598176e06c3daff9e245f6aabfce5789622214346cf8bf55e480cddcb04f406735a85c5e30614f88ff6ce4aadb00b47bdbf0a40c13575edf298ccd43c526ce8bba7d09fafa433e1c83ab32d05b79863f0a594a8d4ce1b8d63efcab0b698c1471545ef666f5db3fca77c907b11f502922b9", 0xf9}], 0x8, &(0x7f00000027c0)=[@iv={0x40, 0x117, 0x2, 0x2e, "043b30a72bd05b5b9d7448c77a35b86d48a824ac4119981de80e293ec3330da8a79fafdeb935cb391dae7bf82bfd"}, @iv={0xa8, 0x117, 0x2, 0x98, "82a5ebb9b53038272d730e166b8a37df2e6d45a21513503381f7e3355b79878ab27dcaacdfaad12fb2dc628e6a30a08354d997c2ea0fc7f275ccfbec6f9b0d17f748964f7b8193541504b5e89ca9365a0abd3714622dfb613c1f5ba022df9ecd06e0955c729b99b7ec63e5e523e0468ec2594a0d70d69ddeb50dd873bf3e5d6158987fd3dd22beeabc017016787174d5789803ecd09e8c9e"}, @op={0x10}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}], 0x1108, 0x44081}, {0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003900)="d18eb80548f4404af4ff819934eddb", 0xf}, {&(0x7f0000003940)="51b9efa750c82fc489d6ce6c963a83865631973f29d33e1e3fc9e652da0479c5b367561cdacbfda726aab1c6da992d67b6d8d0c7ff9d822ab80755cc38478aed176306ef799d38cab1b2d426f1", 0x4d}, {&(0x7f00000039c0)="035aec53794e2615130570f901fec45fb4867f06205cad", 0x17}, {&(0x7f0000003a00)="4923bd74ab1de1db885b7f96fae045dc6be9e8b6f063398b0b960161b0f32621d0562538415c5b4e577dbb4a02dcb94b115d34395b60f6d60536", 0x3a}], 0x4, &(0x7f0000003a80)=[@assoc={0x10, 0x117, 0x4, 0xfffffffffffffbff}, @iv={0xac, 0x117, 0x2, 0x9a, "7712ed53d10483c2de4e493fffd1cec969dd6f0d7e24868bcf14ba9e68d30df06328c0d813415e05a42a2f40adec93afdf9d6a88303b6ca52c6ac21f87bab125c6355cb9854e22315d4f1f6ebb6884dc1ee783dd194feda28ffb1c8424a0a2f200992cbf7264ef4a1f82e3c0d95438d54d9638bc56dee158fff4de28d25599106f2a47aa97c33bd85853cd5d0507a70439bebea415be34f9f49f"}, @assoc={0x10, 0x117, 0x4, 0x40}, @iv={0xb0, 0x117, 0x2, 0xa0, "f884bd9cf5a64b3952fce03060bfccd8761de952569f7efcbe56c897f9f65ff90f67c274d5b34c01369f4e0d584192a7a2b07bdd00d64b6d34eb35ea760c4bfbfa969c1660b502b8cf82e569ac889ad3203167f9e5f77bd920e466e4a08a7ec7c577156976ec909dbce7a4efc8ae8908dbee4b45ffc3e2740c90a7468800b1bfcd3ede5f64cb5c567ae91e7308068da450ad6f8da42c7f5efee10ea5d5aca23f"}], 0x17c, 0x4048800}, {0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c00)="d91355a66bd3a065be62a80f5e012afe75efb0a29b0dc86e633924d7446952b1fda6de1b4d83a9f418b3a3c1df8d893cd5122c2d9decb91634129744b6429ed89261fcbb66f7", 0x46}, {&(0x7f0000003c80)="9eebbd0cf0f87908b3a3975768e7d060c19831a4b37c7ad60065815b8b088ce1cec0a92e786f8a920af6b6e6cfa431a3f8c272bd1eb4d4c15da13611743aaf4d7a69ed781ed557df15d25ab8d0a9391dd65b4c4e3bdaefaa84c5ac49703c510dcbd0d3", 0x63}], 0x2, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000003d40)="d8f2e7f54039d46ae5ebc1e62cfc25b25e8c33613cba9ec22d4a484583e921cbb62fe87ad3d8451bb2dd896161b3f45fafb589039eb3d5", 0x37}, {&(0x7f0000003d80)="c3508f8009f880ebd865dbbff4b813dc4cda0ef8a74c15715c90fc910008798c589aaa17d8694a22e9a4be3476d8c8df9a0bf314362e6b21830ccb0d32c7a891128910e83d20f2aed934c59f3670bf2bf4c4064e98d2c9567c36bbcc486a7c78fb9117af1eecc446fce91f06709a2bd77b5722039139e664035485623b23a44ca83a486454cb7b0eec4cbb23f97e7b0fa846e9e9d80ee6c3835a764d5c822c49fb7f5821dc0e69c7080d528110f1b2dc93fbf5d30653ac708283fdc11e207849ab90a20882483e17878b60c8b0033c908afe4dded2868d7771e4b396016c64dc4bbbf593be9a8711d93597dc09ab1a6fdd", 0xf1}, {&(0x7f0000003e80)="64fecc8c7b55aebe0d3092bf28845cf84f0abf65b742d320983fe4ff8b9771c1e702de7866b286bf25d9599e5a139f860e11c201", 0x34}, {&(0x7f0000003ec0)="e436efd12715617599621d690d045db04fdbbd61c8905ad932f29592377eda87b52ca6cfae1fb6dabd57cac51e2e3733a7addb466bcd33ab6845e3e4c2b5c0572acec2d5c2510ee6be1af28c", 0x4c}, {&(0x7f0000003f40)="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", 0x1000}, {&(0x7f0000004f40)="f86bf4725f6cbd1dd5214ffefa3c75fd22b4ca366b9371ce54306ec23a28bfb992f8f5776ab3d1d08ed46dcf77e6f5c465d53eb78d9583604febdd62d1a807d4ae7c1e4394e72bfa44141c1613c6b254269d4b0c044a2d34fba76dba587813abaabc54e762f8f7cfb1115d6ebe51dfb5a518f09aebb2202b9ebb2caa766fc0e407ed63e2016c3145401b4523729463f17d916ddb61a2278fd4b4480fcdd65137f4d822afce75d95e951c243eb9b855efd4547367d71e33ccea5ca1bab83246c9a4c1619d64bda6f92288b0d0df55d7d052112c2f91eec1270f535d04c5c452a6dbc4f323eab1ddd0", 0xe8}, {&(0x7f0000005040)="8756d2f04e3ef8892f3d931e35caa7990f133c47709a6ec4a218b2c4b4a388eb35ae4116f1e0d02c657e96161804cf2837d55d204d0d849d4428472720cd7a89b6f1fe9295717a4097", 0x49}, {&(0x7f00000050c0)="c7a555fa8eee7ba179b7473567ff13b45aa96a08e21632d6ab0e21ed3b2fe8baa3977ab42ec37cb71a9df3911f5a43ed1210a5ce9c412ce64a2c10e42f0511c25eb0dce408fb5ed3bc811c212b5820533b596c00d77a4058821e88445dd72e4e3cae1d4a90771cb4cf6ebc69d01503e1626ae0226acd30ff098257de21f4fe57fda28cb06e33a808938edd", 0x8b}, {&(0x7f0000005180)="488be975a2463b8ccfce43fee0a8c199bb419dbf4ba5848079288f", 0x1b}], 0x9, &(0x7f0000005240)=[@op={0x10}], 0x10, 0x20000004}, {0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000005280)="4f5f58b6c0ce90261cd00e3862941b4838aa5f58e45cbca1eb2e5a03d9ec410c894c5a8ac7b9ab4024d0", 0x2a}, {&(0x7f00000052c0)="313815cbd021504eae26d00d99d10b8e6881a5e9023c7975bf6b88e593f59781d00491ffc80f0474f16149ecbfcbeac8556b33415d87218038af22806ad45b1d1ace1603934ca8ed0590c4e678ae6a3979d9ce672afdb2cb1242427e6808c400e6784321884ee3d6e150331eab5ceff1223992c0d3afc0db81a22637ced180821407ff3dccd94503299350ca345d562970da6cb9c86e1a4238dd09d89a7be3e1dba9c6d73e4019ebce080e00fb6fbf125dadab7f775d063c7329a4a14cbcaa4cb4d53062c3aa2eca0182b9046e1719e46ba620ec0e3ed6459ab571dfbdd23a9f90a6844cff2ecd8f1f63ad4b5b8ac68e51686fbb9f827e8cb046", 0xfa}, {&(0x7f00000053c0)="e68d4aa391026d26b01731c1db33f1f4affcabca834942fa620f1175be792e125e955e354346980cedee564575ccd26de9c887cf0efd1b2e06a322a9bb08e2fcd2083138f0daf8e4763ae634db380eb61915710efb9e436912e3bf060a5fed1e4e0c8a86875e6bac5244d9ece0bccb355a06579657f383b837016e9d87a62eac9ad7916bd981c727d2c274362b0d2f1ae403562d2329ec79fbc100a6c00d05f8f8da0e430e", 0xa5}, {&(0x7f0000005480)="23b207554982d774dba8c92b07baaa074451dc4a7ee5f308f6cd93cfdfc9ccaad07d5977cc95a479c6fc03cfd25e75c09bd97d06afa00395e634cdb3d9628abd2442b8a70495944a8b0239a913fd626ef32c248cc2f05db98e33ce21e046e10fbaca097526e85f7d32b55b8da271aa2ec06c59cf8026d9757529243a4ab62676186cf0cf0d6c7e925fb8470a6092a6f1c2adbce76c929ce0a54c5ca21846a77a86ea00de4aa7363dffacf572457926536e3df39175ff08b58a1446a924c66f64b96092e5d718f9be2add750c2b7061a825c8034574c550c1", 0xd8}, {&(0x7f0000005580)="5b2756bb93bdabf2cfe77465fa96622dfc9e1bde4e4953fb2459ac780375021e244426bd3921e9c7906ba785b4633154e81275f8fb8befc44998c7ebe038dc8f426e2842f9ea1a332d7d9c904ff8e8efcc619f9d7c6bacfefb9d046476f949110bcf0f2a4e059e02105779d461eb10a5a71f932bf8d7667a95b0dd30102d6cdee36feb3ca288defb2d9bc2ebcc79a1917ccc60be3e15f63d331ac8351c287e6931bd0434545d8a6ddb888595f08e5994ca5b36c5654d5d06a541ec2a51ccfe48ed8ead91d4bf52cd1f94b8ed27a6349ec412d4e52af8", 0xd6}], 0x5, &(0x7f000000a500)=ANY=[@ANYBLOB="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"], 0x130, 0x4040080}, {0x0, 0x0, &(0x7f0000008ac0)=[{&(0x7f0000005800)="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", 0x1000}, {&(0x7f0000006800)="07ab77a5c290a56ba96dac58ffe7c054b633efc0e20f717d31e0478d0d9d733a3611e52f6aff7d02a0f691f70971ae34d77be3c554a36a9ed3ac5d82d1587d7acdbe3ccd3afce907747c5d68fd9b6710cbd41edf1ccb77d50f8c6e556d7f69b51d36aaf4552098305f4c19d6ca945675f0d84a80b2bd4878a1505916e11261ed2f28dc5629cfcebe68d538eabc016b2e8d2e9df794d72b7ea512e7e9ca25d6379b15621a112ab1ff31220d015b26c3b6ba13f54874d1e4ee78d5be718e2cbe27d092a3ff2405637652c96ea6fcf502930fc9e8bc90abaab2e098486a4222db2773ade7f172615ec5c22db40d930f0ef1076dc0", 0xf3}, {&(0x7f0000006900)="503aacb9a7f64264985a2322b2c0f0bace015619fea03b6d87dcaac6370e36ff8476ba02fdee3163c3e08d717097b230eda1fb25255823e277cba528f1746bab842d68f58a682fcf9935b491803aa10fb36627fd126dc2bcad84f973f35a903d2a980669e8562e572f896dcc96eab7606614964baf5ea2ff7679b61299e75e0fb031b65a1b86ee00168d639c6ec6f94277c27615f0a92286e5c3f09f4a462e406879cf1a0d4e917166a4856de11f3c5318626965ad0ddc35a4d2d26e8f5a452d9401d1e89cd87a13105b1689e318f24d98e98768d6f15d154c806cca5258b0e9a9dcc6b284a9cf9cd85b31afe4071baad3af2336d2807ce50bf337bad4ac15430693183c37b0a959133b20d9b389fd48f191aebc4de964973c51ba9fadc36b420e36bb4b46d5269c724233cf6e86ada9b6d256b68b71ed8de735627efd91bc1e1adf93f237a73ab2e5aeb17db7c7a2e8ed130a2221e362e4d2eed5e2ced43cce02f5ced1b2fefd75b0b52f7118b5ea35a9d405b3c1e83deeace6bc5d8c78f928de97f4ded9bcfc163aac8b9b4203e6dc115127485125f79c35ed094761c26a63e04b6ed398c1019f00b3812c6c85431848dcf52d830aeaf9823178a44dfdeab42927eed7bb1b8d46ebc2097c63e47bde5df44deabf666dd1880134610996d53ac53a39e17fb703bf037ca848217c287fa811b2fe9d41aa3aca658acea779df462979c10b1f9ca5521da6089ad5e6d7c74238b5263d93d66c10cd4e1622275be13769666d2edc1623bf0ce45e9fd2c9ceb961002af142ca282f820b1b8cfe31585c966b9f20ce93c8b55be3496f6ff31be3dc0d4800cbb748a3ec1b72210a3df2239accb1186347fb3ef61187a3bf8f0ad0590ecd71ed6c85525b7b677f4fb56fac63d702a2f24b00cf39582df53ea8e6cad9bc1a36fc9f73e1dfd57d10aeaf6b097946b2b081f490d2e97e898103d21dc9084880405a7eaf24fa267486fcc36eb14e45dd83b1621982effd0e8e045e50c8c0739d365e1a03bfa1d4a264c1f42b0f144f6971ad67835fec9da22702d94dfd3b502a8ba13ee982f31bf28f50bc90f8782bbf4c2eb211df50d36cede3cdf7a992df6f18fbd24a25ef1598f51b136bc8142052ffb7a6e7c82756322e1474f4cbbfd23d5e8cf163a32cd737b650bc72aa7f1384d4c1dfa3846032f023a8a9050780cd3d209db39ebbec16b7f685b3faaefc1845f8a925ca84c4c6cefc1e522e84d1561a9b7dfb844cf996be4a0f019d418ca455a29789dec7852ae9ed2df86b42031a62748f80333632b755bfb25cc3c65eccf4c271ae8421925c8d44b2979c7f149c68961265c77fa7cc4d5ebed1d41298d9fa7f3ed02e64536c3f2a71326c42b60106c5c09f0eff3f4d8a87872d3ce8bc9e4c5a327454b04b3d17a54a9e057c375ca18e69499c706833ff659166b9986b0fe8eb8c413f9c041f8878d268046ceda5aec93628344358f4216ad897f71f986a9a8ba642bd0c2e6c797d70f9716016fedfb96c892fe8fd8860c8044f3a2e05a051f5614bf4e04c74f8b3decf64845c7db0c57efca9090e2fd96a02eed27ec88becdac5f0d145c487ec9ecd4cf532642356d8cf163598d3dae9f557008998eb3e85f6b2a1ba913157369014ddbbff41b795986dbfb960d2a1b7e81f855402ada23b300857358e197c27c5b2cd409fd3a7ccc079b952713c057e9781a5ba364bc5b4cbde0ea4be912e700cedc8a22d21664ae8ebc32289dfbaeb8edfe1ded019b9a3f911c16f48576c42c9306ef816a4d6d449f9a5553485c84dc654b6a77fc3ea0c2283fa1c86eff1b50237af30c2e0ec50436a3b653ac379a6843b401a53b1ca28602c50aa2441678325c8295fb79236a1f9a5a9015fe1d0d03b719b0986b080708d20efe81b869fb062a1514d767e2f2bf3344acee8fc3f0448706ec7ddaf1ccadf7890dbf9dd7a1cbd37fa98655d38a4e8ac0f15c05a5d7c07b239150953b6220e7fb6de5dee0508fe6a4bcb486a289c11e81645e668680e864c86873a12c58b567711441a93c3c45f91258cd5cfebc2d8e4a71322a5d172ac78ad7b3db818a076e5433e17370a019ce9b02a8c8d666131c7625b9d544f797f0e8b092ed27608e272ca8aa8b4c9a818874b23e1ea7c2e327a44f8a1ffac2bf426f33456e3999945f87dc7e891120c005df135bb1c2b801f874b79c3523d4f73d40cc1c99bdb6b8e1498a0b9a602a418b6a783d055b890e9ff3b4fe971cbef0a5305111c55df90d36dfa594c9df8761bd9771840e2510ed9d7bd60504f850542c95be9b886671bb83573e7d20884b7d6b175dbb5825ee50007add334eefee5f5552e1a30cff8c34a2a6a1c442dd3daec0024992c08336f8e97ae9fdbe54ece0c4ea57ad0e9bc1efe5cddf6915b611bec55b10ae4b8c38a0953201a52496c2dc74e64a45560bcc688c8b6ecd7a9916f3ff96ddfdf600ef06f8d1bdc11f22100599c734915cb125d14d381f48cf48ae08d5cc98a4ae5670e76a22b2b5d496cb2c89edc4dd18325ad368aafd3111d2771dec1679307feb05912ff4bef03ed0faa8ea618288181d0f75f2d2b090af2c3493d3b763ae32fe6c3575236228074929184f994789d8af8b2a1aa6e83a756b49520794c1cb6f32a298979c22fdf15ebbfcbd180f7dc2aef7392d4f3434f4204883df1f91dcaa5d6ab85f49baeaa4bae09f217cbc88c80abbe1250b2d1149c7124ae1eb5e5ad6670f269f42ccafd15fd0e4c8809aa49ac79c0907e80ca257b95b1705e9b1bf9ff15b052492bc5f2d05fa98b5b1d8fba0082a302992f1af8cd662a65c2e6c9028d05a47398de764735259922790f773396831d6f266b78ca16fb1f6aa567bbb33e6724452a18685df402102d14e4049c0f70be8687e645be210ecb44ed2ab11cbc46fe91dd9ed278e38fd3ea8b3da44c1f9e263f563d63270eefab933fd0a4b6e7e302bec288c85e5a6b4258c845a40c5937c83621dddfd6491dab18cf1c756319b82b2ce6a210835481a8bb14ada2ff4f8c70220740aac0f121ec1dbd073c1307ab0ffadd4eb6968c92785d49b2c2b9a51065bf1d945555adefc7c09a9b9c1d451095be4da09b43e08b7c78b330d13b8cf6445f644d7967f68b19e8c3a14a8d9bbb53984dded01aab81d77acb4753a2611acde6c630fdcd7787365b0036d21118e683aab06d6309f6b25b7f93dc1798fb504fcfdeb422a41b0f119a46133b80660611b41ec6475d19e4086d102038a5705c66802320a9c4be10ef66df1ec9bc609a7a11a6a2388f2b4ed61aa8927f11d883cfc747c9757b0a52cfcc576b1d055b100db35b324e55480f48470788e56fc844f7d540b615bde83bf99f22528f8a7368ae6a614c3b2942fce549f41dedf988c6efb6dcb9b42daac5606a23a7b5a0afa99f6f6df64498cf9caf9235e588bee4ff0a3d26e758a859d6cfb4d38395f19f6967b8f53f14c9e83f73c05512382716f7b23f2dd047f2f775abf5c4d0e6c565b67fbd22932c8e53b556eb69ba7d757c0e4e278b912e131e34bec874e911f8780c9fc18174db497c817a4e27c9c352bdd7f8d35c8181007a1b607a3579897d09edba43fca8b238a12a5b9aa4f05de8fa27968f35e9ebc3f3cb5466082b1938ba21afafabe9137924689c4a846ed8ca3f039d1441c19a06f555b3980171940d177df667a5be11aaa1a37548dccf9eb489787f341fd3fd6550687aeeafc23c23d7ed8a21eea8130ac0f9680d8426ef9ffa32ee3550a70a5c370e40d374a53aaa408758cc54ae3197bc7eafeba8c8f4d43fd6e8f5add01d53877b2fee62da9b6fa2e6bdccc6ef45b3149c2f97f9788fef29689f8995d5165ee6945743ddcb7552e0422498e23d539b73a031bfa367d03651d6d887fdcc531eb03fd313f2a5ce85218b092c754228bba59791087b37a2b709decbbd56d7ca8939434114eac4e6086352964674f8c5618bf79314aa07b516744e4c1e917510a8c3bb121f3bee7df8a44dbfe46e05039745ca4620ad5cce7b52870775e0a9b78b015bc39d815780f1b0c2ae4d81a4ca91b950d54775180a8f5e664dd41cc8622cbab33dbb5c185004ba9a2d9efa6731174a58d58a0ee868ac803e6dae42976dd11baf60472b4de34f3a754495d8893736aa0e28e865f3b7132e0f4ea096ca2a3cea8c4b0756c6cd4fe54d8a4328fc256562d0c23676484a64b49abcfe83dbad2dee0d3c51e989020358d8d301d5d0fe595accdd4c60cbc5fe19cff80051976afe61d30b546758087fdff045467d426523ba60d108f97b64b2842bc83013ceeb8291744b648c112942207197c1fd6aa1b2c8ad04972722ebfd001692c416bbeabdd637ec57e491cc1bccf40b6eb1be04635e1aa67bd9b864fa06f3744a759c1922cb0393bb09bf554787f24989eabcf2330c7ba9eb6745aa3dc9a9950acf02a445ad1aca0ac0fe96147c18aa497dce000456164de2acb9004a2b512a6287e62b25e29fbedeb6282022cd2fee199756119139b7fae4b604182253d789855673902c8b5ea72a59f901cf902477f35fa775cce05fd427d7f47a56c86581aa17256176ceddbf72f9b36b22513fbbaaa796e56d27571bc078d829fd35470e23a9e02c36679a9f52f29a760586719c4dae832e277c11bfb31c5b2d4756c8e6f2169b95ed9eea4e34e395ea069842f88e1f5881ff1ec00b44dd1b0153aac0fa2c9613c9874620f0e2629d75cb3f24ae75016a575e5d07f790beb5c71df1a47b093b05ddb4a2312e9921a83d8586101fea8d9e58beb95c0c0ff2ac775f2553b09f60b4452c774e9094af4d4d0d905fef0a039563303c402e751176150a62c8363cbf8d77c4c0683589d02ab1a598eb3599688a7d70f028c06c3b84a372aad5a4cfc34ee113ecfd557b3b36f6c9e401250b2a2105497d61a51c4264885f35def993bcc1d3307f1e1a303f28f934f1f5037c12493caccea367cd5a615feb61bfedfe411468001c879f470e5b2863737adde6ade016d74590820546aaada415d4113217d9bf19b3c719157aeaab1294e10c0eef3c01f8be6121c57c2efa9fa054407b6acd86700d5b12f5cedf1f592b7dc1d0fd956c2354246c51ae279c8e9b3724000c6c69b932695c5fe8c634a70e36ebf94ba0289814743a2714855ac2b14e4032b87820e93204c198201cee97d0bc14ad0a01670ed97ce6b8b79a4b4e23222306c5ee523a6829981306dd91e1fe6d37e8fac3f1d5de67e30f413424b8980d35ab3681ad497483e3c92c91cb2b65f35e8f8bb682ee8f96e8bcc0e574bf727a0cf40dcf66b263486b661bd9780477e0277761bdc62a46cd00c7ea407324851c588b633d6e1f4c8c821ef67a842d1b4fd9855453a6a2b8166b554b267e7b3bfcff345a3d0ca235ecbadcff47793ec98cc871da8da5a07888eef10af4417377168c243451b2cfd57dd31b78e8504bde5cffe8114f3aadc7281b8acdf7dd55a13aa16ab129ccd4bef3765eec242d22ff3784d3833b94e5caf11d78bb160e8b6ff4290194e18dc68363a81dbdff8cf204a9dd608b3a783eaa3e499eb4216f9858cbe9abc1d389ae2ec95f48562c668a72d29825711d4cb04260b957c8cdfb82867a7772edd77894070d0004b77fbaaac8b7f7c2498e3f66a58092d676a3f0f17e1693bf44d1e2fa3d1f2a970a0ef3051f62840f8a71ffa3f392bd7ddc30e3dacdae1ce704d88186927c56d0f19be50b0fbbb6c016e1ad5e480cf9bea29aed2e02c01e9cd33666929f0e92a78c42ef637c600829555f878a03db08fd4087a6", 0x1000}, {&(0x7f0000007900)="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", 0x1000}, {&(0x7f0000008900)="e6ae6249acae17bab4268e969d1095c5df", 0x11}, {&(0x7f0000008940)="287fe5d2ddd02d66a33eb842c11ba82fd17e2d9e5eaa54125511e7bcdd2258cb8412f4ff06550a2db9bc70085ad77b477a937c28ebc647e144727bb20ac79196bf77945c182bcfa738d8dbdc173fcd4a2e46e5cb11a32e506877acb7", 0x5c}, {&(0x7f00000089c0)="864ce5e1445d79b9f0be1a102832b771ce628c8057472490c63f8e2ddd5da2d1d08616689c137d3f16ebfd4129d60c52c0262e87c0342242cd4c88364db0f7b4a30798714ff0b31a55f1933bbbe03e92d0e0843ae2119748b405c0d9c6cd1947d7fe365ac57cff66739ccca83ad4005adfd8f24b96f94034303b243eab97a76b8c9fe75774aae4e705315ba9755a3bdd014c50abd8c3a3481cb386fd68113e49734783bf8748c14bea80a62ea0353f52aebde2e2d783d1c502060c238f264815874da5b3b17d3a107ac2edf4f7848a4bed56021fd4024846b41f352738fae18df9777035c74f25b3b901d9afa211001e", 0xf0}], 0x7, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000008c00)=[{&(0x7f0000008b00)="a7e02741d4672894a9fc4fedbd7b97a1e161dfbc35fcbcc37f7de65961d35c0a305a87f68bcf23933f09bdcddd51d0d4758a4717da8053249654443376349f0dff7ce62a4b11312859e0818b734cd9d3862c5925745949ec1174af6089601cd12ad14aba7518997c214febe5ef2f0af11523d4875aa6a81a3189f5dba6462930d77b7b253f87b1098c71bb30325ca31405ecf28b8cfeb57980946c65eb30b1a8176fa4926c037f545275b2a3f47e2da600465f7800f299c561c0b3c2fe906fc47893794145fbac5748a5957ec57ea5559b1562", 0xd3}], 0x1, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f000000a1c0)=[{&(0x7f0000008c40)="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", 0x1000}, {&(0x7f0000009c40)="58bbd138463af7d4694e74fc28c02090cdd159", 0x13}, {&(0x7f0000009c80)="e4862a0edee8c510979264eca98aba5f124e878648ee790eef83d04c4a866ddd17d092d493fde8d18cd9008155d33984ac2db3f479ac1dbbfa4a98f989973bcb97adc8ada01787be107ad43a34eb1786ca12d53721f7b0c1260fd23a39165e3ec4295597a11e197b71bea019501bb1db9b60479a1d6c78fbf02a9de2ed95cf524788ebbdf6830eb0bf7f5b0e7e93c8f56e6f472fb01a59e1b1ffbb58e84991d8a2df1678184599fa5bf8fd79df8bc77e0037fee23c4e0a73b561df65249638151d6fb924bd632f069c778dc0e273586a91f031095666519168d2f21a18c7586ec5f1f2e33fc32fa49c6b70a75b1bebf923e0e9c8acb1", 0xf6}, {&(0x7f0000009d80)="1dd6099e760151ff58de53f8a7b2183c3a5c3de461e73377820bfcf79b5cca88240c81e5e6f8a495e3b6f4be6945b05f8ed520c37fb9eca941053dfec1df7ec891e162e138aa91755a8250151e26f245a0cd50ed7623b73af0990fe2f908e4bc26b0c680a72eb054e9bf6cd86bbbfba0eaa53641e63518e741f0dbe5c2258066d4e84218e1b95d91a020bf6a2290085ea4197a11dd57acfbe98184e9fa79881e24a6c6c7d42020933ed0632ab810090af59f08351beb02d387509daf3a860e35c46d2264035546ac7b9235f1255ddddfe50d64faa902d60e333db27583cdfc2c34b12a9156296292b3b005", 0xeb}, {&(0x7f0000009e80)="84af2f9d38730d69da00bc699ed84c109a3f644fdfe67973ea3113ed8aeab35502596296269c336f876a135c109e76eb56a499f3c4c4eff9afbc6685452e741d5edcc5eba95e5d94b09959b2b9192570cc17a94e943dbe4aa7e99750175b24790792214cb39a2872a265dea9f74d3ede478313712747196c073d64ff77f8a709a07620135a513b0641ffdc70085b527aab7e7136f0bcafc44ce9791584d8ce94b15a66563d155166668b4494996b88de8a52f69ea2124ca8ef5ac497219c70b88902f35edbb1de5aea326876f15bda793718dd2fd81f9359af2b281ef2bbc8b6f8ccd5", 0xe3}, {&(0x7f0000009f80)="16dff0a6f315b0a269214d087cc7fbfac9fb4a5ffaf1333584348c7b87422fbd5a4b98d1d9e26020b5d995846a88858205e60bb9163581e471466c923d", 0x3d}, {&(0x7f0000009fc0)="aef7742230f52ad9f4270b6438c7bbbdd5498df623371a73ce7c88cd315ad5371c598ba0ee6fdcab80058531cfdf0470b6cb5aa28b3cf17c49ca0c388751aab029b76d88d260fdc9bb616524682bea299c7971fa4432a29fff561b81df5055882e4ce48a4860f6135572", 0x6a}, {&(0x7f000000a040)="a1f94049e09c24b5d02f72a003d93a5391fa6f769b6d8eeeb61445b84d5d423bc83875c0e3dcc00e94aab8927b232b20468b193503e2dff4d3791aa45474b0b3badf82e08fafd4f2d44e5d17d51a21bd1371bf54ac41f11b0404b4e1491dccb417f69ff7747090c7b280d3327280f221f6d9d85276f633e17fda2dae0d53b0214e0a", 0x82}, {&(0x7f000000a100)="ded6a23d0d1931bee48a2372bea16e07b9920ab3e4bc6b807c31ff5f4232bff4a4efb465e65036d206f0719dc264bfab58c033d5ad9d40caa8bc7f5ceb2b617eec3e50f4cbd38f05b5b5cf075311da91cc160c2a143d8de30a70876637242313e981755d4ab11ebebbc8bb8fc71e9923e4855654d1188b55fbb5", 0x7a}, {&(0x7f000000a180)="4581de094a0f8d8f6b30b34e57af2cff56d5fa79", 0x14}], 0xa, &(0x7f000000a240)=[@iv={0xf4, 0x117, 0x2, 0xe2, "6c1a8388e8ceb8b91e8505df051238bfbfdf7e8eee6360e86248ba6a06e2e897d9fe369c478ea4853d4046de6bcc212444cb95c30d0b1a89218e8b45fa30a0d7c2538b58aed02084a095ba07a0dcd24892a38423f22d48065dffb525611e09b1bdc47790c409258041d1baca021b4be6380f460ffc00e85ec9ad474d9399e79368d6c1bafc9151fb1e32e2b1fc6fad73634d510fbd9c5812b09a97046507507284da82b76d988b5f090b52b2670b32d2cd4530ffae1a4677fa50c521b11480ad24891f3d548a58f8e54be24c8e0e8684f975474eb6d1e51c973519769f363fd82922"}, @iv={0x88, 0x117, 0x2, 0x76, "4c9c67261a07bd70c8a09414232d0f4adb319f0d7ef7b9eb391070b5e51d37b39db622309d0432c7ea331eeea4a1d43399f77027a65866dccece9925e447a9791800da5a5d8ced0ca5e23fb25ade87f2d0bdf16ac789a7d57e2193b5094e37bc4e55fa2545435c746cd0a3b1fca71d521d47bcf22e83"}, @assoc={0x10, 0x117, 0x4, 0x3}, @op={0x10}], 0x19c, 0x4040}], 0x9, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005700)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000005780)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000a640)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f00000057c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f000000a740)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f000000a840)=0xe8) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f000000ab40)={0x0, 0x1, &(0x7f000000a880)=""/203, &(0x7f000000a980)=""/206, &(0x7f000000aa80)=""/177, 0xf002}) recvmsg(r3, &(0x7f000000bf40)={&(0x7f000000bd00)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000bf00)=[{&(0x7f000000bd80)=""/36, 0x24}, {&(0x7f000000bdc0)=""/176, 0xb0}, {&(0x7f000000be80)=""/80, 0x50}], 0x3}, 0x40000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f000000c040)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f000000c140)=0xe8) ioctl$sock_SIOCDELDLCI(0xffffffffffffff9c, 0x8981, &(0x7f000000ab80)={'syzkaller0\x00', 0x6}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f000000c3c0)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000c380)={&(0x7f000000c180)={0x1c4, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x1a8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x697}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x3f, 0x0, 0x9, 0x6}, {0x8, 0x8, 0x1, 0x8001}, {0x8, 0x9, 0x100000000, 0x12e}, {0x1, 0x4, 0x101, 0x2}, {0x7fff, 0x100000001, 0x1, 0x6}, {0xd1e2, 0x1, 0x0, 0x7fff}, {0x2, 0x0, 0x0, 0xffff}, {0x0, 0x8000, 0x80000001, 0xfd}]}}}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24004840}, 0x20000081) 11:16:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) futimesat(r0, &(0x7f0000000680)='./file1\x00', &(0x7f0000000840)={{0x0, 0x7530}, {r1, r2/1000+10000}}) r3 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000780)={0x0, r3}, &(0x7f00000007c0)={0x3, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x0, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x2300, 0x1000000000, 0x0, 0x4}, 0x0, 0xd, r0, 0x8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_CHILD_SUBREAPER(0x25) stat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f00000006c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x50, &(0x7f0000000500)}, 0x10) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x4000, &(0x7f0000000900)=ANY=[@ANYBLOB=',blksize=0x0000000000001600,blksize=0x0000000000001e00,max_read=0x0000000000000034,allow_other,max_read=0x000000000000483f,max_read=0x0000000000000007,blksize=0x000000']) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000000)) quotactl(0xb30f, &(0x7f0000000880)='./file1\x00', r4, &(0x7f0000000bc0)="a88cd8d8a11e33d42cd4f97ac02f2ca3484cd5a3a79e7278368012d9179063c4bdb4100196f70af535b32ca57d63bb922a874ef8e7336f6ffce96cb0656a6ffea7219381b3fa87e3204385936eef8a13118b87b870db5265040321a09db6964f3932cfc51e5de68320a0c11872d5f35170bd700444ae4758300bacc2c2701653a44290af41451444fb87fa4368b93336d8675098cd8a05d3e13b2a8773143f4e9574905f6b9d3303c1fd77e4c291d27a3bd5227cac8ee427ed6e9e041e683e762739139e658927992c3a8312f04a2e8a17182aed1a8e4ec4e89eae90f0e4c6d4ea2db60878d18b") ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000008c0)=@req={0x20, &(0x7f0000000800)={'bridge_slave_1\x00', @ifru_mtu=0x100000000}}) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7}, 0x7) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 11:16:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x80, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 447.247930] cgroup: fork rejected by pids controller in /syz0 11:16:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:11 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x800) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xfffffffffffffffb, 0x10, 0x3, 0x0, "5c2684e8f5990cc7612c9b2ab041a049287107a929c830f767b4c6e8505d126d"}) clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={r1, 0x80000, r0}) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/16, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 447.438628] protocol 88fb is buggy, dev hsr_slave_0 [ 447.443904] protocol 88fb is buggy, dev hsr_slave_1 11:16:11 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x1d, 0xfffffffffffffff9, 0x20}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0x84000) [ 447.531993] binder: BINDER_SET_CONTEXT_MGR already set 11:16:12 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:12 executing program 1: socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x91d0, 0x200000) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000002c0)={0x4, @bt={0x7, 0x9, 0x1, 0x1, 0x0, 0x8001, 0x1, 0x5, 0x2, 0x6, 0x0, 0x9, 0x1, 0x20, 0x0, 0x4}}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200)=0xbb, 0x4) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000001c0)={0x6, 0x8f4c}) ioctl$sock_ifreq(r1, 0x8919, &(0x7f0000000100)={'lapb0\x00', @ifru_map={0x0, 0x5, 0x10001, 0x1, 0x8, 0x8}}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000240)={0x2}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) [ 447.569640] binder: 1884:1896 ioctl 40046207 0 returned -16 [ 447.573928] binder: 1884:1919 Acquire 1 refcount change on invalid ref 0 ret -22 [ 447.591000] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 447.649236] binder: 1884:1920 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 447.683318] binder: 1884:1962 Release 1 refcount change on invalid ref 0 ret -22 11:16:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563042500000000c94942d0b874d87c006dcc8ae52326c4f1aa05ad88c041bbf20b0badac9c8af00af41207d8"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x2, &(0x7f0000000100)=0x1) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:12 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sysfs$2(0x2, 0x7fff, &(0x7f0000000140)=""/204) r1 = socket$kcm(0x10, 0x1000000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0xfffffc9e}], 0x20000000000000c2, 0x0, 0x35e}, 0x80) recvmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x386}, 0x4) recvmsg(r1, &(0x7f0000001a00)={0x0, 0xfffffd8d, 0x0}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000378630fff0488fffdfff72e0a0000000c0001008954e155ba6149020c00020000002201f6700061f69dbf2bdb7280e307f77ca8a6a98cef630c8fe35b9df8609f42b2cb887caa6cd5f7dd94fb97"], 0x2c}}, 0x0) exit_group(0x0) 11:16:12 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x0, 0x2, 0x8}}, 0x14) [ 447.918358] binder: 2112:2113 unknown command 621044485 11:16:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x4, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) [ 448.044656] binder: 2112:2113 ioctl c0306201 20012000 returned -22 11:16:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b19, &(0x7f0000000040)={'team0\x00\x00\x10\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) [ 448.168770] binder: 2112:2165 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 448.187272] binder: 2112:2199 Release 1 refcount change on invalid ref 0 ret -22 11:16:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:12 executing program 2: clone(0x10003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0x92) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r2, 0x68, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x1, @local, 0x200}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x10}, 0x10000}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000240)=0xc) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) exit_group(0x0) [ 448.326173] binder: 2112:2113 unknown command 621044485 [ 448.344668] binder: 2112:2165 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 11:16:12 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x40, 0x4, 0x400, 0x1]}) recvfrom$inet6(r1, &(0x7f0000000140)=""/215, 0xd7, 0x122, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @rand_addr="4420f9378d4e40a43d7d789e6e3edf5b", 0x4}, 0x1c) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000240)) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'team0\x00', @ifru_flags}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) [ 448.383264] binder: 2112:2113 ioctl c0306201 20012000 returned -22 [ 448.460922] binder: 2112:2345 Release 1 refcount change on invalid ref 0 ret -22 11:16:13 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000100)=0x3f) clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x2, 0x4) exit_group(0x0) 11:16:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @local}, &(0x7f0000000040)=0xc) [ 448.677424] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000001c0)={0x3, 0x1, 0x7, 0x1, 0x40}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) getsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000040)=""/109, &(0x7f0000000100)=0x6d) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:13 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) r1 = dup(r0) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) [ 448.865741] binder: BINDER_SET_CONTEXT_MGR already set [ 448.930674] binder: 2358:2524 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 448.945116] binder: 2358:2361 ioctl 40046207 0 returned -16 11:16:13 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:13 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 448.974643] binder: 2358:2523 Acquire 1 refcount change on invalid ref 0 ret -22 11:16:13 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:13 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 449.155369] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e1ffffff"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0663044000000000a33dfb77ffb33760fdda11438027309132bbacdfdf51968a4d7ad722176a04b998279c98023a7490db203748c4535eebb2290db01036302691e9b6e8b8bd9c2f3facb221fbc8ae7024c85c89898a077b89fa5ed87bbb3d8c1c3a29b00540341a25137b55594aab77bb883f6c807b0b912592aec9e90fb4f1adfd736d2d7f5b7c9376e3bf612b5abbf2414cfb9c66d879f2e6315260c47e"], 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @remote, 0x76d5}}, 0x5, 0x5}, &(0x7f0000000000)=0x88) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x1ff, @mcast2, 0x80000000}}, 0x8, 0x7, 0x8000, 0x0, 0x10}, 0x98) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000040)) [ 449.321737] binder: 2619:2693 unknown command -31 [ 449.384498] binder: 2619:2693 ioctl c0306201 20008fd0 returned -22 11:16:13 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:13 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) [ 449.461281] binder: 2619:2803 ioctl 1267 20000040 returned -22 [ 449.537318] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 449.545325] binder: 2619:2803 Acquire 1 refcount change on invalid ref 0 ret -22 [ 449.545346] binder: 2619:2826 unknown command -31 11:16:14 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 449.591344] binder: 2619:2803 Release 1 refcount change on invalid ref 0 ret -22 [ 449.600857] binder: 2619:2826 ioctl c0306201 20008fd0 returned -22 [ 449.628690] binder: 2619:2693 ioctl 1267 20000040 returned -22 11:16:14 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:14 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r2, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:14 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x80000000, 0xe8, 0x8, 0x1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) pipe2(&(0x7f0000000000), 0x84000) exit_group(0x0) 11:16:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffffd5, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 449.947376] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 450.004379] cgroup: fork rejected by pids controller in /syz3 [ 450.040506] binder: BINDER_SET_CONTEXT_MGR already set 11:16:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$midi(0x0, 0x9, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 450.074879] binder: 3074:3189 ioctl 40046207 0 returned -16 11:16:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x204000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x9fe, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:14 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r0, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e0000001d008107e00f80ecdb4cb9d905631912080012013b0000001255ab96a151cbbf5e230451000100030000", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x1, 0x8001, 0xffe0000, 0x2000009, 0x7ffd, 0x1}) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060488fffdffff2e0a000000a20d00007d5500010c00020000002201f6f0006100000000"], 0x2c}}, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x3f, 0x101}]}, 0xc, 0x2) exit_group(0x0) 11:16:14 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x8000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100044003006a14"], 0x0, 0x0, 0x0}) 11:16:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff04884a6cb30c2e0a0003000c000100721100020000002201f6f00061"], 0x2c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000003c0)={0x2, 0x2, 0x2000000000000004, 0xc, 0x2, @discrete={0x3, 0xfffffffeffffffff}}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) exit_group(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x800, 0x10001}, 0xc) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000100)={0x2005, 0x1, 0x7, 0x400000}) 11:16:15 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 450.846233] binder: 3570:3610 unknown command 1074003969 [ 450.936918] binder: 3570:3610 ioctl c0306201 20000040 returned -22 [ 450.982122] binder: 3570:3610 tried to acquire reference to desc 0, got 1 instead [ 451.020827] binder: 3570:3640 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 451.085489] binder: 3570:3643 unknown command 1074003969 [ 451.109250] binder: 3570:3643 ioctl c0306201 20000040 returned -22 11:16:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x15) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r2, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x14) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05460440c76e37135cc785762928050000000000ec754bea3ddb2e5443d07ffe7c3d8647dcc847abe661e6154848897e74b8bfb48b7abaf842c85d3f49b25acb59d46a51204e2bc1a78fab30dde34aafeb1bdd2bd54f9987b60f32545f0b71273505e47dcba40055bd8ef8dcd9d01cb77e32daa3e0793b1b46b308c9a63d852c745a8675c9ffa3847a10cc2c9d1561d864064962101d97d34f69db8f706e8db9ff0d6cc7135df38f2d748904c956a4a613ca15dacb6b0f443218f8d13bc8b0ea4a32ec40a2906836449f5f0f8eebc4fe440f41bebc03751136c89ef2495b1bfe4ac27947f909f5b3e2900f59a6f14d7299265fff6426af0dc75a863dec2b560c173cdeb02609357cf83077c9d28492553bd4e569a1ef32b49113e98770876ed1c98f1f1b6c2eeae1d85c89b1354f4e60067190e00c0057b4c200000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bc27c98ee097d9c50f2f480000000000000000"], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf28}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) 11:16:15 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 451.513087] binder: 3651:3652 unknown command 1074021893 [ 451.577298] binder: 3651:3652 ioctl c0306201 20012000 returned -22 [ 451.579447] binder: 3651:3655 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 451.609230] net_ratelimit: 16 callbacks suppressed [ 451.609273] protocol 88fb is buggy, dev hsr_slave_0 [ 451.619765] protocol 88fb is buggy, dev hsr_slave_1 [ 451.650657] binder: 3651:3652 unknown command -1899419716 [ 451.688311] binder: 3651:3652 ioctl c0306201 20000240 returned -22 [ 451.763572] binder: 3651:3652 unknown command 1074021893 [ 451.794911] binder: 3651:3655 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 451.820233] binder: 3651:3652 ioctl c0306201 20012000 returned -22 [ 451.820243] binder: 3651:3660 unknown command -1899419716 [ 451.820259] binder: 3651:3660 ioctl c0306201 20000240 returned -22 11:16:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{0x1, 0x3e0c}, {0x63f8, 0x3}, 0x80, 0x1, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06630440000000005787ac683df06d0eb172403eb85b71cb2f4028b912c93b31f3bd5d268baf7280f2df9f22ae24d90c5baf302af338b2f49dda524d95ae0d931c0859cef25542dcceeb0b8ee0c433ff562f87b6195dc57d79b218cafa8760f0a3a5b625dfdc64acc1201327b78564807284da2a75f1a8990786443600a8e92844942211cca5c9e4cc8ffee485ce55ec66dcdd9e"], 0x0, 0x0, 0x0}) [ 454.694546] IPVS: ftp: loaded support on port[0] = 21 [ 454.755674] chnl_net:caif_netlink_parms(): no params data found [ 454.782094] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.788578] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.795537] device bridge_slave_0 entered promiscuous mode [ 454.803025] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.809494] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.816293] device bridge_slave_1 entered promiscuous mode [ 454.832578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 454.842138] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 454.856722] team0: Port device team_slave_0 added [ 454.862947] team0: Port device team_slave_1 added [ 454.921229] device hsr_slave_0 entered promiscuous mode [ 454.978932] device hsr_slave_1 entered promiscuous mode [ 455.173978] IPVS: ftp: loaded support on port[0] = 21 [ 455.186571] IPVS: ftp: loaded support on port[0] = 21 [ 455.227150] IPVS: ftp: loaded support on port[0] = 21 [ 455.825293] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.831674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.838235] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.844732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.864444] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.873250] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.053796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.086333] chnl_net:caif_netlink_parms(): no params data found [ 457.455199] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.461620] chnl_net:caif_netlink_parms(): no params data found [ 457.484968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.492154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.515736] chnl_net:caif_netlink_parms(): no params data found [ 457.530378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.538241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.546397] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.552804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.559906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.567610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.575253] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.581623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.987104] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.993840] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.001170] device bridge_slave_0 entered promiscuous mode [ 458.008973] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.015328] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.026849] device bridge_slave_0 entered promiscuous mode [ 458.410257] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.416644] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.423679] device bridge_slave_1 entered promiscuous mode [ 458.430653] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.437008] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.444799] device bridge_slave_1 entered promiscuous mode [ 458.452128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.490867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.512409] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.887674] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.894558] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.901935] device bridge_slave_0 entered promiscuous mode [ 458.910143] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 458.918255] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.924680] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.932497] device bridge_slave_1 entered promiscuous mode [ 458.944176] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.953764] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 458.985964] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 459.012644] team0: Port device team_slave_0 added [ 459.020527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.028175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.037312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.045541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.053457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.061260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.068727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.076153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.089067] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 459.097903] team0: Port device team_slave_1 added [ 459.107542] team0: Port device team_slave_0 added [ 459.113090] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.492520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.507027] team0: Port device team_slave_1 added [ 459.571578] device hsr_slave_0 entered promiscuous mode [ 459.618874] device hsr_slave_1 entered promiscuous mode [ 459.675536] team0: Port device team_slave_0 added [ 459.682494] team0: Port device team_slave_1 added [ 459.690317] device bridge_slave_1 left promiscuous mode [ 459.696654] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.749795] device bridge_slave_0 left promiscuous mode [ 459.755310] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.791478] device bridge_slave_1 left promiscuous mode [ 459.797057] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.849942] device bridge_slave_0 left promiscuous mode [ 459.855393] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.890244] device bridge_slave_1 left promiscuous mode [ 459.895747] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.939258] device bridge_slave_0 left promiscuous mode [ 459.944786] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.021805] bond3 (unregistering): Released all slaves [ 470.033035] bond2 (unregistering): Released all slaves [ 470.045802] bond1 (unregistering): Released all slaves [ 470.102261] device hsr_slave_1 left promiscuous mode [ 470.146334] device hsr_slave_0 left promiscuous mode [ 470.203598] team0 (unregistering): Port device team_slave_1 removed [ 470.214119] team0 (unregistering): Port device team_slave_0 removed [ 470.226391] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 470.265450] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 470.346071] bond0 (unregistering): Released all slaves [ 470.611518] device hsr_slave_1 left promiscuous mode [ 470.661649] device hsr_slave_0 left promiscuous mode [ 470.733891] team0 (unregistering): Port device team_slave_1 removed [ 470.744520] team0 (unregistering): Port device team_slave_0 removed [ 470.755000] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 470.792673] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 470.897121] bond0 (unregistering): Released all slaves [ 471.191512] device hsr_slave_1 left promiscuous mode [ 471.244224] device hsr_slave_0 left promiscuous mode [ 471.331516] team0 (unregistering): Port device team_slave_1 removed [ 471.345024] team0 (unregistering): Port device team_slave_0 removed [ 471.355835] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 471.422717] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 471.514410] bond0 (unregistering): Released all slaves [ 471.700595] device hsr_slave_0 entered promiscuous mode [ 471.758888] device hsr_slave_1 entered promiscuous mode [ 471.834632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.911509] device hsr_slave_0 entered promiscuous mode [ 471.970505] device hsr_slave_1 entered promiscuous mode 11:16:36 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$midi(0x0, 0x9, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:36 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="056304400000000022a3101cdb108da3de37c3281ef7ca524af22e0a906087fb0c46ee116b990ddf14174c560c1030a28e55d957a6658ee038a51982e2b141b8e85df5170ee13b15381b1565ece9870542370dcb43135e4c641694795669714fda55ae5c7116ee8508d932905624a3df3ebb9a91507880d9a84622362715cb85feb6b2eea20b4eaa3b90012f90ecbb0d26532b77ca169288238bb06901b1982254"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06630440dfff0000"], 0x0, 0x0, 0x0}) [ 472.102833] binder: 3692:3693 Release 1 refcount change on invalid ref 65503 ret -22 [ 472.131495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.170267] binder: 3692:3693 tried to acquire reference to desc 0, got 1 instead [ 472.175698] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.183992] binder: 3692:3697 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 472.217538] binder: 3692:3700 Release 1 refcount change on invalid ref 65503 ret -22 [ 472.251264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.300614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.333814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:16:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) r3 = getpid() setpriority(0x1, r3, 0x2) [ 472.361862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.376128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.392251] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.398719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.421153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.460588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.503188] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.509641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.600791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.607889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 11:16:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffe88, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4ba906944299a722"], 0x0, 0x0, 0x0}) [ 472.682736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.720498] binder: 3711:3713 unknown command 0 [ 472.734005] binder: 3711:3713 ioctl c0306201 20000080 returned -22 [ 472.745227] binder: 3711:3713 unknown command -1811502773 [ 472.755781] binder: 3711:3713 ioctl c0306201 20000240 returned -22 [ 472.767282] binder: 3711:3713 tried to acquire reference to desc 0, got 1 instead [ 472.772621] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.783093] binder: 3711:3714 unknown command 0 [ 472.787868] binder: 3711:3714 ioctl c0306201 20000080 returned -22 [ 472.804386] binder: 3711:3714 unknown command -1811502773 [ 472.812366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.819964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 472.827878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.843505] binder: 3711:3714 ioctl c0306201 20000240 returned -22 [ 472.864280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.875603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.895439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.918189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.957721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.964874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.972922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.980532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.987364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.995045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.003027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.010631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.018372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.026071] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.032473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.040294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.048201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.055859] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.062238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.069828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.077589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.085491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.093667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.101658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.109838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.119047] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.143609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.152486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.159672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.167148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.174985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.183113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.190890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.198936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.206480] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.212863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.220151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.227948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.235659] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.242064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.249125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.256864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.265286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.275197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.288264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.306376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.314502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.322470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.351417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.360344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.367834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.375669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.383241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.391073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.403379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.414061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.459624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.473123] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 473.478193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.483325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 11:16:37 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:38 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:38 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$TUNDETACHFILTER(r0, 0x400854d6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 474.023855] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 474.073078] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r2, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e631740"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:38 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$midi(0x0, 0x9, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:38 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:38 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3, 0x7}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x7ff}, 0x8) [ 474.338440] binder: 3747:3753 unknown command 1075274510 [ 474.367858] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 474.375668] binder: 3747:3753 ioctl c0306201 20008fd0 returned -22 [ 474.432712] binder: 3747:3753 unknown command 1075274510 [ 474.464174] binder: 3747:3753 ioctl c0306201 20008fd0 returned -22 11:16:38 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x400000, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1225) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x20000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setown(r1, 0x8, r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:16:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630444272d555b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffff"], 0x0, 0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xa4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="d5f998f240c8ce0663044065213fb349d1e2c3465b00"], 0x0, 0x0, 0x0}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x880, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x802, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0086426, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000001c0)={r4, 0x2}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0x6) [ 474.728000] binder: 3769:3770 unknown command 1141138181 11:16:39 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000a54806050c7834cdfffdffff2e0a0000000c000100060d00007d5500010c000201f6f0006100000000"], 0x2c}}, 0x0) exit_group(0x0) [ 474.838826] binder: 3769:3770 ioctl c0306201 20012000 returned -22 [ 474.894630] binder: 3769:3770 unknown command -1 [ 474.943156] binder: 3769:3774 unknown command -224855595 [ 474.978699] binder: 3769:3770 ioctl c0306201 20008fd0 returned -22 11:16:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 475.085448] binder: 3769:3774 ioctl c0306201 20000240 returned -22 [ 475.085819] binder: 3769:3770 ioctl c0086426 20000140 returned -22 11:16:39 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:39 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:39 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc8, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[], 0xfffffe22}}, 0x0) exit_group(0x0) [ 475.304681] binder: 3769:3770 ioctl c008af12 20000180 returned -22 [ 475.392520] binder: 3769:3774 ioctl c0044306 20000040 returned -22 [ 475.540360] binder: 3769:3784 unknown command 1141138181 [ 475.545998] binder: 3769:3784 ioctl c0306201 20012000 returned -22 11:16:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000001c0)) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r2, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:40 executing program 2: clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2ceaff0003060501ff0488fffdffff2e0a0000000c00010e060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) [ 475.629659] binder: 3769:3797 unknown command -1 [ 475.634597] binder: 3769:3797 ioctl c0306201 20008fd0 returned -22 [ 475.703097] binder: 3769:3770 unknown command -224855595 [ 475.744302] binder: 3769:3774 ioctl c0086426 20000140 returned -22 [ 475.799066] binder: 3769:3770 ioctl c0306201 20000240 returned -22 11:16:40 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0900000000000000060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000500)) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x1d, r1}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x3, 0x191, 0xfffffffffffffffc, {r2, r3/1000+10000}, {r4, r5/1000+30000}, {0x2, 0x4, 0x8, 0x4}, 0x1, @canfd={{0x3, 0x5, 0x4010, 0x1}, 0x2c, 0x1, 0x0, 0x0, "6801bac414f203e23f4c8a4417ce3f5b0f74aeadb805665611bf19609952d338daa9b15f291239ae948b9453cca0c6e2ef2216fefa7051bf9128417c01d2976e"}}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000540)=0x929, 0x4) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x228000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0084320, &(0x7f0000000180)={0x8, &(0x7f00000000c0)="0e292ffdf5df7a20e03547447e9310c4f3de1bc0887a76d586ac49bc8e2147907b01023595a39ce50c2600870eae143dbfae95b51d0afbf4cedc9a93fd0ecba6a4aa34040936495ccdb320130258f926eb17b9b49ea6fde79a6cc51b847d1991931a4ab6bc9158a21e2e1cf4da65264b28c52a2d13a0ff62b6f2d8ed506f82529b36f7725341042ec9"}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) userfaultfd(0x800) [ 475.846480] binder: 3769:3774 ioctl c008af12 20000180 returned -22 11:16:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 476.074973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 11:16:40 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000100)={0x1, 0x1, 0x1, 0x1}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x17ce, 0x400000) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000040)) 11:16:40 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 476.382532] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f7cbe8ad90fe4beb25072c299e10150a72c3105e4391ad2739f4d7a6312c23e53223b120ed00175bbfead4fc8bcdac8287763f851980b477c5fdef162f10fa79347543219f18fd7fe53489a081f0bcd992c393d90f6553f4e6d1803a04edf8e29c23d7b47a74373e7081da74305b88f63e5acafb1b51574590162f8f05c094089e2d2153df8f47bdd37ced6debfaefed07c3351eabdf99bb7a47a02d62055e1b1091579425c0605d05a3d0968cc8fdbac3827adf8a265c2ea3e7550ddba01b0f40e557be44eb72120884ffd04cf1a61c7dbd6d65767843613f9b31087ce6c4f9f592d43a008edc"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x1, 0x3}, @free_buffer={0x40086303, r2}], 0xe8, 0x0, &(0x7f0000000280)="6a3b6ac4cf23878c4c6f27f7069b95d450d0b584d7b085480e0caeef2ef1132c1e4fe807ba3d41997191822d0825fba89123e1c8bbc66055042058a58f20001f75129c4dbed54962794be03e634422fea9e710f831c2df976e168baaef5bebaad9bf1c249375124df87f0aff9ea3be13ee89c20b0223af6ab547ad96c8cda7e668c976059a441d843d573421debfb3d3db676354a7488d7b623917029d26dca40ab73e96aea1de1576f0e4026e53f7db0a447c5cc1eb1967ed383ac25060041b39e75c1690ed9fe3cab433a38119d98eb6b753336a276ceddcffbcff6dce3a40e3939418fd09db56"}) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:40 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:41 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x20) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0xfffffffffffffffb) 11:16:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000001c0)) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r2, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 476.563834] binder: 3830:3835 unknown command -535259933 [ 476.598729] binder: 3830:3835 ioctl c0306201 20012000 returned -22 [ 476.636286] binder: 3830:3844 unknown command -1377252361 [ 476.692685] binder: 3830:3844 ioctl c0306201 200001c0 returned -22 [ 476.697701] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:41 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000ff0488fffde05a2e0a00d4ff0b000100060d0000a136ce9d0c00020000002201f6f000613c4072c26daa0c839665a484f35904ab8541a935e26f7fddd0eb17d6fdff9622ed7035509495f230d418b776a90f7b783316b4f0e77355f93a6e524236a47405b43402e70a608333daf1d98c11480b9e1603ad1c54fda57255af5a51bc1758e7f2c62a6681db5cdc1973b4684b875c5eccd9a089591a6165f2e3b0723b13e3a3bc7393e997a59131da2025186b2a68dc9c7a734fcb415b13292812459a3b74cefb4a590af69141463934d361b7d47cd9d0cf75ae65ba6fdb0ea59ac2b918a2000000000000000000"], 0x2c}}, 0x0) exit_group(0x0) [ 476.797897] binder: 3830:3835 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 476.939183] binder: 3830:3835 BC_FREE_BUFFER u0000000000000000 no match 11:16:41 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfffffdb3}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) exit_group(0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000100)=0x1, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0xea6a41ed7f2ee501, 0x7}, 0x10) setns(r1, 0x0) 11:16:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$midi(0x0, 0x9, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 477.309888] binder: 3830:3858 unknown command -1377252361 [ 477.310093] binder: 3830:3844 unknown command -535259933 11:16:41 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r2, @loopback, @loopback}, 0xc) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x4, 0x4) exit_group(0x0) [ 477.352971] binder: 3830:3858 ioctl c0306201 200001c0 returned -22 11:16:41 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000001c0)) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r2, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 477.425743] binder: 3830:3844 ioctl c0306201 20012000 returned -22 11:16:41 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 477.521468] binder: 3830:3877 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 477.538601] binder: 3830:3858 Release 1 refcount change on invalid ref 0 ret -22 [ 477.584241] binder: 3830:3877 BC_FREE_BUFFER u0000000000000000 no match [ 477.588770] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:42 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0xfffffeb8}}, 0x0) exit_group(0x0) 11:16:42 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10000, 0x20000) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x8, {0x8, 0x5, 0x1ff, 0xc8b}, {0x2, 0x5af, 0x6, 0x7}, {0x8808, 0x6}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:16:42 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/27) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0xa0000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e680c40"], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:42 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$midi(0x0, 0x9, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 478.279718] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 478.328559] binder: 3910:3911 unknown command 1074554894 [ 478.334071] binder: 3910:3911 ioctl c0306201 20008fd0 returned -22 [ 478.336372] cgroup: fork rejected by pids controller in /syz1 [ 478.453741] binder: 3910:3911 unknown command 1074554894 11:16:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:43 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x14}}, 0x0) exit_group(0x203) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101340, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x1, 0x7}, 0x7fffffff, 0x5}) [ 478.610800] binder: 3910:3911 ioctl c0306201 20008fd0 returned -22 11:16:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xa4, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x58, 0x48]}, 0x100000000}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=[0x30, 0x30]}, 0x6}}, @register_looper, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10000, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) 11:16:43 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) 11:16:43 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c000200000022abf1771cf6fcadf2c6df5e8a2601f6f00061"], 0x2c}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101240, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xf, @output={0x1000, 0x0, {0x9, 0xfff}, 0x6, 0xbfe2}}) exit_group(0x0) write$P9_RLINK(r1, &(0x7f00000001c0)={0x7, 0x47, 0x2}, 0x7) signalfd4(r0, &(0x7f0000000040)={0x4}, 0x8, 0x800) [ 478.910316] binder: 3933:3934 got transaction to invalid handle [ 479.007273] binder: 3933:3934 transaction failed 29201/-22, size 0-24 line 2896 [ 479.008870] binder: 3933:3949 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 479.069715] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:43 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 479.210320] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 479.318817] binder: 3933:3949 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 479.424420] binder: undelivered TRANSACTION_ERROR: 29201 11:16:44 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x280000) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f00000000c0)="0295c0955d3e4872e64d8e1e7b6d1f13c510493bcbe8f2063ac540f97842d72358b1f208a4573b3ede4a1adf7b3b2b62ddce3f162d7291ab8eec4e18af763ebbda69e314ef343990c0a34080a1e0fb010f949fa5e0e93f7c3bc827e6a23aa21ea7a16464ed7d4bd84300f543acbaf699d53ae2301c9e2381c38786b7260594e90a313fb50dfc70ef6bb63dd37e489c5e751aecb7aea0b11e835825fe01193722223cc40520b46c505585e71dcb310a5275d111d6755c4da0256c2a267afe0f2bfd352d9ba305b47eb16c7b8099764b7d0a916a7f1d4d0b7b31e1ed35907e733ed99434d1ee74a3247e081dffcb35a0437ac7dd6b628a1d2507268eb0a8caedf108d91b47c6f01a6666320427fcb213004fc41d0ca07afb1f83c46560c49cf5a0f8d90175e158a7209cbc6d38ffaed9d73b400221464a939115059ef2f97e4900355d37c224b05bd38a27150334f2212169a34d91e649cf4a1cc939ffb28d3799fe329dca0f5216675d5985dcb36c022412209f96a6a9b9b3d0151c6244005d66f02dbfc7e187f70e88cd6e95104819cce91aeeed99fe9f63f2c42b8dc24b4596e2b3d578d4de45f52b74778bcb73b1443ace2d3c2216b019421c6546a7f2c2005f48001878f04852f92760add3d77dda7537d9cecccca7fe0e331d8827fb23a168ada584c63a5a4fdb1f698f0d7458c156834ef1adac0a0f55481d1a4d86b0fd083fef9a268f57293767207d078361748503c0f6624a1abc1e6d3d2f60b6d24fbf7d116c9dfa706f18680ec81b7bc6d01d9ced2c897a7cadb996d0395823e396bd5dc40028465262a4ab98e73cb1d1e443d488406a5a1344fb40d38a3a902223b62938aacf2ebcb697aae7b56cd2a0fcaa486d68b20159512d9d52fd1e8b905ad5052844eee2e798feeaf5979d70633b353043ed3a733286fbd7e61e0b4e04f335cd2fdd22d38e60073344cc6dbe4c542b8159b561135a81bd525b19c66d9159e59f331ab96eeff41a385f11019d8c983a41791cb79c720bda7fde86b368c1870bb5ede7cb3cbb12b44b079cd0c45a99bc546454247758dda7011d6ba844967bfd1b896ea519fc5f943d65e94b58d826cf191664f774307d95628e9a7c17af5eaab29e64fb17c8cc299aedd6a6ac34dce12afc2eb9a976a250069e9f478fb99f64526edca12c9ffbb6d7959c6ef9665d5e9bc8278b456b5a89335b41b129a3dabe5f1c4f3085c17a77ff67cf3d4d9171e8d435d824ca4e3f7afd0bab52627299d6abbd4fc15922f60d9bd552acf762cb9ad8266f8e8273fc9d9cdcef16e77098986cf3689e9646bdae11db1a102c706d96835e1527f21eab294032f659a4574b87c94c6807787ab7da422e0e86c992a4798535d9c47322bf0a369aa4125e047dc5fa095ba4afabfad84815efcecc34aaa2faa286e56ba0aed7e0d9c9e7155b3c4c91cc3832696c84511f8de9de5a88d0492b57ac8556333f7bf9840ddb0e58376ecf328e553fc629a4f5106172faf1249584816b30a316d700462215d1c94e9c8a87aec36814f852c1b995ab139f501023b2441b88ab3cf443d3f1e2221ff76f9d4d36efb6e36fa3c1aab162c5139e28dd7f557f994b41dfe7b42ec8850f9d51effa40d3d3953967a889c6262718329035c4d847c93e07db8cded42e758f8e20295fd94fb5e0e518a7368418a1e8ccb46c20ad5dc2b2da41fe819b15ab33502697ce2d2d44e3a8b55511f59fc8faa10293f532fe6a61c9a8552d404d99172467a9a2c924bbab0b20aa00ce3814759a39ad09e843ced736a6d1be66213dd2c06a77d1d7c55a74cca7e11bac4787346a86bea5472e4c8dea2ad6ac3853576fb36d6f7c45111b754b4d77da0a85ab68a69379e8ecea2bc74aa0a9837cc3c93482fcda826b4da8ebb6cb2207e2f2d92c630af0eedbd33ac1f19f53df243ef0aa1a4e2bac21ea34850bd031a9bc3d3afa45c689b3b22d63e66004054f452d79757149db7ce3519662186a7ad48bd474b9eb7e7cec28fa7c4a378a6d46290db5e0b897e3a3a07a746939bdb3217a4327dcedecbcf2866494213b6e4b0278364245c28a13886fdde3842c52406651d8623da539fbcca752f8932323b361bd48013b9378ad5044f3588c57d6432b7fed45fce3be40d01158a62fa8a9bd86f0e41f850d32a5a07186d91495e4b7acd9774dad4056edd6e7ffb77820f6e7131206ecdf7ff2500a0d4fa6c745c56d05bbbf1de9132df3a5560a853d355684117e1de4afe56c8d82439099d6c223e8bf724a90fdde24f77c0951b848998dabfbd0ca083468af9cbd270e3da74543bee1c90398787a63798358a74068c486cab5b6984b9332b496bc42076c291004fa15b0b8276a9907cd5de713f4ad3918b19ce95d9ec25675062baf910f749cf94303f23cac06f0db4a27be2925b05d7d91a4049c621e4c8a3af2e13d4704c5fc19fc653d49e16d9f0969070929246413066f2ed7e7008f94333ca07be832facbad7987e46034cbc93c86970e316068e3b41759f57dd31d0c1e191fc7398b4750e0419f91cdeb397a5352fe3438b456936653c284aa9ed4d7251b032ce3602d7607ddb3db008de112e7820978b06f6f9af2ae5255d64151bdcfbdca11b6915ddf56524a93927ee8937576c61167cf7d94e14fe0b01d506856f6ce4263c684ef7ba9584358ff73bb2754e4eb749b27d21cf0f73421734ce6eae0bf95731c8cb53c61d53b6101f226ab9c82a66dcfb7c9ba8876d979eca967748a38aa8fffaa785c1f948fc38901cd4664e1fee9530014f0d96841e3e7c7541c876b11f3af31808f264ee13e97a8e5d53eec1f4424a709cb4b5e2adfb2ba2a491cecba9e6b428fdee79244a290d27f0b805b371dc520bc6712d6873dc418cbae6cdd000c776b1e1b052f5a80d16ac0d9ffa57eb4e874fa92535877e2d68f764d03c330e1b8650696f9b72b25c250d8cfa4cc6efcbf0684e1d7c525b41694068f632c7662040746b2c5729b9752b900928de01570415e3a1a6646376a19a0b18e34e6fda026fdb43541bbc72e5e5ea7562cdecef9dbe67ad78ebb5f2f377e650c326233923be0ed3f21abb6520a8779da8f36c91ab151e23a4ddff21f11e65eb42ee0133f4491dab279fac16a77cace5ef0948962d899382457f05f98f7f2b16a048bf03b919844d3d1a36cda5c612bce9fe013525b73b74a44dce72dd2ca5d7b9180f48c6e35ac03e1fc16514a4cc1f7a60300ae4ba55a417bd1efe364e74885362fed46926219006b05133344b5f415d52b0726bcd5e8afbf09ccbd9f1df5facce1e3c6b8ae71138fb896c0c3442f7fb60bcc5a061c780d06278f122551e40b0c4547572eb9d2315a5fa986e8e25d4315fb3ba8c26debfbca1e67186b6fc61eacaca74ffc88af1b5c05d80455531a05e1331b36557c901b88033f72cc3236cc72300ab15a095c82b442965fbc19914d8f3bdbe302ab7be0ed73008d935c44489759487fab0f31398c9873849efa7ad32bf5f17b0fc125bc0159abdfbbe021c52d32f74fe7c714e17c9b485e0bb319054ef0ff8b6363b434ca06c4df27424c0b8d355430df11af191f7f3ee81ff875fafe38eec34337f0357aba7602fbb1c04c3050930059c4017ad50a9478e4322eac6735194047a653f368ade8fafb98d17c81e71fb6573c640efea147636684f333e6eb26086ec179bc72b998497bee8e4b6c71a9389c95fb609f4aca1fe5a45d646743620d77ea21e407e19c6e9fb490ca201607b214e188f02a249f39832c48c5c42a6090c3f61b0273d3e8af93cba01dc81214d39b5c138ad3b32802c2a402db99e02cc9b8deeb3347daf7adf4c3a8f479059edfeb485d4152890b524793eed229adca89dee62a9780c3028c244f89aeba28951878c3f66677c887093e62364da3fc2cd336629ea39cdbca80dd71bf4b6881823b6c50a3d5df8158cf66a01ddb4256500582c14cfdf9119f50cf7eada4da117732551dea69303c24eecdca10b1e0b9b36b9991e8596b35a28c6a969c32385770abd98b792596d587445c2666705c95397b2a0f87a9ebe6cf192dc30085b4da78943d1ac55ab9880be2963de6344f6c20f5ddf7d776328e2d2f072d2a9394548af46f91ea8ce91b15e02393c966f6273cc388fc9148f9f6e23f57792614a6a7f1183e340aaabb0a94acf4c24b5728956d1bf0146a19b262c64d53a6b00e20e1375b838a104692f160df8f5106bef0b4ae604cd643285fbaa277c20db29a7ed1fcc7128d01869d59c858e03f556be2d55eeb9509de7f6ab63b543b742fa87dadae87dd92e453e6333b87996fbf4e87436584e6e8319149e00fec2babe9b4358ad6fb14b3fbd8966c963e4a4a51d899cb8c86f47ad9ecc3db1cdfceee8f3ee4d8099a33ae7364f4b393ae3f849cea2238e3d40f8ebf442b5bb4af87a831f4a6b0c5188dda28a7292aceef12a3bdfebda39ebccc2d503f152f8b079456891684e26d79b9de71ad80c607126135da91c9ad95d19bc385533ad2151079f40f4b4e15dd9400ed0b8fe9415a48c34bad0d00ccaf5fdab8f17c645353109a820db7c8d2ce09b1ec7409637c82abf2b00b185282eeaf45a56e18272f60ff94201c26d4f767c241d5c66d4dfff325a30bd376c5df61bfbd2e8f755a85085b23805c1d7df6a9f947a893b13392b9fdf93e4fc989aa776666c8c52c2ddde12f4a42643854252350cc4429841b5433567f197e12610014b4e23e4a7c9c98f9bb8dd4f80c002fe4044aebe150b54be45a42043c333a11ab3ffcd1520f40be347120ffd0046ca4734f25b2639fc6842a1b4fa484744bf6b647dad9d721b9c97a9e6dbf47971035d5f3d9b697807c391d59d1a4086ad0384e070ba237dde2235372a8fd6712e839586e5c15e81b28c1167137e0656ce0889108a38896f775b95b880cc4d061e87961ed7a9f12aa056f35e94d81b65d24e9c7ab018862a69890ab89d91c449f6ddc775e40303258333d1084935e87124e11baefbfd21dc0642f3e4b9ec9207a1db6f8a0f4c8d94b80ef31fc1e6fd885b3ea12990db1c24613f9e00ca3aa4d6faac105fbf1760e581d8ebc7181500154ed02867027106c893ebdcbf56431b4fce45dc72742e4c5e7d564f0d9fae23fdae15f1a790d286a4b07f0a020ce72adbae1e99889d2e12538437b45cee0df4d5848d1295a375644ad80d57055c73959bafe21f2cafbd6b26d8e5007c5e8bf98e1639cbcc96eb3a25b5b9819ec4861e3ed42dad281b57e062b9075d293f644e8894acb0d68fc1c591477dd719e1969d40c1da6a11ee2cc30bf2144a86d2bc9c38e0486352d1bcade27da9176c940d7973b3f9162818a7335e36da0a20dbeb4ad0d4d02ae1222c5846c2a484e8a78a3a9d5282ca5bbddcb620701be7802964bd72147cd15d259e5453d9ed3ffcc7f2c27a15881f4c38582bb25c295a5d2bdaec2a0f299704ba0608e36887e8e51919d77d64b54c4c845ee7eb98832e26f0137a879dc451d8556d1591f6dddc0145a5700bcd18a586121a1da9ddec1ed995f1e3b3664584fff52980d521524ab8f104418a27d6c22f69e61da5f02b32cf06f454cbbba13d6d40945524e06880b9599e1cb981047a106b44f0457a640f25cf185941efeee1acf53088e46e9c4e7f292c749542ebe1b331b60bc2098a1f8c0439edd1f02d3ee7cf8baeee9899ce2152d7361d3c3da790fe3b24a5b61f8ea486e494167738e996e23c2501707c1124b0b25c69647a6700b270ae1ac2e41b9856ade0f8a5dba34484373c2d8c05d4684c667adbf") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc004240a, &(0x7f0000000000)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11:16:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 479.724155] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9120c40e"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) [ 479.911552] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) creat(&(0x7f0000000240)='./file0\x00', 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$midi(0x0, 0x9, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 480.012416] binder: 4065:4068 unknown command 247734417 11:16:44 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) syz_open_dev$midi(0x0, 0x9, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 480.139580] binder: 4065:4068 ioctl c0306201 20008fd0 returned -22 [ 480.163107] binder: 4065:4069 Acquire 1 refcount change on invalid ref 0 ret -22 11:16:44 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020000002201f6f00061"], 0x2c}}, 0x0) exit_group(0x70a) 11:16:44 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f00000001c0)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x7, 0x7, 0x2, 0x0, 0x0, [{r4, 0x0, 0x5}, {r0, 0x0, 0x4}]}) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r6, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 480.234892] binder: 4065:4075 unknown command 247734417 [ 480.268932] binder: 4065:4069 Release 1 refcount change on invalid ref 0 ret -22 [ 480.358593] binder: 4065:4075 ioctl c0306201 20008fd0 returned -22 11:16:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1}, 0xa919}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 480.443940] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 11:16:45 executing program 4: syz_execute_func(&(0x7f0000000400)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000000000, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 11:16:45 executing program 2: clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000003060501ff0488fffdffff2e0a0000000c000100060d00007d5500010c00020001000000f6f00061"], 0x2c}}, 0x0) exit_group(0x0) 11:16:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(0x0, &(0x7f00000007c0)={0x0, 0x80000000, 0x1000, 0x2, 0x0, 0x48a5}) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x8402, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000780), &(0x7f0000000800)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x3a53, 0x0, 0x0, 0x7, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone(0x9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x20080) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000001c0)) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$sock_inet_SIOCRTMSG(r3, 0x80045505, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) [ 480.826364] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 480.895767] WARNING: CPU: 1 PID: 10068 at net/ipv6/xfrm6_tunnel.c:351 xfrm6_tunnel_net_exit+0x1df/0x370 [ 480.905356] Kernel panic - not syncing: panic_on_warn set ... [ 480.911254] CPU: 1 PID: 10068 Comm: kworker/u4:12 Not tainted 5.0.0-rc7+ #86 [ 480.918446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.927818] Workqueue: netns cleanup_net [ 480.931880] Call Trace: [ 480.934492] dump_stack+0x172/0x1f0 [ 480.938144] ? xfrm6_tunnel_net_exit+0x1c0/0x370 [ 480.942934] panic+0x2cb/0x65c [ 480.946268] ? __warn_printk+0xf3/0xf3 [ 480.950181] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 480.954945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.960488] ? __warn.cold+0x5/0x45 [ 480.964123] ? __warn+0xe8/0x1d0 [ 480.967521] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 480.972282] __warn.cold+0x20/0x45 [ 480.975831] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 480.980599] report_bug+0x263/0x2b0 [ 480.984246] do_error_trap+0x11b/0x200 [ 480.988144] do_invalid_op+0x37/0x50 [ 480.991874] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 480.996657] invalid_op+0x14/0x20 [ 481.000127] RIP: 0010:xfrm6_tunnel_net_exit+0x1df/0x370 [ 481.005506] Code: 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 0f 85 73 01 00 00 4d 8b 34 24 31 ff 4c 89 f6 e8 0b b0 55 fb 4d 85 f6 74 b3 e8 61 ae 55 fb <0f> 0b eb aa 48 81 c3 00 08 00 00 45 31 e4 49 be 00 00 00 00 00 fc [ 481.024413] RSP: 0018:ffff88808f3ffbe0 EFLAGS: 00010293 [ 481.029788] RAX: ffff8880a9bb66c0 RBX: ffff88808a86dd80 RCX: ffffffff861a3315 [ 481.037064] RDX: 0000000000000000 RSI: ffffffff861a331f RDI: 0000000000000007 [ 481.044359] RBP: ffff88808f3ffc08 R08: ffff8880a9bb66c0 R09: ffff8880a9bb6fb0 [ 481.051654] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808a86e578 [ 481.058935] R13: 00000000000000ff R14: ffff88809330e780 R15: dffffc0000000000 [ 481.066230] ? xfrm6_tunnel_net_exit+0x1d5/0x370 [ 481.070992] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 481.075780] ? xfrm6_tunnel_alloc_spi+0x920/0x920 [ 481.080641] ops_exit_list.isra.0+0xb0/0x160 [ 481.085062] cleanup_net+0x3fb/0x960 [ 481.088790] ? netns_install+0x1d0/0x1d0 [ 481.092864] ? __lock_is_held+0xb6/0x140 [ 481.096962] ? check_preemption_disabled+0x48/0x290 [ 481.102001] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 481.107465] process_one_work+0x98e/0x1790 [ 481.111715] ? pwq_dec_nr_in_flight+0x320/0x320 [ 481.116390] ? lock_acquire+0x16f/0x3f0 [ 481.120388] worker_thread+0x98/0xe40 [ 481.124213] kthread+0x357/0x430 [ 481.127590] ? process_one_work+0x1790/0x1790 [ 481.132093] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 481.137653] ret_from_fork+0x3a/0x50 [ 481.143410] Kernel Offset: disabled [ 481.147364] Rebooting in 86400 seconds..