ffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)="269e8f1732d5c952e915bb73b28820a18d2d6c724cf7670df4b30923834aab26489ab8ba0baaf02a87a6c56e90c7bfeae56d38e0acf045db43818c3b034b2e1fac4d814eaf0f72663fd4816f36ae995e1450f6a7280a15ff7610838b3af0afe4d523f2785cc105889082a109f310b9a94355b8fb8cd19aca6e0815a4f201324dc1144a723dcdef4d4ab6987f26b3f987db68dd93ae3bb1d3818e9fd53926191f0783a8ab62d2ce4e27e096f5f3b480ecafb8332e1b328b0403c74c0ecabb659f9caa75f9e74fc563ad5ef3") r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000000)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x17, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x217, 0x0) 03:35:01 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x40106308}], 0x0, 0x0, &(0x7f0000000440)}) [ 347.590884] binder: 15998:15999 Acquire 1 refcount change on invalid ref 0 ret -22 [ 347.610137] binder: 15998:15999 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 347.621836] binder: 15998:15999 unknown command 0 [ 347.627081] binder: 15998:15999 ioctl c0306201 20000480 returned -22 03:35:01 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7630440, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 347.688122] binder: 16003:16005 BC_INCREFS_DONE u0000000000000000 no match [ 347.723796] binder: 16008:16009 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:02 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:02 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fstat(r1, &(0x7f0000000240)) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000050607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r5 = epoll_create(0x3) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000180)={r5, r1, 0x9}) fallocate(r1, 0x10, 0x401, 0x6) 03:35:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00'}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="839a553d3700ba8422555c7bfb0e34dddafc6f7ad3f0794cbc090c488927335ddbee7c7c94ff022d4f0ba91601500065e04e399aa51a505e4e290e778b5ce40fa2a9374e0e123f63beaf78892dc43a852c7317f96bf2143728") 03:35:02 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x363084000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x20000340, 0x0, 0x0) 03:35:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x100) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0xfff}, &(0x7f0000000240)=0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff003, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 03:35:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x40406300}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:02 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x1200000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 348.307493] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 348.315101] binder: 16029:16030 transaction failed 29189/-22, size 0-0 line 2855 [ 348.335277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.348312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 03:35:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000040)=ANY=[@ANYBLOB="1887af7d96ae3480d90900002424e99b00000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:02 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)=':ppp1\x00'}, 0x10) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) fcntl$setstatus(r1, 0x4, 0x463fd) ioctl$int_out(r0, 0x5460, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000040)=0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4000, 0x20a7110000000000, 0x7, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc}]) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 03:35:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x40406301}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:02 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x1163484000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000040)=0x20) r3 = socket$inet6(0xa, 0x1, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000140)) setsockopt$inet6_buf(r3, 0x29, 0x14, &(0x7f0000000180), 0x0) r5 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="9f7592345a623b13a94f7dcdac2e99b0cd69aa54947e01b84d", 0x19, 0x0) keyctl$clear(0x7, r5) 03:35:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030332c6d6f64653d30303030303030303030303030303030303030303030302c6d6f64653d303030303030303030303030303030fe303030303030332c6d6f64653d303030303030303030303030303030372c6d6f64653d30303030303030303030303030303030303030303030302c6d6f64653d30313737373737373737373737373737373737373737322c6d6f64653d30303030303030303030303030303030303030303030372c00113a5db7f7e1f139d4b2a8c4da2893315e386c2f5dfd6b68344461383e75e0aea9430befe4aeabfdfb"]) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000540)) setsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000480)="fc75e80ccec1e96b94ea6130fbbcc1ba00ed1b24e3bcb9964668527390782c54fe63183701ac3d809e2c893f82cfa36f197be808dcb7a63942c38dc9f38b54956b8246a51cbc873627f509918c1c6dd42377223363b890c75120b5e1670900e7d7479e59270641718cac3f5fdc8c4b002a36002c61775996e263d4f59f6f3bb85c1d9e10c7030ce3cf4fd0884fd181328553699ba07947c91b0e2b827b6ba9956654e0b841bad91437087b6c27", 0xad) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x108, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f0000000200)=0x14) sendto$inet6(r0, &(0x7f0000000100)="0404000007000000000048f800a448decf043c07727a640819729b4057b577740ae2236a10aa16bc2a05ecf9", 0x2c, 0x24000000, &(0x7f0000000080)={0xa, 0x4e22, 0x20000000003, @remote}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000f590200026bd7000ff04d53424e62ccbc5281e026ff5dbdf2500000000", @ANYRES32=r2, @ANYBLOB="000e000804000f"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 03:35:02 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x9631040, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x630d}], 0x0, 0x0, &(0x7f0000000440)}) [ 348.407352] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 348.439096] binder: undelivered TRANSACTION_ERROR: 29189 [ 348.466382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 348.506442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.562257] binder: 16058:16060 got reply transaction with no transaction stack [ 348.569941] binder: 16058:16060 transaction failed 29201/-71, size 0-0 line 2762 [ 348.657681] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.740204] binder: 16079:16081 unknown command 0 [ 348.763340] binder: 16079:16081 ioctl c0306201 20000480 returned -22 03:35:03 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xbe08, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:03 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)=':ppp1\x00'}, 0x10) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) fcntl$setstatus(r1, 0x4, 0x463fd) ioctl$int_out(r0, 0x5460, &(0x7f0000000140)) io_setup(0x1, &(0x7f0000000040)=0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4000, 0x20a7110000000000, 0x7, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc}]) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 03:35:03 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x10, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) read(r0, &(0x7f0000001000)=""/4096, 0x1477) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b00)=0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1a31) stat(&(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000c00)=[0xee01]) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{&(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000000080)="b644e78a382932e17796f488b2a2a8490c52042b796d52718383152b89bf1fbca639cf5f39209d25c3ad41a25cce9520ebeb9f70ea520d105a1b9814cde182d5b2352f23af9d0f84ba40567641c9a3b1cceb8518480e10e0862edd3be8200ee7dea1166c40b63465b8eee851674fc1ffe82d9938719cb39bb9bf", 0x7a}, {&(0x7f0000000100)="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", 0xfd}, {&(0x7f0000000200)="9a518c4a6474c09e35ac22a0f7e3c2fc93ec58ae273da2c07c236451fe2b40bf0374730b71febb8913658600ebca58cd9cf840b29ff3c42b2ba17e6ebebf3c471603eccdc5148196d8a80526b52ebc65b35f3a59b8c3f73536d9c554f77c6e560d172c26dab203fe6f", 0x69}, {&(0x7f0000000280)="11ab6b3ec9d7b5e6e868dfe2bba2ff45646c720d7923dd4eef3dad115ce3ead7f79350866fd71f65fdb8f0ddffd4257b45e6328a42dce07cd4f877bf491d0f2ff4ef2fc9ce1a470335671ee8de2f9ddb7026767528b5bc1029c4f132f4bdf708dd014e83727b8fcf2444db388e0cd748030515fd02ee5b1983719168fb639f85b381218c4063497cbe05fffd0425f59492ee272c5dc9557d1d792d3746ec7afd8c9cdb37ffbb3c78ead45f13ac46073e390bb1a37f689f8ede4bed3fd001dea5a7746c0a62b4405f918a47c999f4ebb5de27b278dc84d6e2c90b347b5f90596c5710268b0816eb1a67fd851e4a73", 0xee}, {&(0x7f0000000380)="512b9f6c", 0x4}, {&(0x7f00000003c0)="36d61619bf2a8694cbc3639bc0bb58355d249028be04760945d84a18253e345267dc6913f2f69186fab40611b409d1bb01ce1b50c5eb36df90b0c5c772f3aa858dcf6c322bc5a99275e8e6c1d6149329c29753b3b2f4800b33cfbeeed2bc1a6c9ba6edf0544c2b53c45b4b7d35d9bb3b0c02243226e81fb95b2a087d4d3cc156267106121576cd81dd2e134caf09c2f1feecff33cf1ee70e0ceeea73e2a0ad6645d8d6d91fc54983af175f5cb895c2c3221bff84c038422026e4ba5b4a2f048ca947088801c6ebfa12852225", 0xcc}, {&(0x7f00000004c0)="85e61c14", 0x4}], 0x8, 0x0, 0x0, 0x1}, {&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000600)="271fd3f1d6e0b4fb31afdb53ecc07ac1dc95604f8f289cbbcb6c1459a9c74ebf8bc5a0c00ad997933d247b84bf0b82660f33c6ca3419ada48d450462d39ea6e71065f1d3452b0894b47064504536fc1d14a1d696cf8364f4f9ca11ec0e4d157926ad4d63498404a30cf11aa00ee43ef4d9023b6ddbc695c31a64e291b79f0e87c687a202d47b88a893549190c03768c4a01327ab78ba14811510bf174dabb177556da2bf0f174f05e63af113680fb85628908697ea76ac4950de4ddbfd3bb7", 0xbf}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f00000006c0)="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", 0xfc}, {&(0x7f00000007c0)="b8ebdd0bb70e2d3f0862d34ddb0f7d7990185f96fe745d5623c1122489e212033512319f197020b5524b1ec2f422b5cee2653ddfb0e9cd2127f1a525f3d27c2a7f8f6eb94cffef2381", 0x49}, {&(0x7f0000000840)="6ab452316327b7f63c2b1f8a48d477a5c3fa4803efecc3617a0019abb5908f", 0x1f}, {&(0x7f0000000880)="bb216bf252aec018c85e1732844735e7ca936247893da4535244", 0x1a}], 0x6, 0x0, 0x0, 0x10}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)}, {&(0x7f0000000a00)="3066ad3d0c53b3c6612b81a06519434ffbce22462c2fecc518b244eeae6d01d7d7105c5496e1b8eea1c6867257d1df126b1c245e57f1fd75f0e1b5aecea3abad19f53b8dca73693291ebcdf3af747d374194905f0d7bfeff44f3592cd0cf60b87150c02cfe5b918f2494ec94117eac68c4237188de973b51cc29e9f1ef61ee13c8edac51503fdb1f23fcdd7bec5ae9fc45193120d6f940c68a574e73b19f2e208ea77c1411", 0xa5}], 0x2, &(0x7f0000000c40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x60, 0x20000000}], 0x3, 0x800) 03:35:03 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x40086312}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:03 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x100000000000000, 0x0, 0x0) 03:35:03 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 349.237346] binder: 16091:16092 unknown command 1074291474 [ 349.269247] binder: 16091:16092 ioctl c0306201 20000480 returned -22 03:35:03 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4008630a, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:03 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x40046302}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:03 executing program 6: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0xfffffeb1) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x98}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2eef0daa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x996}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xdc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x100}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) [ 349.421661] binder: BC_ACQUIRE_RESULT not supported 03:35:03 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40086310, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 349.446191] binder: 16115:16116 ioctl c0306201 20000480 returned -22 03:35:03 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x40086310}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x100) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) ioctl(r0, 0x2, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x4b, &(0x7f0000c86000), &(0x7f0000000040)=0x74) 03:35:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x3, 0x1000, 0x9, 0x0, 0x5, 0x10, 0x2, 0x6, 0x10000, 0xffffffff, 0x7fff, 0x0, 0x3, 0xffffffff, 0x2, 0x94, 0x1, 0x1, 0x7, 0xa9, 0x45, 0xf1, 0x9, 0x0, 0x6, 0x80000000, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x100, 0x1, 0x8, 0x0, 0xfff, 0x2, @perf_config_ext={0x1}, 0x40, 0x2, 0x2b23ca62, 0x4, 0x7ff, 0x400, 0x1f}, r3, 0x10, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = geteuid() getgroups(0x6, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee01]) r8 = socket(0x7, 0x80800, 0x8) sendmsg$nl_netfilter(r8, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, 0xb, 0x0, 0xb10, 0x70bd2b, 0x25dfdbfb, {0x3, 0x0, 0x5}, [@generic="ef1366065a18a5f647017e65b3423f2b420b8248720283dbbf25ca6fa6b81ed1f43e4c0b0ffa2d799d157cc1adcd58b0397951dd4d357733e2ed0fd282b2bd949f5c12e076983607b1569f8cbf0ae4f2cf13eb7dfb7eafd3d6a557516523612ce8070164d9b74e959b0a2f13a3d7e8621b1a39a7e0a82e9d382316851de9dc1c1097370576acf143d0690e7d8714297e8bc53107ef04853be60323cbf4035deca4df720dbfe53cfe6245baf61975f5768afaeab37c8c39107650139a84c6979552d9cdb36e8f3a2b5eabc68478df89a393164b000ab91ae8fe3597fbc008ba20a6b1049637c38649ffea62080cbae512"]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4881) r9 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x20000) mq_getsetattr(r9, &(0x7f00000003c0)={0x1, 0x5, 0x65482824, 0x7, 0x4, 0x40, 0x2, 0x100}, &(0x7f0000000440)) r10 = getuid() write$P9_RSTATu(r5, &(0x7f00000004c0)={0x6e, 0x7d, 0x1, {{0x0, 0x49, 0x3, 0x645, {0x40, 0x2, 0x1}, 0x40010000, 0x7, 0x2, 0x80, 0x1e77f6c633fdf82f, "70707031e0", 0x11, 'keyringuservmnet0'}, 0xfe2a, 'md5sumppp0vmnet1', r6, r7, r10}}, 0x6e) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000300)=""/87, &(0x7f0000000380)=0x57) 03:35:03 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000680)={0x1, 0x200, 0x80000000, 0x80, 0x4b4, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in=@loopback}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r4 = add_key(&(0x7f0000000840)='rxrpc\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x1000000004e23, 0x4eed, @loopback}, 0x1c) keyctl$revoke(0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0xff8, "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"}, &(0x7f0000000140)=0x1000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000640)={r5, 0x7ff}, &(0x7f00000000c0)=0x8) listen(r3, 0xfffffffffffffe14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, 0x14) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0xffffffff00000007, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6000000, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x240) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f00000004c0)=r7, 0x12) sendto$inet6(r1, &(0x7f0000000500)="ea43c9317a5301a9c3dee3ce1c2366cf7539971cf847403021000511c4cac2e9c47c136988bf02236b7a44a10958543a16092836f0c79cc4072f34cefb265910a85270d38f2610a1bb10652f112cd22d1193a03c6387ed15e62619c96f881228ed090ff5c5daa6e583fcf20dbac0e19272d72fb8eff0df6f3328c1a9b9ad006795a5a5a51575f1bce1fc9e80c5a82c72f8f1e9a205fc6d5cae2b4a072fa34334fa79dd2a3068af9899374c0fb0839dbf0814f5f21a58835d3cb56efc525f8d2dfbe244becc4cd439b532a4edec7bc172", 0xd0, 0x4000000, &(0x7f0000000600)={0xa, 0x4e23, 0x6, @mcast2, 0x5}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={@mcast2, 0x56, r8}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000fe0900000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000006257dc03cbb2dc2f1200000000f84978cc7459b3a0f3b59e9f5c7f9d00000000000000a9547f887e000000000000000000000000000000000000000000000000001b000000001d000000000000000000000000000000000000000000000000000000000000000000fffa23c8e343b20e000099e5580b73e8b7b23bbd"], 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x2d, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x1d, @loopback, 0x800, 0x1, 'sh\x00', 0x0, 0x297403db, 0x57}, {@broadcast, 0x4e23, 0x2, 0xffffffff, 0x80000001, 0x1f8000000000}}, 0x44) [ 349.593623] binder: 16132:16133 BC_DEAD_BINDER_DONE 0000000000000000 not found 03:35:03 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xd630000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:03 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x400c630f}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) r1 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffc) mount(&(0x7f0000000140), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000200)="126c2bd02344c1bb80027adda59f1129aef59a64d3f508d44f4f82d16e2a5a749bbb322810e19ce1482f47995b9effb2e1774f246be974a3ccb88e3eee34461fa2dded211541a2c07cb78058c5b7b454f033ab1230281c64b1d946148278cc8257a96c3942d64709d17598a1a6c16b80907271898aa88c368edc639fa7b804ad6b4b6481b5637b79ed27e3ec93f88f4c16fae21a5fb98f535e2111bfd4215c2cf063b2363894c41c78d3d65828b12d3bd1", 0xb1}, {&(0x7f0000000040)="0ecca9d20cde431300bc780b1fabe870c549a8cfbaee60bdb75167", 0x1b}, {&(0x7f00000002c0)="35d3cb18dec9d475a229027f75637b8fc56740c7209e7af52398a7f76edf56584ded42f2706a4b012f01f97fd6cbe69b7d084b9ca63b48eb18de08bc75f76e9aa353c52cd64ed7edd69d54c7d375e13ebdeb8488d670de4f375a190d83817bdc2dbfd44f40786e943071d05bca61293b0d318840de13120771eb5b8c450d22aec1", 0x81}, {&(0x7f0000000380)="caf192fee905ab2f5355ce37fdc7215bab98cf5b6eac6962300e3d31bea441bd436f75fb1e78fe6ac7ffd0c416c7b78923b885ddaac6dfdfc7a353f3bfdbb5a2eb59f88dd93c386e5b7eff6f5c04b667f6b10d1b334b1c8b193d1d293765dffd6eecb0a9310ec5580f2aa639bd4f7d470a1eb3bb87861f21efaf4696833b991c7c2dfc05dd446b634e62ecab513c6f28f574cda9a9c60f2f4b3b8c9991345df5e538e79f28c0c177050b85df3217bd74a75be2c8eb9b673338545de93599f8e6f571ee092d8138a5790dc1ad7a5a009344893600033aeed586a9a403163198938a9f3f7892", 0xe5}, {&(0x7f0000000480)="b79e4ecaf296f0bdcb9f395712c73fbe89c0a5efc21d0fcffd7596858de7bb363e577a4d7ee40132a04bf40cdb8ea5bd58014b689cd0bc2930fbe7522cddd7c4d7cbc97059ce86de9f8b9fbc947a16fe1ca8761fe982b12b2def71141c98fb25fe69814114d41d5763671179e69ff3edc34bb2aa818c2cd3cba78a5330b6c4e90e71e78a627a3c26064062484bd8cf31d99f9d18c347f8097d98fb175b2f3f24cf5bfaab18389e14956a55e0f2703dfbb0655ccec6b1f6ff7b5496df687de86c5b3b9e3fd0cac821125d0cbdf75172eeb2d79491fa41e36647b33a26dcec57e03f5700455afbe3a1b6b05f4ec6e5d3a011f78ff68045", 0xf6}, {&(0x7f0000000580)="19ffd82a05ba64380138696a56f9b83105956311390d01d50df69bb83488612716a069590c461689705b22f70eb9b50b4661ae6395a3302dacf21da04311d7807839caaa2f5678333a3f0854215992990f4a1fac46ea5b4553a7f62f2e", 0x5d}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000600)="3091d9d4ca505e631070fa83e06970eea1d56e6f86958fe6f20db7551c4c7835a4e409d6a9b96e2c17f5b949c38d913690fdc3c6cc3dc2bf4133e4c1b753514ef70ffa5e223cab10cb800b0b1ca18cbf2ff42fb416016117d13420f3d6f6db2fd4caa5b4a95891c00e9d40964a4bce21da18b5db9212602d42bbe2f63f09f99f172a39bb934a3c7489ab834ccf797ff5065205dfdbbc71705112b8c751e80bc5c013bdd81fb19830d126b1e5e0a948", 0xaf}], 0x8) sendfile(r0, r2, &(0x7f0000000000), 0x800000080000002) 03:35:03 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 349.936379] binder: undelivered death notification, 0000000000000000 03:35:04 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x17, 0x0, 0x8001, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0xca5c57f5d8cd39a1, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:04 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, &(0x7f0000000300)=[@cr4={0x1, 0x40220}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:35:04 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4630440, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:04 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x4008634d}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer={0x400c630f}], 0x0, 0x0, &(0x7f0000000440)}) 03:35:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0xffffffff00000000, 0x0, 0x0) 03:35:04 executing program 6: syz_mount_image$xfs(&(0x7f00000004c0)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x161, &(0x7f0000000080), 0x2000000, &(0x7f0000000040)=ANY=[@ANYBLOB='noikeep']) [ 350.221055] binder: BINDER_SET_CONTEXT_MGR already set [ 350.228527] binder: 16183:16184 unknown command 1074291533 [ 350.234407] binder: 16185:16186 ioctl 40046207 0 returned -16 [ 350.235601] binder_thread_write: 9 callbacks suppressed [ 350.235614] binder: 16187:16189 Acquire 1 refcount change on invalid ref 0 ret -22 [ 350.246215] binder: 16185:16186 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r2], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 350.279798] binder_thread_write: 11 callbacks suppressed [ 350.279823] binder: 16185:16186 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 350.280879] binder: 16183:16184 ioctl c0306201 20000480 returned -22 [ 350.323063] binder: 16187:16203 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000003c0)="000100000008000066000000c9030000ec0000e9010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000300)={[{@minixdf='minixdf'}]}) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x20000, 0x0) 03:35:04 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x3c06, 0x0, &(0x7f0000000440)}) 03:35:04 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xbf08, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 350.368193] XFS (loop6): Invalid superblock magic number [ 350.369824] binder: 16185:16209 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 350.381196] binder: 16185:16209 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 03:35:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") sendto$inet6(r0, &(0x7f0000000180)="d2fb1acad618afc49eb46f475f9d1be61814236a8a708ff9e167bd54df538abd86be241eb2f855a6aead768032cf57b536621418108c33343d4edb4901f91cde12303af0b704c481c4e20f688692d68e0b2ed070f58f09b380d0069b11fd458f06607ad2ed1af63d85755ea48623ed69f811d589ece6c43700fc5934e3950cb6ad0a86ae969947042e3ef6c399584b8a133cedc1886acc2083118a1c8903dc879d23c5d0adaeab917fd1bba023593abd8e9c49ae257110159672c2752d06d5d48dc5814dcd54d217551e985eb4e7cc251783dd95ea83413659c1f00e4a4645e98838f39c7a9e445999b71ab224d3efa3a8f63619c1e19efc", 0xf8, 0x800, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) unshare(0x400) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x98000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8c, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x0, 0x3}, @dead_binder_done={0x40086310, 0x1}, @acquire_done={0x40106309, r2, 0x4}, @register_looper, @acquire_done={0x40106309, r3}, @reply={0x40406301, {0x1, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000300)=[@ptr={0x70742a85, 0x1, &(0x7f00000002c0), 0x1, 0x2, 0x3d}, @fd={0x66642a85, 0x0, r0, 0x0, 0x4}], &(0x7f0000000340)=[0x0, 0x150c5bfbf66782f6]}}], 0x84, 0x0, &(0x7f0000000440)="96662d0cf04dbb5f08fabd5c151d90c3b4184c541611f98564936d627423a0be5772c5a12161fe36807242be931791c7c9a1b6012b7fa2973fe7c18bbf2d1163dfe044435046bc1beaece338722cf2d201a22c1c3cf777bf71243c53d0c27256fcde559171d300b357bfe1ecd31cfb7315c4a8b845c6cea6a24457f1fda6433147fad64d"}) 03:35:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev}, 0xfffffffffffffe1a) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001280)=@nat={'nat\x00', 0x19, 0x4, 0x1048, [0x200042c0, 0x0, 0x0, 0x200042f0, 0x20004320], 0x0, &(0x7f0000000140), &(0x7f00000042c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x20, 0x8b67da8f738c9490, 'vcan0\x00', 'bond_slave_1\x00', 'eql\x00', 'ip6tnl0\x00', @dev={[], 0x13}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x968, 0x9a0, 0x9d8, [@among={'among\x00', 0x898, {{0x19, 0x1, 0x2, {[0xfff, 0xce, 0xfff, 0xcfb, 0x7, 0x8001, 0x9, 0x10000, 0x3f, 0x81, 0xffffffffffffab4a, 0xffffffffffff6867, 0x7f, 0x4, 0x5, 0x3, 0xd2, 0x8, 0x7, 0xf353, 0x6abe, 0x3, 0x8, 0x6, 0x3, 0x1, 0xa328, 0xfffffffffffffffc, 0x7, 0x0, 0x95f, 0x2, 0x3, 0x400, 0x3, 0x1, 0x8, 0x9c8, 0xffffffffffffff81, 0x3, 0xa7, 0x100000001, 0x80000001, 0x5, 0xffffffffffffff63, 0x3, 0x7, 0x2, 0x9, 0x355, 0x900, 0x73, 0xfffffffffffffffe, 0x47b, 0x7fff, 0x81, 0x4006, 0x1, 0x9, 0x9, 0xffffffffffff7fff, 0x2, 0x0, 0x1f, 0x122, 0x8, 0x9, 0x4, 0x7, 0xc, 0xe5, 0x10000, 0x25, 0x81, 0x8, 0x24, 0x7ea0, 0x2, 0x9, 0x46f800000, 0x8, 0x11, 0x4, 0x4, 0x6671, 0x3d9b, 0x4, 0xfffffffffffffff9, 0x9, 0x0, 0x4, 0x7, 0x63f, 0x6, 0x80000001, 0x1, 0x1, 0x0, 0x9, 0xfffffffffffffffd, 0xffffffff, 0x7, 0x4, 0x902f, 0x4, 0x8, 0x5, 0x1ff, 0xf23, 0x3, 0x300000000, 0x6, 0x964f, 0x2, 0xa3, 0x549, 0x80, 0xfffffffffffffff9, 0x0, 0x4, 0x6, 0x6, 0x8, 0x4, 0x8, 0x1, 0x5, 0x9, 0x3, 0x571, 0x100, 0xff, 0x3, 0xfffffffffffffc74, 0x2, 0x2, 0x0, 0x80000000, 0x9, 0xffffffffffffffff, 0x80, 0x40, 0xa221, 0xffffffffffffffff, 0x9, 0x8000, 0x10001, 0x3, 0x3f, 0x0, 0x8, 0x0, 0x1, 0x5, 0x40, 0x0, 0x10000000000, 0x3ff, 0x200, 0x10001, 0x7, 0x5, 0x1, 0x6, 0x2, 0x7, 0x1000, 0x1, 0x5, 0x7fff, 0x80, 0x0, 0xfffffffffffffffa, 0x10000, 0x5, 0x0, 0x20, 0x7fffffff, 0x10000, 0x1, 0x1ff, 0x1457, 0xfffffffffffffff7, 0x401, 0x2, 0xe195, 0x6, 0x8001, 0x5, 0x1d6c00, 0x4, 0x0, 0x20, 0x3, 0x3, 0x6531, 0x5, 0x2, 0x25, 0x0, 0x0, 0x10000, 0x146, 0x1, 0x80000001, 0xfff, 0xa427, 0x6, 0x2, 0x401, 0x59, 0x8, 0x3, 0x0, 0x7, 0xfff, 0x9, 0x59, 0x0, 0x0, 0x20, 0x5, 0x7f, 0x2, 0x7fffffff, 0xffff, 0x7, 0x7, 0x3, 0x1000, 0x9, 0x1, 0x4, 0x0, 0x7, 0x0, 0x6, 0x100000001, 0xffffffffffff1da8, 0x2, 0x8, 0x20, 0x7, 0x4, 0x100000000, 0xb5b, 0x7, 0x2, 0x4, 0x6, 0x3, 0x9, 0x80000001, 0x9, 0x5, 0x100], 0x6, [{[0x1, 0x6], @dev={0xac, 0x14, 0x14, 0xf}}, {[0x3, 0xfffffffffffff800], @local}, {[0x40000000000000, 0x7], @multicast1}, {[0x2f, 0x5], @loopback}, {[0x3, 0xfffffffffffffff7], @multicast1}, {[0x3, 0x4d424b87]}]}, {[0x9, 0x4, 0x8, 0x8, 0x80000000, 0x800, 0x7, 0x10001, 0x8, 0x2, 0xffffffff, 0x1ff, 0x9, 0x1ff, 0x7, 0x7, 0x4, 0x8, 0x1, 0x1, 0x3b1, 0x1, 0x80000000, 0xffffffffffff3bee, 0x8000, 0x8, 0xffff, 0x6, 0x1, 0xfffffffffffffff9, 0x5, 0x1, 0x6, 0x1, 0xf4, 0x9, 0x5c6, 0x5, 0x8, 0x4, 0x53b, 0x4, 0x0, 0x5, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x1ffc000000000, 0x3, 0x401, 0x8000, 0x10000000000000, 0xfffffffffffffffb, 0x1, 0x6, 0x7, 0x4, 0x3, 0x40, 0x0, 0x20, 0xffffffff, 0x9, 0x8, 0x7, 0x6, 0x2, 0xc1e, 0xbc1, 0x6, 0xff, 0x3, 0xfffffffffffffffa, 0x20, 0x17, 0x6, 0x7, 0x40, 0x3, 0xfffffffffffffffc, 0x5, 0x10000, 0x5, 0x0, 0x5, 0x7f, 0x4ed, 0x1, 0x65f81093, 0x1, 0x5c, 0x20, 0x7, 0x8, 0x414d, 0xd8, 0x8, 0x3f20db1b, 0x6c, 0x10000, 0x400, 0x2, 0x89, 0x0, 0xf1ba, 0x0, 0x3, 0x1f, 0xbf, 0x7, 0x4000000000, 0x7, 0x3, 0x2, 0x3f, 0x0, 0x3, 0x0, 0x8, 0x8, 0x2, 0x6, 0xffffffff, 0x7, 0xce7, 0x7, 0x9, 0xd3e7, 0x8, 0x1, 0x2, 0xda44, 0x2f6, 0x1, 0x400, 0x9, 0x8, 0x81, 0x0, 0x8, 0x401, 0x8, 0x0, 0x2, 0x5, 0x81, 0x6e, 0x80000000, 0x5, 0x3, 0x4, 0x1f7b, 0x2800, 0x4, 0x4, 0x3e8, 0x1, 0x0, 0x0, 0x401, 0x80, 0x1, 0xa00000000000, 0xd6, 0x4, 0x3, 0x1, 0xb, 0xfffffffffffffffe, 0x5, 0x400, 0x7, 0x525, 0x5, 0x9, 0xfaa, 0xea8a, 0x60, 0x8, 0x4, 0x2, 0x2, 0xb1, 0x9, 0x3b, 0xa000000000, 0x3, 0xc07, 0x1, 0xffffffffffffffc1, 0x80000001, 0x2, 0x3, 0x9, 0x1e98, 0x10001, 0x1000000000000000, 0x9, 0x10001, 0x7ff, 0x5204, 0x0, 0x5, 0xfff, 0xbb57, 0x8, 0x0, 0x7, 0x2, 0xb0a9, 0x3, 0xfffffffffffffffe, 0x2, 0x7, 0x7, 0x0, 0x3, 0x2, 0x1, 0x2, 0xffff, 0x81, 0x8, 0x101, 0x96, 0x4d15, 0x9, 0x256, 0xf9fc, 0x800, 0x7, 0x80000000, 0x1, 0x0, 0x1f, 0x7, 0x4, 0x5, 0x8ee7, 0x9, 0x29, 0x3f, 0x0, 0x1f, 0x0, 0xb1, 0x2000, 0x750f, 0x8, 0x7, 0x18, 0x83, 0x8, 0x3c, 0x9], 0x4, [{[0x400, 0x8], @multicast2}, {[0x1d28, 0x10001], @broadcast}, {[0x2, 0x7ff]}, {[0xc6, 0x10001], @multicast2}]}}}}, @cluster={'cluster\x00', 0x10, {{0x3, 0x4, 0x100000001}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}, {{{0x9, 0x1, 0x8884, 'team_slave_0\x00', 'bond_slave_1\x00', 'bond_slave_0\x00', 'sit0\x00', @empty, [0xff, 0x0, 0xfe, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x120}, [@common=@nflog={'nflog\x00', 0x50, {{0x9, 0xff, 0x0, 0x0, 0x0, "1b22a9050a604b9ca5fde974d7afe7c7a048e56915abc8b1446b4ca4586686d005d839e81890476b311a2a2945e60eba4fbff48f989604cb71e593990c89d14a"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x7, 0x1, 0x200, 'team_slave_0\x00', 'syzkaller0\x00', 'bond_slave_0\x00', 'sit0\x00', @dev={[], 0xb}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xeb8e266401911251, 0x0, 0xff, 0xff, 0xff], 0xb0, 0x230, 0x268, [@devgroup={'devgroup\x00', 0x18, {{0x0, 0x8, 0x6a43, 0x5, 0x9}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x9, 0x5}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfbc5, 'system_u:object_r:restorecond_var_run_t:s0\x00'}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x1c}, 0xfffffffffffffffe}}}}, {{{0xb, 0x41, 0x6003, 'team_slave_1\x00', 'veth0\x00', 'ip6_vti0\x00', 'bridge0\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="54f30fdd9f19", [0xff, 0xff, 0x0, 0x0, 0xfd, 0xff], 0x70, 0xf8, 0x228}, [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x81, 0x1ff}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1d8, 'system_u:object_r:var_log_t:s0\x00'}}}}]}]}, 0x10c0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x3cb, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/240) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000002c0)="3fd0462055886885d3ed16a358a800fbd5e5d45459ba06c0ec818b12baf7fe2b48ae859946fc740188130000117191e8", 0x30) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 350.485698] binder: 16219:16221 BC_FREE_BUFFER u0000000000000000 no match [ 350.497433] binder: 16222:16223 Acquire 1 refcount change on invalid ref 0 ret -22 [ 350.506339] binder: 16222:16223 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:04 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40486311, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:04 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x11a) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x40000000000032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x4, @mcast1, 0x4}, {0xa, 0x4e20, 0x9, @ipv4={[], [], @remote}, 0x9}, 0xffffffffffffff63, [0x0, 0x8, 0x3, 0x8001, 0x6, 0xffffffff, 0x7, 0x7]}, 0x5c) [ 350.617200] kernel msg: ebtables bug: please report to author: bad policy [ 350.626590] binder: 16232:16233 Acquire 1 refcount change on invalid ref 0 ret -22 [ 350.636045] binder: 16232:16233 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:05 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:05 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x81060000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:05 executing program 6: r0 = socket(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000000)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) dup2(r1, r0) 03:35:05 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000040)="7d5a215e0943e34c547c7d0f5700b0c4d3db38b19f478d499eb70cdce68599e3f7f29f0254f48daee57ec164fde4572100a5d9f0ed5fb75454045f446a08e84ac7ed12c483fefe6148b947f5bdec8e2cb288fde55f8249a930a49560d24b09005605c9aa36b4fc0ca75767cf9be5bad9f3f89a3388be9109ef9e4c22913a3457f234911ea58fab20ee91fe2472d77f37f25c1afa802b89853bcb5e89fdaba511ae68a87d20362932c821fe45b3dc34fdadcd649c6c70a8cf656df666b58a05c9e433bc796c51eceb770c94595798bdc58e9fd25aded43f934b0e2f5f5a42e82e4aad9621bb40df058ed4ec3f38fc19001157b296a7774f5c986373e7986c38a4199144bf47baa9c3958a2038a0b17b3bb4265f2bbf55df89493df054be3ec8500cb8454e5d67f8d1b5ea5c65436d559ebb31dab7939b5fbec910a8074b0b9ea6e0f5347187f22b283ae79e6bcd3b53dfe6b1cc8799dabcee969d1dbeab0c8a4136485be5a6f1d430e55cb76ed84cea6390a91b3628fb26b3152c721bb315db15dc7286dbd0d7770b19b7a64aa9c2a70379c3d371639d73d75ec56fdb3cdec6d0370aba9087b108e2d638f97f0f2bfa05afaca032eccbd398259685bf12d89b9e5b65b6734bc1091f869ebc900129726e0a38ac5f3c39992895ba771d21836a4221fc15b4a5cde4be457f18cc27ccd741273e95f29db03d4f5a8b6130e7c966a325fcc3a244ad2a7eb06e90ca923a4d2a98b23e31ca382e0b655fa1dca0be22946d4cce8614421ee91bd23ddaa7fa1b27481cac6f91234e2df8c4c5f0b9e8614d701cee3cebcd228ab43be4c1d34a2ee2445d292e1b0b683907ae4085d8edcdd0390710d6ca7d26116a13ac74bf5cd15d1d6ff9fa2c333b72e8f2399ef3722fe2552fac702bb5a90c31d7916fff0b36dbbbb562743b872bcb1078fc1152920c6ef18b87567062febc90a5ba2dc7cb0a785934ef1a13d15a38876c98cccb192b500a7956d6e6e9d87bef8c6620a4cdb28e96f5993e31dccaf8bed3c14dcb358164a39b5652efe75a87ba94dfeaf4a0bb5d9e3bf796df2f531f8aa4091578ccdd86a9cfbcb628c7e3067159d0150d1cc7137189993013ed7c90eba6d546559703315e552baa83b723a517f9b8f8745d83b0343fa7ac5a53d569f74a32971c902965d5de3e67b07029dc01e504feecd3e872a423b395b43a29bbee28227d2d0cee4873881c71e9c5cffdc428e7e136542882f79933cf2caa06704e5b676bb287adde1662be56622504f15d44577c0b4911eb1330e73f0b8a73731cdadedd7b9eb216d1ef26e96666af66b2afe3ca4ca671f320be1321302d50945aad636639520c41c1b41a960ce70140953fda7118b67cbbf925b07ed10d9ceea862a8193580e38e001dd16916a9e8e3b0641d6b107239fa28760dbaef63beb84c2a6f1bc8ba71f26759cc7f47e71129578324194072d18d334a01a982fc5f089cf619e3eea8bb237827fce4f11c0d032fa837d66fc7050d6a0ab468e41cdfb9608f17da7cdfa0a4ac4af44c7a3e121be90f165964f4d250a36bd1dc18eec083686315ecc753760e6f68c6f842dfb9da297ff3b5b77a3687fab1bae7a918d0345c6504879f58e996cfc51f47124a9321428c350f66cdaff5fbc2d24f79b053fdb5223411646c968108016dd20d2e1528af019bb227aa81f674fb1e42f5cea0b714f335bcb71a77abfb3095dd9f573ebba7072223c20aaf2ab1baae46ca485ae932cedecee34898d1eba595db347b1acec53ad2a8256b5b9e4363910cf14275f95cac7570fe1de12b86afcd7d1dee1f4f5d075737e6d333ca275773df51a2209995f04fef326cc2db068921e7925a784f940217beb1a037521811662ec1bc15cbd7f1f6020cf02ca8a9c15da44f3fa4994d3f790b7a373c3edfa4e0d37bcd5d9cc0f2248e25417b7c1f6021f9a3fbf432dc397822088f66e7980898dae6bf6fa580fec5484cbbac95dc265c3d9ecdbde82e155e79e522091dd676727a9ae8b48a6c7423519f8f3384d4392a83bfa28d55e3b92020e44ddf3aa5bb96210d36e90350d17fc9be16f2f57f916c0708c4cb64dffcd56c10e09d6e442effc187a6c78d160f72d5aa6fe9c68d6f10116ccf39b72d8a4ae917f433ab01d2e5a166a8ee36a8a4174e46d8822d8d6a4cf773a1a827a94076c216701001e999d1feaa6d827afdc16e9089f315f47e41ed80c752e2b5d8706168a6ae27bc01b708f2f52e4821b23c1c4d3e942e386fea7b7dd8aaa0c530f45c067545eb541fb67b4d070ef7f1c3bc5a42c6eb29a497ab2427bb8df7b520e50b6401f7ceaec62009a3f603039128f51c66cbc4b2de0f95ed8af7f3c39f4db7d5350f52c916a0918e415a7e861d7746f0da5885c7b567cac3edb8ad039d9a83ce874672dfd7efa51542718025f5b8f9a5e8735a5c4ea36cb4d900c610138344863743f59deda73a78151fd9f928cae38474c4f9766c346375110c1ac80a194b1ed8a35965e48860be89c1bfcdeed9619caf56ad763bac6ea5f2d07cd09e3844563ff9c8cef728abad41c61358bd1bdefc2edd8d1b0c327e767155e9292a811fe4309b391dc6af2d88b7c8223c1584b73e44b03e80136197933c6e0ffd0e5b85e442b89932729b00f66cc04da3fd72a6645a2456717104ec34993b275d55f91bf34115fab650fb0b8b75cadc278da570d53dd0c3d3d538e7089bfd6f53989440b3cd070216cbf076c4ae460cbe9a9043bae1263bfa73d7fd35de80ff17d45cf0526a1195c4a65a479e3fba164ac48fbf12f3c9c1eefe37119fb93e66b2022e301cae77da42f5563b469a99706c9111488cd3f3f08a7a14037716e3ddc1283e285c6a97cd164ce3a7dd10f9c0a5357f3d9dbd68d6de391eb2e37e2c4f14b0a8fa8280fd35e81bf74390b329ba80216fb70d1555ecbd4e8894b3b606927837b9f04a0d0f7afc5f3a3240fd171d763f39f3f58fa085ffaa36bf3ef48701d969a0cfa05539e4ea82e54739fae45d45a5b272d42b1a3bc7c0dde8f7690d68754d3de8687bca34585a0ad5eadf06bea15b1767ab7c342bef3492e88c53c8ac9200fd07d87becf87fd58d40dafdca469005d5b08df162353b85b56cf39c59e7d1ee8fec4a3027118f192a534a3ced78f0db90b73218563b395c527f6f5acdb2cb6aa99a2313eb9870b51f40b495bc42f7dbf74b97e77229b9518a43c53d8d5d0fb949e67e9b25bc062b0ba245d2946afa386e2e03b5f05e837e17a79496bdfd5e3fb84dc5e32f47adcede34f555fe5244cca94ee2f6db5a848b87ac1d917a3acd0365f6ef510bf3d9648800aad38f00bb421b3e650f0685e730c3b0434d18e027908b57cc98e90569870af54900b454f0b3cb3c7ef702af2097f18b390a76b5fb7ee909b1cdf3e933ef6c8b2abe7d6626902b39174608e5418bd9814640c830e8227bfc9847b652f29e621ba0547504c216b73c4c89b96d0be16c207d480cc755eb8bbaf3468b95a8d685acd8b3e9fde44394f4476e87988293065eec86634bcde9f684f848130c8c3467ddf43936f43f71db7ed8f4d7be6ea89d27dcb2040fda8b1bab199eea88f4aac74ff20c494cf89ffc04c8a4d71f30de284081c5d1ac3e5728c199154bb405dec6b5e64fac07c2edfeca418fa51e46e4df7ded33bbb15473fdc5fc59d11e4fdac6ce46b702e6cbdf4cf2c9e241966eed6800178db05028f96b78a8fcdd1dd2cbd8a0c13d0ebd15a6ce2815346ec73f873aee737550c80499ad4ebd7c2debcb17da823e62c4f6d76b36f71e07b9b137bb841f413050f59de081754626c104457bbd197e5e5d3e6f2215708b39ccb5fd285da11027564e6e62e55892856da4eff128a61a62a6526d075e5fe50d82535586be7d16e61c5f4a222cfd6f12a2dff38d69f03df34404a6e551a2012d7302411f1df330bce6c9f43d78b4fac5ed5693fbe97724a6f89515af3ca89d7bd4250ea916bbeb4bf41b3a878c4634efb667395a31737c6e3ec188ce0e5ad9f0508410585d350fb30178726c8822de2c2715d465259313a975b28c4bbe95ad6f838a6fda1d8c0bd414119f15c5ca8eef9f47c17990aed2acf7ab8897286f2d985b619be9726c377f3b6cfccdf3930c457c1c961ebc304372c79495aee7904599d6b17653c3f813b89d92fa3d61254829fb9216c0bc2ef3d0300b38b91ee6844daca935082c0167963e84cffa7ae209753f363d081da7a2c47c4701399f644f94358d3be17c62b09118a1d057110f2cd9f7b542c211e93b934d42ef755b444478f7e46acc0eb03006232c2621e1e9eab77f65a0a43abe48a5c1a9e0ac7ac43db432f938001c66c0306e4e80a0692fee28107dfc9456ef6ed548d85fcf7cd3b4bb8839fa3fb91df9dfb90cab7f5207a2edfdddb97835526f46a841ea4eeb6117b5eb96bd718c024618b8503ea7f7d73397f8783437290f9855200db19c1a8e6f650fcf25e9b91274a4593502b158c284784c603f619f59bbe487fe5afb983522b164c200759ba964ff231c089273e4ea16b7258b3c210aaf159e6971472f2b0889c069807ec0d4bca3215905a431c6e3616a7f740da9ee3e7554532b9d238f17773c7ebe77f6911df28c80e0af885ce17d8000a51663bbc57588ef0c064e3017e68b2e71c7e153198c89ea2271eaa26b057c3c6028e58d0f8e44924f3c926d22b76c7c8dfe454ae69ef42f0bc5040c4aab5822eb60a637c96683dc55df004f3d707c6603bb116cd58b3592fa8bcdebe5579b7bc66430f7113de460f1fd21533416ef3efcd76c660f56109d7e6202e526050c7e91a6e9b1a93fadceff7b4f945308bd06214af3155a8c715a953ee24e7e25cc482a575d3680b266e104110c32b3d5fd5db89d97af0dbc5cf96ae31e77614ac638282609af52d9b2af68c62721546da027ffa9c82ddec4273d7e3712bd1aa8d181e2112c9380b44fa9f02d145e5e3ec20668e77ae06d7ae250211f312fd59393d39c7aa73a04e587212ec83fcdf5b72ef654690e76736207822d6d2c975a1279a1ef2df6d5234a97c2a440576ff017aeb2458c294d244d12138dc91f9be261eda984aba5e70e62e5f669aa2a54a17f39930368c357c8e107533367ef2c293526be2815a44dff22cd240756d01163dd3b0647d51461fd346a0a81d2e60b0ab47b8fe33695b40cd0fff049f827409959ff447fae0da9e2178d2e6e69aa3ebd6485b99a783962eba365d02a11119709065fc788e37556163abe11615719af1fb0b3b7d5eef007f6b5fd46485544362c4ce084a9b5284fc70b29f0575f9e5bb94ce5d55e29b96183fed2d9da98c681232977f76b9c23a037daea525b49f099d7aa9f0268074035c4f4783c4cb95454e03956944838240b3928018fb4a2ac2ae3acddba327673be8c11cb79c95d9934201a7cf920af02b27844a39d66d5063ad15b9623c0ee7a68c278a13eb1b05936131fe0ac217b3cc2da9ae3c6a6f1070bd12180dfa9662388cc51d1145a82970613b46497850a68beda890df096f2f93b17e01a9c2e2d6323ef42c7b947144009c37731088e28817b5301ff0ab64d0571ecf17beaa526e5d61065f4e30d6eb8e8af39ca8974ace40fed20355f5bf7fdf7efa581252bb9db8693fa9aaf0f82aa4ec50fefaf8e4155ff5d06527ca94a3a6b3b39cb722a9266d18e75d9296ba6f3f16376530720513e13edf4596717bde744a7ef72a24ec8d2a4539dbcef64677ba36fd50757a000b74df121eee21f6b31b69ea7727fbb52e776e5ebd86956dcc4019784d3dd63fb", 0x1000, 0x4000054, &(0x7f0000001040)={0x2, 0x4e24}, 0x10) ioctl(r0, 0x200040084146, &(0x7f0000000000)) 03:35:05 executing program 1: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x1000000, 0x0, 0x0) 03:35:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x0, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0xfff}}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0/file0\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x106, 0x1009}}, 0x20) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x384}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000713000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x2000004, 0x81012, 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x20000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='S[cgroupppp0$\x00', r3}, 0x10) [ 351.086406] binder: 16248:16251 Acquire 1 refcount change on invalid ref 0 ret -22 [ 351.122200] binder: 16248:16251 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:05 executing program 6: r0 = socket(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000000)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) dup2(r1, r0) 03:35:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="180077c800001105000000a5ea585a4e", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:05 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x63404000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:05 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x700, 0x0, &(0x7f0000000440)}) 03:35:05 executing program 6: eventfd2(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:35:05 executing program 5: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x132) getrlimit(0xf, &(0x7f0000000000)) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) [ 351.286577] binder: 16275:16277 Acquire 1 refcount change on invalid ref 0 ret -22 [ 351.315472] binder: 16275:16277 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:05 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7400000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 351.344342] binder: 16283:16284 BC_FREE_BUFFER u0000000000000000 no match 03:35:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)="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") getsockname$packet(r3, &(0x7f0000002ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002f00)=0x14) getsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000002f40)={r4, 0x1, 0x6, @random="03ae96826c7d"}, 0x10) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x2000000) 03:35:05 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/202, 0xca}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 351.453050] binder: 16293:16294 Acquire 1 refcount change on invalid ref 0 ret -22 [ 351.461684] binder: 16293:16294 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:06 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:06 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) 03:35:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8003d, 0x118) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='minix\x00', &(0x7f0000000240)="2b7d2d263a9876626f786e657431706f7369785f61636c5f6163636573732c2f277b7d00", &(0x7f0000000280)='minix\x00', &(0x7f0000000340)='+{,\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00']) 03:35:06 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40046307, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:06 executing program 1: socket(0x200000000000b, 0x7ff, 0x5b3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) 03:35:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x3f000000, 0x0, 0x0) [ 352.021840] binder: 16313:16315 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8003d, 0x118) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='minix\x00', &(0x7f0000000240)="2b7d2d263a9876626f786e657431706f7369785f61636c5f6163636573732c2f277b7d00", &(0x7f0000000280)='minix\x00', &(0x7f0000000340)='+{,\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00']) 03:35:06 executing program 1: socket$inet6(0xa, 0x0, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000001140)={{0x2, 0x0, @rand_addr}, {0x0, @dev}, 0x0, {}, 'tunl0\x00'}) sendto$inet(r1, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) clock_getres(0x3, &(0x7f0000000100)) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000900)) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0xffffffffffffff39) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0x10280) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) [ 352.067569] binder: 16313:16323 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000100000001000040", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:06 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x2) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@rand_addr, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) r8 = getgid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001e00)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast2}}, &(0x7f0000001f00)=0xe8) fstat(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0, 0x0}, &(0x7f00000020c0)=0xc) stat(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0, 0x0}, &(0x7f0000002200)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000025c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000026c0)=0xe8) getgroups(0x5, &(0x7f0000002700)=[0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) fstat(r0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002c00)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000002d00)=0xe8) getgroups(0x7, &(0x7f0000002d40)=[0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002d80)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002e80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, &(0x7f0000002f00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003180)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000003280)=0xe8) r24 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000032c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000033c0)=0xe8) fstat(r1, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = getuid() stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0, 0x0}, &(0x7f0000003600)=0xc) fstat(r0, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004140)={0x0, 0x0, 0x0}, &(0x7f0000004180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000041c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000042c0)=0xe8) r34 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004300)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000004400)=0xe8) stat(&(0x7f0000004440)='./file0\x00', &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004500)={0x0, 0x0}, &(0x7f0000004540)=0xc) r38 = getgid() r39 = geteuid() fstat(r0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000006100), &(0x7f0000006140)=0x0, &(0x7f0000006180)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000061c0)={0x0, 0x0, 0x0}, &(0x7f0000006200)=0xc) lstat(&(0x7f0000006240)='./file0\x00', &(0x7f0000006280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000006300)=[0xee00]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000084c0)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000085c0)=0xe8) getgroups(0x3, &(0x7f0000008600)=[0x0, 0x0, 0xee00]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008640)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000008740)=0xe8) fstat(r0, &(0x7f0000008780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000088c0)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="5c2bb4916e71e3ca54", 0x9}, {&(0x7f0000000240)="c062d7f82837658c556b7a12f1c6dfa4d0299e94f0afe6e94c77dd184fa327b45f8f1aed57f6223f81f992da78fde8a4a377a4ed7c38b54f9179b02ab202c49fd5601318966ab5dd06695a19b4a51ae5371b8d8788d854896835c506b380d40166761020df5d622f2956d95c25840bd63c378a1a9c37927d4a795c185e4f575df6c92b683ed8b7d45000a8aeed7f52d237c8ffdf47a09a291385d779c7a5a0f57889135358371ff0bd2f81e736fea23a47e8a5", 0xb3}, {&(0x7f0000000300)="6ea003ff4698221fea2caafc34c86ced30060d4d07ad33dbe2fce34f7dbe92f2d5c12abbbb79f5c5a8c329973cafd95f66323ac46000b9f40d50279dfc17909ab2da5c84a400063ce4e1cc4b6f7d175648ac906eea5a99ec2c85a752261c42", 0x5f}], 0x3, &(0x7f0000000780)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r2, r5, r6}, @rights={0x38, 0x1, 0x1, [r1, r0, r0, r1, r0, r0, r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r2, r7, r8}], 0x98, 0x40000}, {&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d40)=[{&(0x7f00000008c0)="5feccd194d5083be5639062095c2e90b31c82851b8f8c9e19f118d2dcc16b7535a7690522fab3646d05e01055fa30ebdafd06b36538a1133441a426939e7c747614c6a7643459cf8b2b7846ea86b16b8e0600e1b74b18433b02a820c2449a047fc782b62d4646a4a", 0x68}, {&(0x7f0000000940)="f7916266915087119274a6f1cd73e6c10f46d843339811d7dbe9a7942fedc6dbfc5b4ceef87e05b6", 0x28}, {&(0x7f0000000980)="538f123b81699a3eb5cbf8b179d8b83f80619ad81269f9769df078fcb992aee8c6f9bb0b6774db83fe134dff8229110207da49f523b394125c19d3bc3cae5447313c3fbd384a13d2e2b105512f133b9c5fb8fa215b6065fcc6cc39a13fb186b22e7233bedbb20a1b8e9b851f1e2c66b73bb059d301d2a0c927b0f6e775a66dd6b9b8845dec87f59628601b51a785b4", 0x8f}, {&(0x7f0000000a40)="bafb371138a252eede7512c8e5adf6afa3e8bd515dbc9ad8e8170e44ed28db", 0x1f}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="e96be8b12e29feb1986f1ed098", 0xd}, {&(0x7f0000001ac0)="9c14f91a6d0f4baac87379115e84b6310cc68c265d014acc4ba236d80d68f40758801519daac73b5f3252c3960bb5eaa3793dc9af1d15f51b08c8094eb8fce3cfc923739b2f3704d1f9966ee546b3816e6473de574c6f6a6400056cca7c5d4feeef73a7ddad1436f7fb0bd62cfe792fcd5945a0e7331f89e032e0e1ebc18c7a2e99e74df2b3073b13630f89eb789f56c7982af79bb90f8bd59ccda1250d1702145c936fb3210478f7994292c99a3a37f2f8defdeeab603df78e4474bdeb412745a5a478dda073c0d1b355b10ccc3f5a642a310fcca9541de744009c6c32dc074ae", 0xe1}, {&(0x7f0000001bc0)="ff7b079ac16a61063cecb892da04e0915045084a2fada77aa31fc49d7d780af939321ad6aac2bdafccf37e62d227de218520be7ef951f330d5137c71da73df04f45d03449a5d5545d6bd421f71dc2ed8680cb0bcd89981ee928b5cd9df55daa84570ca15c3e3fadc3b9bad60cd120c844932a54dff8b64c45d14fb7ba3fe90f824027a462b5f5539745eb06855f1dc147cf3db0146ccd2b3a7e0dde5f7a1d3b7a52dbf0ecaa4889c32c804b491d2b176", 0xb0}, {&(0x7f0000001c80)="e01fffd42c6f6bf5dce857d9cf7af8923757b5f77a70db23ea218d4efe9c0b82a06851e800f6407e864ca4805e3ce78e8155ed9d71ab5dbd65f8ee47341842e388c79564d33b8ee74e1acfb55b98755ddcce01aaed9b83d073a137d706d4e85930f910af9b7b0d5d4231f0ac63dfc40bb4feda3e182f822a64fa60c3e8805dffb621fa3995b4e2d9aa991cc546746d8bc9e049a0", 0x94}], 0x9, &(0x7f0000002240)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x20000001}, {&(0x7f0000002340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002580)=[{&(0x7f00000023c0)="d912e15c0b28d0df7b025125b4b8e8893d541ba7b2f490348692b0630b5a8972ffa7036dcd72658cf319b8bf331b5c30fa60d0ca4871ec9133b6a9a813fabe0ca5163cd832", 0x45}, {&(0x7f0000002440)="78d3c5233d493e1f8c8cd021cf9719e2a3849846251ccd42f684bf42", 0x1c}, {&(0x7f0000002480)="bc6b1bec7c0a0559aa881b4da91890dcb64c0009ea106313ec773097c225a0aa6a67d2ca352a4a68d01822349e973d1c85b325e4a109a8f14e3416be4ec1403bec19cc2443927f868b904e7153e8b39b5112d6bfb3a872d6c485207c2134194bfeb469233da60d20e488d7e5174373c271ad8068a96197bdcbde6a6a537c8134531b42539527740ed860d213544d55960f6af43fde494b3d942424d9b41e615010b7c9318de8f6fdf1ad2f03bd70881bace1c1ce24d95b99c56e34f6ee5e58214f43503638003e238e27907ab4e47a1bf96c13188ceca387510de2b7a999c2697ec98b6ca12384d6e2f6c6a38ad6cf15", 0xf0}], 0x3, &(0x7f00000027c0)=[@cred={0x20, 0x1, 0x2, r2, r15, r16}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r2, r17, r18}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x18, 0x1, 0x1, [r0, r1]}], 0x90, 0x40000}, {&(0x7f0000002880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002900)="8d31babe94681446ddd2eec1dcb8a8a70f6d7aeb2f56112332705b4dc556b6a025072834a28b21d59940cfe0ea737e2a6ddba29260839c6554fea318d01ed79f2b69ef895f63fa969a0e743179c37a0834d456486124dae70832b2e85da0bfde9b70ac2b3e288e6f5986194e9710ade79806b5844b082c3108f4f72f330751013aed4063caaff4d8", 0x88}, {&(0x7f00000029c0)="a7af919c0e07d9670cbdc811c180e345103f053a145d7d9141437832aa5c407adc93d3edfdf2e46cab768fa0ca6d3374f24239f03dc315ae96b78cfa9cf19a78e01502d7618420c30fc5e452e46be1781b59a5acd2f8253f877b209f7271651f28ff09568eb7d16431f2eb7b84d484c676136d2724dd30c3adc1ed89040dbabefa014d2f28bdb77c238fad8a49e574100b4790de8d4819166c39646dd072f4b19739df22dae3b787aec033da932982f36a32", 0xb2}, {&(0x7f0000002a80)="de164d7957e6a319878818ee168487faddd176106ee83bdfaede8136a22643e3b1966c1414408e453b84b4e73b78e21373c2e4ba049ffaa1c3a6dcaf5e", 0x3d}, {&(0x7f0000002ac0)="c5e252f3186f2c06e627554840ead1828e22e43e5577def8959337ce5390526b32e03500d22cfc08afdf3b67608256714d5dbbb4cf6b09ac5f40ba95d5ffe6058ade87f3fd8471587407f6dd700cc45cdee69a8478ad539d27c8698e79d3e3fc10a8544dcc6bbd8335ececf7c3bd9f1d09b0f6b811230f127ae86cfefc443c06df0717f871eb8e6687d935ccafa68828d8b4dbab912107f173d6b447fe9daf12a18e5ed4e9a3f79c2ae6ea12328143deb002524087ec94e452aa364fd2dc1ae938bbfee90df65d45c9c3df14914df06a9d78ebc3d1c4313937d720fe4b740c152c97900b78832f18b29c9f5eef", 0xed}], 0x4, &(0x7f0000002f40)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r19, r20}, @cred={0x20, 0x1, 0x2, r2, r21, r22}], 0x68, 0x4000000}, {&(0x7f0000002fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000003040)="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", 0xfd}], 0x1, &(0x7f0000003640)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r23, r24}, @cred={0x20, 0x1, 0x2, r2, r25, r26}, @cred={0x20, 0x1, 0x2, r2, r27, r28}, @cred={0x20, 0x1, 0x2, r2, r29, r30}], 0x100, 0x20000080}, {&(0x7f0000003740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000037c0)="b7033f005e6d079d5bf6e159f7e730b3a42902769f4808653c75a8e65c6a87f52bf24d70ac4dfab40e6ce13190d54bcb811e3915d611a93117aa3627e2c91a909fb3301acc7200efea8c6c25cf353a9142fac09df5a29c345117213ee43ae97c10465018e4502c1e819d23a63c5f2f1ee536fa0b70443cdac974b7953cbbbffe92c847e17d3c3f30c70176bf300e99467f17a7859299c847bbb326374b9798c2d35497f8dd34dadfbfdd8ccdb3b541b7bbc31a968d601c71916089fed77863887d561fd0ce0a44428cb1d7", 0xcb}, {&(0x7f00000038c0)="87a6be2fbfa3f54f36e04a131e9afcbb8db9bc6eb179a28d0948079a05bb53220f28534604a1a6ae60e1284a30149ae86b487781711aaa218c0e580947fc074c683f6781d0e9ba7d260a6a6f83a401ddd7fe8cba95690f5a49e05c122b0f1468c3e7c228b1eebb63081b6eac82b62f4998b8e5", 0x73}, {&(0x7f0000003940)="f6a2aac30073b453a0397409a3088193a9e79fdd1fa6e4f566360c0f438c176c3b337a5027a0a11188e84cd4afe5fb16cc72e9041d20a733ce2bb3db8f9298593dec86650a66165a49b4d176422ee876", 0x50}, {&(0x7f00000039c0)="5296e30bfa67f3b80bc694e2b2fd1ad7db2d98d0c81aa846", 0x18}, {&(0x7f0000003a00)="afed479eda15d0ed8a99574eb4f9a687d08cd53d7315dcba641bd814fc2c854089f7dc914bcf6b7171cda2fb11b478cc0c47565edeab9f07628935c1bce4b61a5aab223e7e7a81e088bb2a229ca3579d20d636068ac4d12b5630718382762ac104e82760ef445b941ef03ad80b64cca5d9fb665e40d5aa616afb79dc450aab16d354112f01dd9ca69318c514513731c7e16f7a13112181f10e78a0bf4f4b8f9e111b2baa32741707a8de6f64042b0de308df00b085fad40100dbdd96eab1384602b7b54399b7c6cf87fe7b10de77c6fd56a864c727f870ff52370819f634f9c9a76f6ae61d9e0f408ef823634570297248b5", 0xf2}, {&(0x7f0000003b00)="02df0209da30a185fa068731d8", 0xd}, {&(0x7f0000003b40)="28f24ed7b50203255733810a943d74bd5cb3f494c6f9876d9a2fa19340d012173c89944fa1d698128ef5cd2207331cc213d0e130a2dc3c4191cc20529fe01ea59a5fc53fae21ce848f394d1338e0fc", 0x4f}, {&(0x7f0000003bc0)="0eae3c706bda58677133ad3753771b245b292ea8d40b00cd4992d2f36ba27cf533bcea64c17fc9948c49ce4b9d3f8be9c8fc67b6069601785c8f76e11a770878a261e73bd53da47e3669881ddaf53a6cb205a8610c07c6", 0x57}], 0x8, 0x0, 0x0, 0x2000c011}, {&(0x7f0000003cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003d40)="af1111fe24f5caf2de9b663ef8a09f77ec110b6ce295a5f3b58180a0d1dcc1a01a9e1114aa1e11c3942e32986ce979ab05f29c881d2ca9c3f86f113cb1c9871df46d0bd0eb76c9945f5f9d4fd7d53c2f97d7072778db7c5a2763f1ac62fc2cc8fbd12c577722a39fee9856a70e54bcdd4361254b6f58f6dbdc979695480825afd350b9b7f9d3322f8d595768bab582e93b5ad6bb11ee2be1a8058b256480e037fd09ebaa6854d589760243a501914057416f643e3a0eed67005fe67676f896a0d39f2d2948de924c51322973eb4c", 0xce}, {&(0x7f0000003e40)="b2b46095f9e9015e", 0x8}, {&(0x7f0000003e80)="7995429f0da08ea79ec665c3e2772be4823188d1e9e01c2cfc14209c503d87353d701186d933219efc6451d5521fddfdbe418d4023c14112dcc19c5d0aa4b0b876296781e666251d8e6486b36c5541cfec617bd2bb46494489c125b9a1049336c37acc818a06a22183f12da99ed506fbeeea0f8ad5a9b1a487b2455192db707bc69ed292d7fc9f2e1fe9dacf91307ce8e05bc6d43765b84af58762319812fc9b1838c705922da1334e4e5affb50c391c8f4e90578728eb08e0ec2209e4905d7dbfee368d7d78ce9317c5e3c0a8a18df8bf94227377ce1b", 0xd7}, {&(0x7f0000003f80)="e8252a4d9a5533f65e625f758b26510bef1d0add9b28074318e840b3bed3c4a8a4d1fb7300ae03249a2f0be8aed29eec08973dcff8e330e006754d44f305c2c3218ff28b4c37e5507b1ba3dd4bbfa8f147dd86b5ff07ffd1fc5a5524d06129e62d4d3d092573ff379d1db605dbb81b5463fd45457aed5cf460d10903401a57fa178c5cce614896b962338df7fe02d007212869ccdd37a271579844e82d5d10ed48d3aa568a9c725ab8bf9be6a8d59a52a424ecf919681c6615bfa4e26881c4c4dd8f5112d14ec5a2fce073497a6268074af75fcbaa698492e3cdf72eb6bf5ff711536fc649eae5176c84c493f9d67fa981", 0xf1}], 0x4, &(0x7f0000004600)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r2, r31, r32}, @cred={0x20, 0x1, 0x2, r2, r33, r34}, @cred={0x20, 0x1, 0x2, r2, r35, r36}, @rights={0x30, 0x1, 0x1, [r1, r1, r0, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r2, r37, r38}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r2, r39, r40}, @rights={0x20, 0x1, 0x1, [r1, r0, r0, r1]}], 0x128, 0x880}, {&(0x7f0000004740)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005b80)=[{&(0x7f00000047c0)="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", 0xfb}, {&(0x7f00000048c0)="1d50e15c9515d9fa34f5f5438b0e85f255f1ff66e458f1fed7d41747da7876127402af25bf5e0a45b52ab8d82aa3df3ae9575702f76026f9614a07b31335928db43c27d74bd3d32deae70e76421a0de9e433d7348577840dd9b4c30cef48d1479b34defd5f5624657f1af59324a09fc53fee95862517065a2cb763", 0x7b}, {&(0x7f0000004940)="199d46490d0efb82f4264a6b3ea3be2297c669770feea0e44fa4afad11a11ab5a04fa4c933fa2e605fdf197cf8dad6355418ca4d8bf210adb57888680498bcc660ac03b7acee70fc099916b980ce3b78054231d5f7323effce2c6b3a5c86df965eea8e941aa0c0f707ef9adfe5b59d88bddcb1c43645e6366145a70a9751dbf7965e7407d0a3b5076d436f3066202abc708a21edbc46cd471a2fbcbe4313360ead19", 0xa2}, {&(0x7f0000004a00)="ab46c515aff8db5cca2c5497015f88acd31fd64faeb61b1bbaf3d257d76cb5bdde2cbac3e99554d35bfcf0352c693419205ce10983ddb485c006d49ef5e50afcd72b6cc2fc57be46a5c99f8846ffc2f16c0084e3e5517b0df70207f1b3341488e5c0d6a5a60a552e2559ae97badf75bf468f8447ef3ba8453c4a914826bb347bc3aed02eb355ea4d", 0x88}, {&(0x7f0000004ac0)="7061e427c6211648e81b09023714e8b8a74b7f9ab443015a86fe146157c29aee88e52717dcae3815c50b55d9425069e51218cd802e6ceec3a359a3bd651d3bd11de279622f55760e39c566800c6f19e2b046e3e3da64b278f314a9cde32d85950f1410f8bf26", 0x66}, {&(0x7f0000004b40)="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", 0x1000}, {&(0x7f0000005b40)="9352568e0f96626aaf28a284ecad0957", 0x10}], 0x7, 0x0, 0x0, 0x4000000}, {&(0x7f0000005c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006080)=[{&(0x7f0000005c80)="794826696bd448f756a01d05500ba01b79a79d6a07fbc2432870b8978377a278a6fa09c6ff4df53ff8e6b7cd5241f88573edd5b127dd5c1b0888451235138965f651020349d4272d56f77fbe91209f73f5a4fa5a68ccf22a4ca39614427ab2fb0715245cc16775c939f9ca20f5e977c73cb5b8d273bc6b9698751675718f", 0x7e}, {&(0x7f0000005d00)="40a7851b4bc94bc5df3d7fb752c45211445ba82f6b376f011e9c3619f01632fe91cef236e12635df23c43f4303b877f50b8d78175d2e1d2feedd6fffe3bc181734aa1f1bf5fde4c35c742ae6eb73e4efc71604be3ce756915cea7e8f8583f7769aeeed826e44f23f93db8ae47acea14849f40248236342ba2573d6a6b64f04e11cdd3d8c507779df95b9ffb3595da5f9cc", 0x91}, {&(0x7f0000005dc0)="9c7973bdca012da8ad8782024389748ea7b3a6404825f15d1c979217cc30e0d43f285f1d27f92cdd0441cb818112a736fff414c0a51549776ce603dff0765ea276624f687f5f5e0b4860f8fddf2e98a3aa59355486d27205ac5ea7c7fa3025aced22678e7ca0f93ca1ccdee3018aeffff6a47f6e7ab232f645f588f6ff77", 0x7e}, {&(0x7f0000005e40)="901100550d456334666381ea54b9338e81212eafd2526aa26ff181ede008258b3545499ad853f37ff13b", 0x2a}, {&(0x7f0000005e80)="446410c75ae8695a8bdc76b1bc192e46d6c0d7fcafa7510a88057feebb4ba653b12af5656acc514d5cdf8b6b1681ce7a0d5dcc32dc23b5165c3db9d55b694071768625d00fe12f9dee7d2cbdc801f3e8e5c9cba5f420c2071a9e5079c0606b73e42bf5ac55b863828423b48ed98714437dfc0c291050460239eeaa2c2ae46d5a407736a9d788c0abe5d9e75c0f4749d877ef4f5bc7d41991fe5e", 0x9a}, {&(0x7f0000005f40)="4b0659e232ea6db8ef8685b069ac64daa09a4a359366ee81a50c1d56eaa72505a1d1c03073a22d1a4e4649f33b342740cbb8b2b1cd5b11ad08b48ce84580aaebd9f803c1c89d57e70980139e6503a85b087c45bd8625b8cec5c4c314cc1c9d", 0x5f}, {&(0x7f0000005fc0)="4aa1709a556f3f14bbcd3c6b462df0d44b0d01d0a65fd0ffdfcb1bdeeb42fdc1b362228a23c18ee4d1c1dbcad1ffffa64f831d616466896987674cf6be6aa84fc1b0ee830111ffe7f4595ff631ca66f6b889d4b542fffebf9e9cd23a44d4fdab1304dac7b0695194eded051235688777703121134b3eb1a3e2120aa6ac04747502c6eb40fe68a42cd1e6b3bc4c7473d970a364db7863fdfb97519b29eb3d2b248764c767c93b", 0xa6}], 0x7, &(0x7f0000006340)=[@cred={0x20, 0x1, 0x2, r2, r41, r42}, @cred={0x20, 0x1, 0x2, r2, r43, r44}], 0x40, 0x8000}, {&(0x7f0000006380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008480)=[{&(0x7f0000006400)="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", 0x1000}, {&(0x7f0000007400)="2ff78803b016080b3f8ea7142bd29781972e203bbacf45cdfdba92b435ddc889ebc2f1ceb0862988854d7638cf2ca79b032b24b7481d3ed3667ccbdb6b05881fb8d911a4e2e7b394963650e9000214cf25d9e36e2cfdee38a4eab4a4ec9ad15797", 0x61}, {&(0x7f0000007480)="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", 0x1000}], 0x3, &(0x7f0000008800)=[@rights={0x28, 0x1, 0x1, [r0, r1, r1, r0, r0, r1]}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r2, r45, r46}, @cred={0x20, 0x1, 0x2, r2, r47, r48}], 0x98, 0x40400d5}], 0xa, 0x20000000) r49 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) ioctl$TCSETS(r49, 0x5402, &(0x7f0000000080)={0x80, 0x7, 0x1, 0x6, 0x9, 0x8fd, 0x1, 0x0, 0x4, 0x99, 0x400, 0x9}) 03:35:06 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x700000000000000, 0x0, &(0x7f0000000440)}) 03:35:06 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xc63000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:06 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) close(r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x800, 0x4) 03:35:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8003d, 0x118) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='minix\x00', &(0x7f0000000240)="2b7d2d263a9876626f786e657431706f7369785f61636c5f6163636573732c2f277b7d00", &(0x7f0000000280)='minix\x00', &(0x7f0000000340)='+{,\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00']) [ 352.275306] binder: 16348:16349 BC_FREE_BUFFER u0000000000000000 no match [ 352.286633] binder: 16350:16351 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:06 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x12, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 352.319041] binder: 16350:16351 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8003d, 0x118) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000001c0)='minix\x00', &(0x7f0000000240)="2b7d2d263a9876626f786e657431706f7369785f61636c5f6163636573732c2f277b7d00", &(0x7f0000000280)='minix\x00', &(0x7f0000000340)='+{,\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00']) [ 352.398733] binder: 16364:16367 Acquire 1 refcount change on invalid ref 0 ret -22 [ 352.433453] binder: 16364:16367 unknown command 0 [ 352.442834] binder: 16364:16367 ioctl c0306201 20000480 returned -22 03:35:07 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x29434, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:07 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0xfffffffffffffffe, 0x0) 03:35:07 executing program 5: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e24, 0x6, @local, 0x8}, r1}}, 0x38) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) 03:35:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x40030020, 0x0, 0x0) 03:35:07 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:07 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x1063084000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000004c0)='\x00') ioctl$TIOCSCTTY(r1, 0x540e, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) r2 = getpid() r3 = perf_event_open(&(0x7f0000000540)={0x7, 0x70, 0x0, 0xfffffffffffffffd, 0x101, 0x3ff, 0x0, 0x3, 0x0, 0xc, 0x5, 0xdeca180000000000, 0x100000000, 0x0, 0xfffffffffffffffa, 0x9, 0x0, 0x0, 0x0, 0x1, 0xa3, 0x324, 0x4, 0xe0da000000, 0x0, 0x3b3400000000, 0x0, 0x0, 0x0, 0x0, 0x6a, 0x4f, 0x7, 0x0, 0x1f, 0x0, 0x5, 0x2, 0x0, 0x1530e09c, 0x4, @perf_config_ext, 0x800, 0x6, 0x0, 0x6, 0x0, 0x2}, r2, 0x3, r0, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000002940)=[{&(0x7f0000000340)=""/114, 0x72}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000014c0)=""/194, 0xc2}, {&(0x7f00000015c0)=""/197, 0xc5}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/242, 0xf2}], 0x6, &(0x7f0000002a00)=""/216, 0xd8}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) mkdir(&(0x7f00000006c0)='./file1\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)=0x7) 03:35:07 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x6c00000000000000, 0x0, &(0x7f0000000440)}) 03:35:07 executing program 6: r0 = socket$inet(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000ec0)={0x0, 0xab4}, &(0x7f0000000f00)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000f40)={r2, 0x8, 0x9, 0xfffffffffffffff7, 0x6, 0x3}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0xb2, @mcast1, 0x8000}}, 0x2}, &(0x7f0000000140)=0x90) r4 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x3, 0xa01) utimensat(r4, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={{0x0, 0x2710}}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000300)=0x4) r6 = gettid() lsetxattr$trusted_overlay_origin(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)='trusted.overlay.origin\x00', &(0x7f0000001000)='y\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000d40)={r5, 0xfe, "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"}, &(0x7f0000000e80)=0x106) timer_create(0x4, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/204, 0x5d}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r6, 0x1000000000016) 03:35:07 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0xe3, @remote, 0x30d0}}, [0x2, 0x7, 0x1000, 0x7a6, 0x537a, 0x401, 0x7f, 0x2, 0xfffffffffffff001, 0xc6, 0x1, 0x7f, 0x7, 0xc97, 0x2]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @remote}}, 0x1, 0x100}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) 03:35:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000040)=""/147, 0x20002, 0x1000}, 0xfffffec0) r3 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x7, 0x80000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0x2, 0x0, 0x7ff, 0x5, 0x1}, 0x1c) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:07 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4800, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @dev}, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xf3, 0x200000) setsockopt$inet_buf(r2, 0x0, 0x2d, &(0x7f0000000240)="e537aeb43f709638fca9336e238b1e7516d3aa28c866191dd2c567e12633afdd697d5d1cc916b3f0e3e78531d7df518db1a3bf6af5e1b1c76014b9dbd0bfeec727fddd885543eaea372a67877488c9d4b16a9aa392f950e230cbf89c933cfce8dceace0044a79b5e8b90daf21e8e00ec297f38a94a6d96c5a592ad78d147e60cd2dc52c669e91666ae43e3b04b788061c3bf10e3e7596ba45bb7a3178907907fc96653bc71b8961052ff6ea52f7cad66ea240befe8c21fcdee87097c6323b2611fba4b26b44be808a3064a6e1f539fc38531ca80ef7906768a542e92f690ddbe239044e98d2131", 0xe7) clone(0x400002102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r3 = getpid() accept4$vsock_stream(r2, &(0x7f0000000040), 0x10, 0x800) sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$KVM_SMI(r2, 0xaeb7) seccomp(0x2, 0x0, &(0x7f0000000100)) 03:35:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80), 0x0, 0x1, &(0x7f0000002cc0)={0x0, 0x1c9c380}) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_none='cache=none'}, {@debug={'debug', 0x3d, 0x67e0}}, {@aname={'aname', 0x3d, 'nodevppp0'}}, {@version_9p2000='version=9p2000'}, {@uname={'uname'}}, {@noextend='noextend'}, {@privport='privport'}, {@cache_loose='cache=loose'}, {@aname={'aname', 0x3d, 'proc{)securitytrustedvboxnet0wlan1'}}]}}) [ 353.208393] binder: 16417:16420 BC_FREE_BUFFER u0000000000000000 no match 03:35:07 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x60000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000600)="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", 0x1000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r2 = dup2(r1, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) 03:35:07 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80000, 0x0) sendto$llc(r2, &(0x7f00000001c0)="5f6f52b84db42d3bfb34841b51fc400b23fa3396afcdd34df5d5a747e81029467ef36c9cb340b482436aa1183683da0cc416616ed470c667c11716f19256c24024052084f06b45541c44dd91b54afeb5a64caa25280acfa34e7242ae3b6353f4cbc03fda0506f47a10e1f7415c75af", 0x6f, 0x0, &(0x7f0000000240)={0x1a, 0x0, 0x9, 0x1ed4, 0x40, 0x3, @local}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000000000000000000000000000000"]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x50, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r3, 0x4) 03:35:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x402980, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000240)={0x2, r1, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x0, 0x0, 0x401, 0x101]}) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3fffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xe5, "be37802d64cb9ef58101e7fa7a5d2694917e6c231f243ecec4159672be3d19c4bf8b9569d8151c7f0a6359dcf84688c1fdb86c6c45ec2a1de3f254800e2ec91f85e3d3ac2af359b3e0c2c12aa21bc150c7925c92471a398b144df137aa67bc08cbb0a12b4c91d09aa81712b7975cdf7d8e50cab3fa0c1c0949ec1dc9bf8874c52e0be5fd982a449c03050cfec8b0f4962560632c126013c158bbe084bbe14353c00d2428d7a91201ede79b56ba86559e015d41c013ac7fa27957dffa85ff92db89194d3f28e8938c7c7280039e9ce7061fca8a20b1ec49d679ab9f014b018bda8b1a0089bd"}, &(0x7f00000000c0)=0xed) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000480)={r5, @in={{0x2, 0x4e20}}, 0xffffffff, 0x4}, 0x90) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) flistxattr(0xffffffffffffffff, &(0x7f0000000340), 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000340)=0x1e) 03:35:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8c61, 0x200) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)=0x800000095, 0x4) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000240)=0x8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000000c674000100000001000000", @ANYRES32=r3, @ANYRES32=r2], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x40000000, 0x0, 0x0) 03:35:07 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:07 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x2000000, 0x3}, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x80011, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x80000019, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6}, 0x10) setns(0xffffffffffffffff, 0x0) 03:35:07 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x8c0, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:08 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x7a000000, 0x0, &(0x7f0000000440)}) 03:35:08 executing program 5: keyctl$instantiate_iov(0x9, 0x0, &(0x7f0000001740), 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000001200)='id_legacy\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001280)='\x00', 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r0, &(0x7f00000011c0)=[{&(0x7f0000000080)="699a8365ba8d47656e80f7a324c55642bb2a5b5156fd53909cab87ef53536e8777509e92182887c4e9d856c341b9e10f762ee2d68be4d53497fb9011be14033bda52ecdeb6d6ce874bfce30e2fef98f98e8e8e2e1ac204fd9be687053c0073afac904c7c136eb100e21b1f3a7fd2088b1ce65b9b190f859e618e14", 0x7b}, {&(0x7f0000000100)="a0ec6d44686bc7d38be7de83a50c4937673ef2269c0b8014a9d4013fc5cd38c5b383c48c76a938aab84fa7fa17b4ecf12b200eb95c56e1c1cc7a2e13185d0741b9c1d9795e55ba", 0x47}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="5b7edc59a3c1f0bc3b3ca4585af8c6697386e8dbaeb7a302e2617ce9d026baac980cf90df513993de37973b4e3fff6403611ced7626f00c634a0968e5a", 0x3d}], 0x4, r1) 03:35:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x408000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000040)=']\x00', 0x2) finit_module(r1, &(0x7f0000000240)='$cpuset!\x00', 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x1, 0x260, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000280), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1d, 0x0, 0xe09b, 'ip6gretap0\x00', 'dummy0\x00', 'sit0\x00', 'veth1_to_bridge\x00', @empty, [0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x128, 0x158, 0x1a0, [@devgroup={'devgroup\x00', 0x18, {{0x6, 0x8, 0x0, 0xb85, 0x6}}}, @ip6={'ip6\x00', 0x50, {{@local, @ipv4={[], [], @local}, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffffff, 0xffffffff], 0x7f, 0x32, 0x40, 0x60, 0x4e20, 0x4e21, 0x4e24, 0x4e21}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x1, 0x8}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x2d8) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r3, r2]}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x400000, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x50, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x78, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09631040", @ANYRES64=r3, @ANYBLOB="040000000000000010630840030000000000000008631040", @ANYRES64=r4, @ANYBLOB="040000000000000001634040000000000000000000000000000000000000000011000000000000000000000038000000000000002800000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="8561646600000000070000000000000002000000000000000300000000000000852a6a730a010000", @ANYRES64=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000003800000000000000200000000000000000000000000000003000000000000000"]], 0x87, 0x0, &(0x7f0000000480)="868b1f4854e5e3c788cb45988cffe9ac71577c8865030cf63d6437e6db69cc224187ed7b586c50713474c628744b6797d2c608acb749ea64c2df06eb06b2d3a81f6ccb2b22158dd4bf1816804c2079466ad0dc4f3288cb6b0923d664fd86f11b7eb70927c6948f45ab9f4d0e957af0d3f9c509aa3de2f3c6a28e7e8fa9c6db486c10520f79a06d"}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @local, @ipv4={[], [], @rand_addr=0x2}, 0x8d60, 0x1, 0x4, 0x400, 0x2, 0x2, r1}) r6 = socket$inet(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000240007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:35:08 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xbf08000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:08 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10db}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x2, 0xe8030000}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) 03:35:08 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:08 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000002c0)={0x3, 0xa7c}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x5084f74d, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x80000001, 0x2}) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="09002cbd7000fcdbdf2502000000080003003e000000"], 0x1}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) geteuid() r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x9, 0x800) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @loopback, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x1, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000380)=0x33c) shmget(0x3, 0x2000, 0x54000100, &(0x7f0000ffb000/0x2000)=nil) lseek(r0, 0x0, 0x3) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x84, &(0x7f0000000640)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, [], 0x13}, 0x6}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x761}, @in6={0xa, 0x4e23, 0x360, @loopback, 0x7}]}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000740)={0x0, 0x6, 0x6000000000000000, 0x3ff, 0x3, 0x7}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000007c0)={r3, 0x7, 0x0, 0x78d5f2e6, 0x7, 0x2, 0xc14, 0x800, {r4, @in6={{0xa, 0x4e24, 0x0, @local, 0x1}}, 0x6, 0x8, 0x8, 0x80000000, 0x2}}, &(0x7f0000000880)=0xb0) [ 354.036098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 354.067101] binder: 16490:16491 BC_FREE_BUFFER u0000000000000000 no match [ 354.076531] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 03:35:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1010c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [0xc0010015, 0x1]}) ioctl$EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f0000000040)=0xffffffff) 03:35:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0xc0040, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000280)=0xffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}, 0x7}, @in6={0xa, 0x4e22, 0x8b9, @empty, 0x1}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x3f}, @in6={0xa, 0x4e23, 0xab, @remote, 0x5}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @multicast1}], 0x94) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000140)={0x5, 0x1b4, 0x141d, 0x8832, 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400000000400200) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/200) ioctl$void(r2, 0xc0045878) [ 354.133514] binder: 16494:16495 unknown command 0 [ 354.150283] binder: 16494:16495 ioctl c0306201 20000480 returned -22 03:35:08 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4800000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:08 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000013000501000100000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000004002b000c00010063000000", @ANYRES32], 0x333}}, 0x0) 03:35:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x3f00, 0x0, 0x0) 03:35:08 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:08 executing program 1: r0 = socket$inet6(0xa, 0x2000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x200, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000100)={0x20, 0xffffffffffffffda, 0x5, {0x4, 0x4, 0x8, 0x401}}, 0x20) futex(&(0x7f0000000040)=0x1, 0x4, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)=0x2, 0x1) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x4000000) 03:35:08 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80000, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000002c0)={0x3, 0xa7c}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x5084f74d, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x80000001, 0x2}) syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="09002cbd7000fcdbdf2502000000080003003e000000"], 0x1}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) geteuid() r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x9, 0x800) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @loopback, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x1, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000380)=0x33c) shmget(0x3, 0x2000, 0x54000100, &(0x7f0000ffb000/0x2000)=nil) lseek(r0, 0x0, 0x3) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x84, &(0x7f0000000640)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, [], 0x13}, 0x6}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @local, 0x761}, @in6={0xa, 0x4e23, 0x360, @loopback, 0x7}]}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000740)={0x0, 0x6, 0x6000000000000000, 0x3ff, 0x3, 0x7}, &(0x7f0000000780)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000007c0)={r3, 0x7, 0x0, 0x78d5f2e6, 0x7, 0x2, 0xc14, 0x800, {r4, @in6={{0xa, 0x4e24, 0x0, @local, 0x1}}, 0x6, 0x8, 0x8, 0x80000000, 0x2}}, &(0x7f0000000880)=0xb0) 03:35:09 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x2, 0x0, &(0x7f0000000440)}) 03:35:09 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xac93020000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:09 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000000)=0x7ff, 0x4) sendto$unix(r1, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 03:35:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x2, 0x0, [], [{0x6, 0x5, 0x4, 0x100000001, 0xfffffffffffffffc, 0x5}, {0x3c481dba, 0x3, 0x2, 0x3, 0x8, 0x6}], [[], []]}) r1 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ethernet={0x0, @broadcast}, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x10000, 0x3, 0x3, 0x8, 0xfffffffffffffff9}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={r2, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x200, @empty, 0x5}]}, &(0x7f0000000400)=0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000600), 0x10000000000002a3) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x10003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="0fc76f1a3e470f001ab9410900000f32430f01cff3ac48b886823a73d11a397c0f23c00f21f835030006000f23f8470f01be00000000c4c17e161547386e7264660f38811148b800000000000000000f23d00f21f8352000000a0f23f8", 0x5d}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000002c0)="9a00003f0066b87e31ffff0f23d00f21f866351000000c0f23f80f01e26666865a65dce20f0f00960f9e6805ea82001800163e660fed4599", 0x38}], 0x1, 0x0, &(0x7f0000000340), 0x0) 03:35:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername(r0, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000300)=0x80) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e21, 0x281, @ipv4={[], [], @local}, 0x10000}, {0xa, 0x4e20, 0x1}, 0x2d4e, [0x3, 0x4, 0x1, 0x4, 0x7, 0xce7b, 0x9, 0x90]}, 0x5c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r4, r3]}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000000040)=""/44, 0x2c}}], 0x1, 0x0, &(0x7f00000000c0)={0x0, 0x1c9c380}) 03:35:09 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:09 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081f9) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x800002, 0x11, r1, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xd) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) fstat(r2, &(0x7f0000005000)) madvise(&(0x7f0000003000/0x4000)=nil, 0x2300, 0x9) 03:35:09 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x33f, 0x0, 0x3, 0x7fffffff, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x7, &(0x7f0000000180)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xdd, &(0x7f0000000240)=""/221}, 0x48) sysfs$2(0x2, 0x5, &(0x7f00000000c0)=""/184) [ 354.915290] raw_sendmsg: syz-executor6 forgot to set AF_INET. Fix it! [ 354.936594] binder: 16548:16551 BC_FREE_BUFFER u0000000000000000 no match 03:35:09 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = creat(&(0x7f0000001200)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xfff) unshare(0x400) r2 = accept4(r1, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0x80, 0x80800) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@xdp={0x2c, 0x5, r3, 0x3a}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="0ba87fab83c29a87aebcfd04e10d0793dddcb2e527ab43ce5e2370fb998c2822a2c9ed9cc3f779fdd67d8ce8d87d0889d8981a0d3353d5491a430d6b20fb60f997d447570046f6bcbf0304cd2392e35a6d", 0x51}], 0x2, &(0x7f0000000300)=[{0xc8, 0x10f, 0xfffffffffffffff9, "493c98f7f030102599e6b7eaef3c81b46d79a9ca5ffcd2fe0aaceddb4c3efc18341a76cb5fab21f4daaf352710164d8ee7b2429876d9a8b4e153aa6366d77798d66fb91b185c326246c4010efc84d5c7a5fe55ec51a29d54f06818f4134f1527323ef7981b92b12f3a67253b57d500f5495b11867c9e43e79d2612ef0458ea5c7db8fbc27df1aed566d39662fea11a86fb0028341f9151a3bfb90b5887dc693ab179e4e4e28b0a0bcd0a7545deee8e927b14912fad"}, {0x18, 0x139, 0x10000, "4884295c0a4f"}], 0xe0, 0x40004}, 0x8000) fallocate(r0, 0x0, 0x0, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) 03:35:09 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40106308, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:09 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x400, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x14000, 0x0) mkdirat(r0, &(0x7f00000004c0)='./file0\x00', 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = geteuid() mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000001000), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r1, &(0x7f00000030c0), 0x11bf) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x200000002, 0x0, 0x0, 0x80, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) read$FUSE(r1, &(0x7f00000040c0), 0x1000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in, 0x4e23, 0x8, 0x4e22, 0xec5e, 0xa, 0x20, 0xa0, 0x33, r5, r6}, {0x3, 0x4, 0x10000, 0x0, 0x8, 0x0, 0x4000000000000, 0x9}, {0x6, 0x80, 0x200, 0x8}, 0x1ff, 0x6e6bc0, 0x0, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d5, 0x32}, 0xa, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10001, 0x3}}, 0xe8) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000240)={{0x8, 0xff, 0x7f000, 0x4, 0x100, 0x4}, 0xd0, 0x7ff, 0x3, 0x80, 0x0, "b353a3e517f999cea109f820d9b86c14df2d1dbbdee8599f2cf041c7af08cfff5449f283fe8fc65e5fa219e35225ddd8dd9b593ca035c75af50077c869fac6a122003e4460bd02ace052a37ba380aef827a014f42367720ff2f64d6a1dff1688ef89d52e07c679a40295832a574dfd3eb632148e53787beaad346c91d19ff758"}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), 0x4) 03:35:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r0}}, 0x18) r3 = accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) recvmmsg(r3, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/150, 0x96}], 0x1, &(0x7f0000000340)=""/154, 0x9a}, 0x1}, {{&(0x7f0000000400)=@pppol2tpin6, 0x80, &(0x7f0000000480)=[{&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f0000000640)=""/160, 0xa0}, {&(0x7f0000000700)=""/172, 0xac}], 0x3, &(0x7f00000007c0)=""/250, 0xfa, 0x7}, 0x7}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)=""/163, 0xa3}, {&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000a80)=""/84, 0x54}, {&(0x7f0000000b00)=""/254, 0xfe}, {&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/8, 0x8}], 0x7, 0x0, 0x0, 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/212, 0xd4}, {&(0x7f0000000f00)=""/100, 0x64}], 0x2, &(0x7f0000000fc0)=""/192, 0xc0, 0x81}, 0x9}, {{&(0x7f0000001080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001100)=""/153, 0x99}, {&(0x7f00000011c0)=""/160, 0xa0}, {&(0x7f0000001280)=""/227, 0xe3}, {&(0x7f0000001380)=""/177, 0xb1}], 0x4, &(0x7f0000001480)=""/103, 0x67, 0x2}, 0x400000000}, {{&(0x7f0000001500)=@xdp, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001580)=""/194, 0xc2}, {&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/130, 0x82}, {&(0x7f0000001800)=""/142, 0x8e}, {&(0x7f00000018c0)=""/242, 0xf2}, {&(0x7f00000019c0)=""/45, 0x2d}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/225, 0xe1}], 0x8, &(0x7f0000001c00)=""/44, 0x2c, 0x80}, 0x7fff}, {{&(0x7f0000001c40)=@ax25, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/241, 0xf1}, {&(0x7f0000001dc0)=""/24, 0x18}, {&(0x7f0000001e00)=""/66, 0x42}, {&(0x7f0000001e80)=""/13, 0xd}], 0x4, 0x0, 0x0, 0x101}, 0x2}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001f00)=""/216, 0xd8}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/57, 0x39}, {&(0x7f0000002140)=""/144, 0x90}, {&(0x7f0000002200)=""/40, 0x28}, {&(0x7f0000002240)}, {&(0x7f0000002280)=""/200, 0xc8}], 0x7, &(0x7f0000002400)=""/246, 0xf6, 0x39}, 0x9d9}], 0x8, 0x0, &(0x7f0000002700)={0x77359400}) r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0x1ff) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500), 0x8) prctl$intptr(0x18, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x400, 0x0, 0x0, 0x2, 0xfa2}) 03:35:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x3f00000000000000, 0x0, 0x0) 03:35:09 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:09 executing program 6: pipe(&(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @remote}}) 03:35:09 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000180)={0x10, 0xe437, 0x750000000000}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r2 = getpid() ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=""/4096, &(0x7f00000013c0)=""/93, &(0x7f00000012c0)=""/227}) sched_setscheduler(r2, 0x5, &(0x7f0000000200)) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) 03:35:09 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffff9c, &(0x7f0000000080)={0xb52}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$PPPOEIOCDFWD(r2, 0x40085112, 0x0) 03:35:09 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x48, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x4000100000008912, &(0x7f0000000280)="88f96234488dd25d766070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082002, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)={{0xffffff92, 0xffffffb0}}, 0xff8f) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x70c5, 0x0, 0x102d, 0x18}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000611004000000000001000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xf00, 0x10200) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000080)=""/102) 03:35:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="4100080001000000295e0000050000008ca9000006000000040000000500000003a6c3bece6c2bff9c1cff0000000500000001000000"]}) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f00000000c0)=ANY=[@ANYBLOB="180005bb483af3227bcba9c382e3667e0000090000010000001ec7", @ANYRES32=r2, @ANYRES32=r1], 0xffffffffffffffc2}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x1000}, {r0, 0x8}], 0x2, &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f0000000380)={0x9}, 0x8) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x2, 0x9, 0x1, 0x8, 0x1, 0x20, 0xfffffffffffffff7}, 0x1c) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:09 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x7a00000000000000, 0x0, &(0x7f0000000440)}) 03:35:10 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8001, 0x2000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000bdb000/0x10000)=nil, &(0x7f0000be1000/0x4000)=nil, 0x10000}) r1 = getpid() setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x100, 0x4) sched_setscheduler(r1, 0x5, &(0x7f0000000140)=0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 03:35:10 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/ipc\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000380)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x20011, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x8000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)) socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'team0\x00'}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x191001, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt6_stats\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) keyctl$set_timeout(0xf, r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/psched\x00') ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000280)={0x87, 0x5, 0x3}) [ 355.853481] binder_thread_write: 10 callbacks suppressed [ 355.853494] binder: 16615:16620 Acquire 1 refcount change on invalid ref 0 ret -22 [ 355.877384] binder_thread_write: 11 callbacks suppressed [ 355.877395] binder: 16615:16620 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:10 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xac930200, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:10 executing program 5: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) r1 = open(&(0x7f0000000340)='./file0/file0\x00', 0xf0, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)='$wlan1\x00', 0xffffffffffffffff) r2 = add_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000400)="2909cf94f893e464302f6e28c142c537022a0d35c396ca4758893f23df01de2f0a3742a94fa082ddab912162f9b6207ca9a10c6e11a385f5ed3f0f1d1c5a909108a9dbe187b33a67c7726d4facde85cb009aec49ac176d3dc72ce3ed084e7ef490a0a23620c2b56ac7e072c4835635edc77ccd9c5b80e5ab39fccabca960a60bdc6ca97b087cb9ec4d68d0e559654a4834059894bbb66c29eea92260af81ee158092ac3d7219eea138cab3692a25fac7997a076635616570e36d38a3965f388e2a2d0d68c69b32b446af52", 0xcb, 0xfffffffffffffffc) keyctl$negate(0xd, r2, 0xf8, r2) [ 355.907681] binder: 16616:16623 BC_FREE_BUFFER u0000000000000000 no match 03:35:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x801, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078163030303030303030303030346532332c6d01007a653d3078303030303030303030303030303030312c6163636573733d757365722c00"]) [ 356.025220] binder: 16632:16635 Acquire 1 refcount change on invalid ref 0 ret -22 [ 356.027981] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize [ 356.039870] binder: 16632:16635 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:10 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/ipc\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000380)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x20011, r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x8000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200), 0x0, 0xfffffffffffffff9) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)) socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'team0\x00'}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x191001, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt6_stats\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) keyctl$set_timeout(0xf, r3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/psched\x00') ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000280)={0x87, 0x5, 0x3}) 03:35:10 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x2630440, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 356.181158] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 03:35:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x4003002000000000, 0x0, 0x0) [ 356.246380] binder: 16653:16656 Acquire 1 refcount change on invalid ref 0 ret -22 [ 356.264899] binder: 16653:16656 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000000000000000000000000000100000004000000000000000000000000000000000000000a0000000100000000000000000000000000000000000000f2db3eaffd431e95b9bc77f8fdca5bfe7a59c223fc478e683d3c622cf0c5efe386dafb63be30e9e0e925606dd0553ce92e188f4377564cc87b13f393c6d2df10cca8d1bcc93a65fbf8654ba922514f752d64b76a946bdea330e0d35b"]) 03:35:10 executing program 1: r0 = socket$inet6(0xa, 0xa, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=""/183, 0xb7, 0xfffffffffffffffd}, 0x6}, {{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000600)=""/35, 0x23}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/156, 0x9c}, {&(0x7f0000000800)=""/51, 0x33}, {&(0x7f0000000840)=""/4, 0x4}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/37, 0x25}, {&(0x7f0000000980)=""/180, 0xb4}], 0xa, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/21, 0x15}, {&(0x7f0000000bc0)=""/72, 0x48}, {&(0x7f0000000c40)=""/156, 0x9c}, {&(0x7f0000000d00)=""/59, 0x3b}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000000e40)=""/6, 0x6}], 0x6, &(0x7f0000000f00)=""/103, 0x67}, 0x401}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)=""/245, 0xf5}], 0x1, &(0x7f0000001140)=""/4096, 0x1000, 0x1}, 0xffffffffffffff1b}, {{&(0x7f0000002140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/30, 0x1e}, {&(0x7f0000002200)=""/185, 0xb9}, {&(0x7f00000022c0)=""/40, 0x28}, {&(0x7f0000002300)=""/125, 0x7d}, {&(0x7f0000002380)=""/54, 0x36}], 0x5, &(0x7f0000002440)=""/62, 0x3e, 0x6}, 0xc4}], 0x5, 0x40, &(0x7f00000025c0)={0x77359400}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x100, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000002640)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002600)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) r6 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x400000) ioctl$BLKRRPART(r6, 0x125f, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000002680)={0x6, 0x118, 0xfa00, {{0xffffffff, 0xa000, "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", 0x14, 0x8001, 0x400, 0x4, 0x100000001, 0x100, 0xffffffffffffffc1, 0x7}, r5}}, 0x120) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000200), 0xc6, &(0x7f00000003c0)}}, {{&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr}, 0x307, &(0x7f0000000680), 0x0, &(0x7f0000002000)}}], 0x2, 0x8000) 03:35:10 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x2000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:10 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:10 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f69705f76735f73746174730043e0b1e29b33446147a892467c7e6fbb5b0871ea162b6df6893746f608a2727d42b48062a632e739aaddbe3a0a9c8122938d880bd20e8458ba8a27a37cca5df159b6a79fedf54071bb6ada5bd8f0cfcceb01cff7cf") bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f0000000780), 0x1000e) setsockopt$inet_tcp_buf(r1, 0x6, 0x3d, &(0x7f0000000000)="49e3694dbd391c075e2715a75a053ddb6bad033240a8365209754e4334014d8cc55c05bc85c77a11167dfb751422e1424bbbd4894d9235a221deba47", 0x3c) [ 356.620040] binder: 16671:16672 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:10 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@remote}, &(0x7f0000000180)=0x14) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000100), 0x0, 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0), 0xfffffdef) [ 356.668912] binder: 16671:16684 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:10 executing program 6: openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x6b6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x300) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x101000, 0x0) 03:35:10 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x48000000, 0x0, &(0x7f0000000440)}) 03:35:10 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x400c630f, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:10 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sched_rr_get_interval(0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x7, 0x7, 0x7}, &(0x7f0000000400)=0x10) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8000, 0x141000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000004c0)={{0xfffffffffffffffc, 0x8}, {0x16e, 0x2}, 0x10001, 0x2, 0x90b}) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="809934b108832415243f49a936f7a035e017a99a25d8f2cb497555dba9ed810ec1e3ee92fff7665b9bf759b17318f5a9ba8c125ea8c425abc9a15a3282b5ff86f79aec93bf7c6574a25ff10397c644a05be53371e10c99a1e3913f97dcd4", 0x5e) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000480)) ioctl$KDSETMODE(r4, 0x4b3a, 0xfffffffffffffc00) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) open$dir(&(0x7f0000000200)='./file1\x00', 0x4002, 0x0) fdatasync(r1) connect$inet6(r0, &(0x7f00000000c0), 0x1c) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000300)) clock_nanosleep(0x6, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000240)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e24, @remote}}) [ 356.812104] binder: 16694:16697 BC_FREE_BUFFER u0000000000000000 no match [ 356.844175] binder: 16700:16701 Acquire 1 refcount change on invalid ref 0 ret -22 [ 356.873316] binder: 16700:16701 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200002c0, 0x0, 0x0, 0x200002c0, 0x200002c0], 0x0, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x20000540, 0x0, 0x0, 0x20000670, 0x200006a0], 0x0, &(0x7f0000000180), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1b, 0x0, 0x0, 'nr0\x00', 'sit0\x00', "6272df0a00000000000076655f3000", 'rose0\x00', @link_local, [], @link_local, [], 0xb0, 0xb0, 0x100, [@time={'time\x00', 0x18}]}}, @common=@log={'log\x00', 0x28, {{0x0, "085c8830d25f52f01d341ff23dbdfe7eb254a6539781e07e20d624437901"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x208) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x6, 0x868, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f0000000000), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x13, 0x21, 0x88e7, 'bridge_slave_0\x00', 'veth1_to_bond\x00', 'bond0\x00', 'veth1_to_bond\x00', @link_local, [0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x128, [@state={'state\x00', 0x8, {{0x6}}}, @devgroup={'devgroup\x00', 0x18, {{0x9, 0xabde, 0x6, 0x0, 0x3}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"888729306a3797671b7036ba3bc258b1399e467b0f0ddf7e2237e968526d"}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x1d, 0x8, 0x8137, 'sit0\x00', 'bridge_slave_0\x00', 'irlan0\x00', 'ifb0\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff], 0xa8, 0xa8, 0x120, [@mac={'mac\x00', 0x10, {{@local, 0x1}}}]}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x1984, 0x5, 0x1, 0x0, "c39249ba8ad72a73a68c953b4d6a16df90c139e86cea402fb4bf941efe30cd6592f58fedf3718405ebed6221a415272858e79aa09dd72fe07ca2d0617120d0e8"}}}}, {{{0xb, 0x21, 0x88be, 'erspan0\x00', 'bond0\x00', 'bridge0\x00', 'vcan0\x00', @empty, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @random="fc0f7b044038", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x70, 0xe8, 0x118}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xffffffff00000001, 0x8, 0x8, 0x1, 0x0, "83111ce2b08c2fb127d98b63db73fefb4047e022ff1e9bde949be059104f9e4ff595706f4cd998252d893c50b77f6e38f7ecc1ebf7b0f177488a2decd1bb9605"}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{{{0x5, 0x75, 0xa00, 'bridge_slave_0\x00', 'ip6_vti0\x00', 'vlan0\x00', 'team0\x00', @dev={[], 0xe}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xa0, 0x118, [@state={'state\x00', 0x8, {{0x80000001}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x100, 0x80000000, 0x7, 0x0, 0x0, "f09d475275815ea3fe108db8beaad0138523715b7519d4de93a8148e7ed663a77e162bbf8ca212a31d405e4a5bb49df048571dc52559cc2add9ca4684d032bfb"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{{{0x15, 0x7a, 0x0, 'bond_slave_0\x00', 'ip6gre0\x00', 'bond_slave_0\x00', 'gretap0\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={[], 0x18}, [], 0xe8, 0x180, 0x1b0, [@statistic={'statistic\x00', 0x18, {{0x1, 0x0, 0x0, 0x8, 0x8, 0x9}}}, @cluster={'cluster\x00', 0x10, {{0x3d0, 0x78a, 0x9, 0x1}}}]}, [@common=@log={'log\x00', 0x28, {{0x401, "59752254f489956feaffc0dce10330a5b17ce06c6d2932372dd3d5f9d181", 0x1}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x8, 0x17baa00000000000, 0x7}}}]}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}, {{{0x5, 0x40, 0x6, 'teql0\x00', 'veth1_to_team\x00', 'veth1_to_bridge\x00', 'bcsh0\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x12}, [0x0, 0x0, 0xff], 0x120, 0x150, 0x180, [@owner={'owner\x00', 0x18, {{r1, r2, r3, r4, 0x1, 0x1}}}, @rateest={'rateest\x00', 0x48, {{'syz_tun\x00', 'team_slave_0\x00', 0x32, 0x3, 0x1, 0x4, 0x1f, 0x7ff, 0x10001, 0x6}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xff}}}]}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}]}, 0x8e0) [ 356.977025] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 356.988794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.998312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.043012] cannot load conntrack support for proto=7 [ 357.052882] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:35:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x4000000000000000, 0x0, 0x0) 03:35:11 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x10630840, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:11 executing program 5: socket$inet6(0xa, 0x100, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='ip6_vti0\x00', 0xfffffffffffffffb) r1 = request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) r2 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000003dc0)=0x4, 0x4) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet_sctp(r2, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) write$nbd(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="6744669801000000040002000200000012c906d9ce998a41a4674c58d470a3eb8cb594603ba45fdd4170e9846a1a85aec43521b67003c10bc3014f494f9cd740286b21c8957f60c1b9e62b52095a1f328c1d4bdd73266c4341e0331c72f77a4f4815f9f5c9b8bd2bf86548e6c8d238ff6bff0fa4b5aa68e753f2d249cb2b38455438113eca72f9cbaec4b36b0dac0880c5fb225457840839a0b8e8280c594df6b513d07f341a5a2f508df2f520233255e32514644b180245e0b40e9e40a5f9d9f065022d7e5b3a89992fbc76b7690ff3aa132a245c18959f9fef18aa5c236f5be8095c616ef170fb80c8c707bfde31be6548ccf5908112635eef84628dfb274d0b4cf3103a242bb203db438252bafc7a9a545d47606808fbd59341b516cc339e0b876c3819a63b8dfacaa032f82cbb11d641ba825f811fa4dca401df19a4a9db3aab1a89362632ddbd8d913a6ffa5612d6d90ca117a93d0356f3c16eb4c87c4bf01375630910cdc402e0f6f9ef4bfe0c724ddc8480c8668500ef518c09d01857f562e36f531d5128d753e5ba821b0b4b4957a937d2614f435399800a5f43d28acf6990cbd5e34320a3facddd517174d6d63f15963287ff95cde0d3b9525f2419592069b7edd9ccf066cb759c906c1ad8a3b4ba860a1dca08fa54cdcd52211d5d3d1081ec54ccf02b5f591b688c54000e9566116b0d638d2a2513ea3133358531cc1f9acdea0f8854835af84aedccd720e504e7f552d4048a28732d1f875aa35f1d3f90fa90ef38d6e258294462c7c69290145f422bdc3a05cc9e47eff7ddabd4a291445b0246b57554b5294e2c1c0e3a9aba09283e46eb0247d63e86ffc331a04db3baf48e15f6ec44fc9451722b4e38ca6a92368ac107ad1828dfa5a7f5e974bca68e7fdc8c1618537315281529269d3556595b34b66a1f3fb63222092a7fec89647f765ea71a4603f142278400d71640d4cbc0bcebd035de4fefb3f7fb16c79c8b8a5e8f1868c41e6255c120e2381441c7c8b26e11b5f285f904e979ccaec0da7a5aa2e3585f65d9715d0690e4488128c1d94ab52266e546866893deb717080a54658b6957e083e5e6ec54690992f939f0e7e4637666acd9c4f32d526c894ed84e14da9f65ff28e74008cdbf76724dbc41afebe29a4b9945d4c825c42b8ece526f451ea774a930964db0ab4de6620e619eb992664e39c6af78e1dc52075f918c54b683c292a43363afde3a5c9204e7b61ae6580016812f06ea37214c3ccc8130f625a30ccb7b8a0d9a4884824cf7c98d605069b988a7a04f7aa6f2e5a2bb610c30ac6b310ec20c36e9f33678fcebeea051e0ca66711d7d4f13bf062964f7d1058bd2d83309c754b5a7b574b3e64da2d06da4e153f1fbd8183bb37d9973c8f2965cd313fcc5bbecc4e648473c134db91f1e4ce5714ce92a3abdb47daa8ab125d29935af20f537fd18ce85fd60be8bd05b6a787fe489c09871bfb2dcba347f2e8aa60ac0881831ecb7f68ffb28a73a57a0fa6c7117b0e7ec7db431342c1892dbd91041bd8148acb7a7a962f34ad816c00188f477eac70e761aa5d5052ea8dfadfc6c11caf7e5a8a37f53321ea92a274596734a0858c71dcda690cf6694fff222274714774838ed64882f2f9ae813cf5d959039508047d1482854893f622e20995bd2bc52af6ffdfb5578c8d20ff4dc561b1558eab21d1009e2756ff3f9aa9d39a15b466fdf5d5e617ae4653132789cc13b98c25c993bb7e07d954c5d6a9d5b09495fec806e6a0a4f4b2d64c8a7c010fd49f0b708ca67e4faa2f7095171bbffd61d9e94aa8d8c93ec1c7ce4387e81a1f2fa9e59f29bf12a164c08817df87686285ce5c908974c4edefac681d3bef349c0f6535879d23d0bb6e5bbdf08c8d76714d2fb9c4fca7715c05ddabac118759aba9cb35af7dfe72ef23d0f3c40ab61e1211466135dcecb4af45c06fa3e0fc0a1199ee35175405d9282687381848b33780093aa4eea6e58f0050daf5d8edd074cae63d632f71193d233395055f4c676e122ccdbafe1c529786795d9ffd726c53c8137146522a1e936ad7337541ad96f8569aad2991b7d565074b9c1afcb86fd91545488b34785618d644cb105b26dfef9cdb8603ccf2815c5c47ac519cfa96167e86a9ac9a608150a59caf120496b63211d2df55be9168c731be3962e824e5da9a028fe69fb1caa0ae300db830d9d7653a77dcc778dfb6346e0bd027d35644519569600c71df99324661aae441a4686e6e01cc966553f8d29d09d2e031c1c159087321ee10d9bb3a1507d1158644bca9a6c53d2637bec16e546c1c30c9dfe37323c8b8de6f7e78e63bbb40fe2b4738eee2cbfa9a4da8e714a4a78f76faa2cc58a19fa001b669a55446db93ee48aa76fe226bfa593b43fbd4a7adc9b449fccdc36e2aac0529aa8d4a0920d6bdf2e7f057238ee49de5c074a8db500a655fd4400b41bdcf5dbf2e29b23f704882843cb7820b89b68fffb8073c615947b4cedc53d5b8f5ef1b1bc16f95dee1903057bfdc9fbc2ba26ec7916061160d292c3303e47b93c3386e00d06269655905389282ceb974bfb6f6d49587a0c84c7660cb5853a378f3f3f2910c8b343c3750a60e7d2bf4f63b68281368704e370947e76ecda57832fd0d4d131bc2387ccc8a67f75d71becad26c7c96e9a2f9fbdcd624ad7e6edbc940badc4fe6c172d314f4240051385608f2155957d44356d5e8236e2a1a8bc4ee47f18227617992830065800378194d95d15964fe5ddb016a2487400fcff412a7eda199d739c6eb0888919dbef01adfd4b49be1e2165f3c9fc9907a9eeee211e101c40bf1fba9accf529822be030bd0048c62bdf494ad2a031a76217054a1827838fce5f118f52a6ff66e96f1264a65f286a0ed377e68e61f3c719da2b413a4b33d61f488d624cb3849727ad9d9fc3b1640fcca15e64579b50173f1f0f25be40ebd3afb7f3abe5df5836cc187ab37f08f0f07b0e51268d78bd898fd9094939a7b9fd7f288a4b925ead62b5c7e24ffc74b1252cbde8bd2f3f6b63f628ced281bc15ac8fc2e519a512a099506fe74d39943961823ac061b3f7ea34cc78a44b2ddcf690e9728f11699c870cc65029278e9c6aaee56d61034169c55f09741c4d111b0c7bf6a4eb997f0094b4a1d84cc79aae7e503d948a8a81b4714b96b6da2733e989d92fb605b0c9ae7e0c7bbc1d7cdd4ddeb9c11a4e9105e444ec982c57a5bbd7fa48e1917a9f8f405a708bedbf752c3fe62922839fcedacd839baa893cee9b890ae9bda87b4b86216e5ea6475a31b3733a7db57c50d7f002b42bec25f29d53df8e59eabf83f9884e9fd93f83ea884677db53d3ab376671fa74d482baddb80f0e66e2a138254a847b92c08e0bd7d344fc62e0eaf83e915cf2303f26e5052a0838a7380639c40e5485cfbfec1e55ba6acdb78419d91b602629d906a505f52185c8d4788a930373a4766df494b34b639a919278121ffa94f4da310583b22b80abbe6d3f801729858b0e316cdf7e4c3839bf41d344643e1a393dcef6fe79be39832fba2b153c01a1b7b304b48c9bca5f87c30bdf6fadfa3b1d2731b4ef1d64dacac2ccf7dc3732e7b936ea9dedcfadeb7f18ec9198c76f2ab53188ce7088ec009fab1900c6951f0d7f62569d779a8ae9ece7d2c807de0e6e1482ba750894367b50c4907a3cd536eaa3e52b3756cd56af9e9ba5b9393309569abaf602f044ce03b0c906aab3e43b8a0d71615e43941e8318377975b5191eb3ab7843ab9bb94c121f78d38229785b8a45e18a57edc384c9db6c4774d9649e1ba9a49c0fdefc4414fa55a0673c0d84013f7e60a51e1fb9752975b84f87dcba90eb6200fcce9efc850b548f11a19c6b8df2a13de6cd650227f55de399fc68d459c4f6712895ad51cdf44e6bd1962a7ee32cd9d61e66e6c7f8cebd903d66d59eb599a2e7d02c30e7f83b7d53f552febe64d7a534f8051844f3773571b2643e3a73517f95f311091cbf078b94e2358360ee2b49e62aa7bd4f86ae1dfc57955120a0c2f1aeed5351c1bed375c0017e0d8fd71d928f3632251113c82e7e51948a663bcfe8d2c363ad73118699e4874bb3d29996f52a81efafbafb4296f3292d52b31557910d0be77f83ba0c2220361d3064a4d51ad6e9f3f5ea008559f588fe794f4b8df90c777ddf61d8a969c632335d5e276a497edc93c9848a8bd6a973137374f6fcb452e260fcd8c98390575a88ac263f0c7d228e07a57241816e34790adf2ec78023e164cbd38f0a609d95e9d3c07729de94b55e46ea67bb9aacd385abb18aa40d06e07b245b084cc1a2361bd06948422c06967c8378948189cef565144c93b33f08aab7aa3099f0b1e474f2c98ec3c68283ec74725e42567e485fd947749e9a2bfa40e4a366f6d3b56849119397f3d753c6a53a881eb14881df542faf7948adff4e477e5396ffdcd694255b88c6722072b986bf931198f22a722a7c4fbbde88cb1fc49b09dcb05a1f000000bf4c603278ad2e84a572696fa1dfeb28152b9e79278f90df7e29713bc416d4325d3564f331b8316244d38e00744f22ff653db3f9e1604c6e2161cd345492805d574efd82675d1296777f80f000fc060c73a660d2b74f29be4853b892b954f05df1656a73a90a7ace28509d6b77a8116f4e71dc21ce7aa4945a8bff61113b130f932fb2ca236dacfe9bded131c179f2bdf78bfa33a52c02651b80fda0d518df96027fda85547cef771dad588e4d957d715b9de788bcf3ab8121c42c36a4ea1af503c657cb730218a6cb6a5ec49046a5b0e6314c8c793b96d26b6f16edc5d5d4a62e6ddd205233464c96988a761147468a99c33ac49f07ad97c9b0d0a07ebf555f00b0a90ad1b1496c5859635e78a3b22c0bdfed2223269a81d567303de461e16936a403bc0cb6c5c2048f3d3969436869bdc47133dc037c9410b7e5159958d66eb338d64aee0be23c1edb5c0fcb47bbaeaf0a6455137568f916fa398d122133233dd84a35ec8e391cb433533eebaeddeed741b1f76db681f7ad892946d43eda44ccac98476b4c57375edf158b38bbaf27830725ae7e76500cfa73a754c219d47a6a1ecb07b1c7ba0a0b8ec27e0e0992e97630475aa835e0ba4aadb7b82be37f5032d2c7c61d7251f26c887fc6e27870c5a78e6a65d2537d3d02d3b72067c761761a2e74789310b81a4a00f1a0bbbb3be8f3c1201c29fcebf17d2f883b5b86390f195c89bc478c7b20f60b064fe8dd989cd39f4ad5041196edd24f2c19c7c1b446c3feb741e8c96123a087afb21c399190e37e52020b53351959046b13ce8f9ef0302fe4e3ed62c310a5a9aa0f88c4d4252992c0a169b3a7eb18ce35036b62027bfb103ddc0241f90e6c7f6ada6cfd49494fdc5171c47c6db746256e1854c0e13b243b35e2b09e19c6cb3c8a9d95f73d3f8280a579a8b7bb78992b14691db818077580898d0c900cc88b7a63a751c8264720caf08256da86025dc3207bd3fe67834fe1a4f0652303080be7182f603d52cdc20ef49541c106ac7d6bea9102f68803f55a598ed37e52191bd305799959855902156219a49576d39b47a0c6b99b523e68cd4775991874099ed5bed6d1d9f894ad01e546b0f30d9de42242ab3903d39c632b6bbdd71db861573114bd5f6d729b770f8b317c7f9bcc93b7747588f0e0bffec19fa43651a0cbb1e37b7d5b141a38b46bf384ea9bfa8dc0764928cedd24d5d6d39c9252b21f00447b2dada71e8e0e5ae83261039dc3cf759cbc4f3c4d677fee52985d288a3f7247845fd85cbc299eff956f11"], 0x1010) memfd_create(&(0x7f0000000500)='/dev/vcs\x00', 0x0) [ 357.134651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:35:11 executing program 6: openat$full(0xffffffffffffff9c, &(0x7f0000000480)='/dev/full\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x6b6}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x300) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x101000, 0x0) [ 357.207954] binder: 16724:16725 Acquire 1 refcount change on invalid ref 0 ret -22 [ 357.229380] binder: 16724:16725 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:11 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x3630840, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:11 executing program 1: mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000b40)=0xe8) stat(&(0x7f0000000500)='./control\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() stat(&(0x7f00000005c0)='./control\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./control\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000740)=0x0) stat(&(0x7f00000007c0)='./control\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = getpid() r11 = geteuid() setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000003c0)=0x6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000100)=@file={0x1, './control\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)="53848565763d2eac873c5ec5a473532e4f44ec871eb9d5a6c7d680348a7ecc5f6701e1154967a362522576d6502142710c3d84e4c332428168af6421fa1b535cb0b31013eb2620c1c22143f98eb7eaecbc57b03aa02267f451e66d3fd39fc3b4600bf52b434aed41297f1008f5d4282f1352fde3a0e3bd90e478669bf7899d3c77ab78547c1ab540700ebbb131ce48442f48e442ad39f2fd21565c44c002a5c5afb4136752effbe4deb57c42f6f4275d75d46ecb5b5ee2c77a0c5a26012cd6a88733556d7546808cc08c4e", 0xcb}, {&(0x7f0000000300)="040690962ef4ee12fc4c858892caff1f54acf8618aea07d2f85b261eb628ad88f5b9a520a06641f9657e867ee3ffee8f2c052e76aa68eb4931d5f2d40dafc8600172b4622a564e200b65233ec6f397fc49c0277277120883b59112ca08f7b217c887489398d81ced9f870ab43f10f6d84eb26483c22212a333d4e18e952ce73ef1c6492f2ac2291ced9bdf0630d2faa69c87a9a1f69d73981bb5f3cf05a1ce5a45afd5", 0xa3}], 0x2, &(0x7f0000000900)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0xc0, 0x24048000}, 0x8000) mknodat(r0, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) [ 357.344354] binder: 16735:16736 Acquire 1 refcount change on invalid ref 0 ret -22 [ 357.353282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.361288] binder: 16735:16736 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, &(0x7f0000000300), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0xffffffff, 0x100, 0x4, 'queue0\x00', 0x4}) ioctl$KVM_NMI(r0, 0xae9a) 03:35:11 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4800, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x82) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c, 0x1a, 0x701}, 0x1c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:35:11 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xd63, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 357.615897] binder: 16754:16756 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000080)=""/167, &(0x7f0000000140)=0xa7) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x201, 0x0, 0x0, {{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@multicast2}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 03:35:11 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0xe00100, 0x0, &(0x7f0000000440)}) 03:35:11 executing program 6: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x40, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x194) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000800)=0x1, 0x4) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340), &(0x7f0000000540)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0xffffff43, &(0x7f00000000c0)={0x0, 0x0}}, 0xfffffffffffffda7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0x6, 0x8}, 0xc) [ 357.669092] binder: 16754:16759 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:11 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xb63000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 357.763499] binder: 16764:16766 BC_FREE_BUFFER u0000000000000000 no match 03:35:11 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000100000000000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001200140001006272696467655f736c617665000000000c0005000800050001000000"], 0x44}}, 0x0) [ 357.850316] binder: 16777:16778 Acquire 1 refcount change on invalid ref 0 ret -22 [ 357.876225] binder: 16777:16778 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 357.902030] netlink: 'syz-executor5': attribute type 5 has an invalid length. 03:35:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x20000340) 03:35:12 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) close(r2) close(r1) 03:35:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="f8b71218000000fd0000000001000020", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xf62, 0x501000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='^\x00', r3}, 0x10) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:12 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x3000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086610, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x509000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x335, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)) r4 = msgget(0x1, 0x20) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) msgrcv(r4, &(0x7f00000001c0)={0x0, ""/2}, 0xa, 0x0, 0x2000) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 03:35:12 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x20}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r2, 0xfffffffffffffff8}, &(0x7f0000000380)=0xc) waitid(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) mlockall(0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x11, 0x6, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000003c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) socket$unix(0xa, 0x3, 0x3a) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r5, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) 03:35:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x44004) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=""/147, 0x1000, 0x800, 0x80}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000008000000000000000000b0402c52b04b2e28f3a972684699bd3415d4549553a13b3d65e3f4f2d533b1ae8a7ee08d7e1a1740de72c42e42fee5879bdbf05e3313860efe23e0b45be96dfebd41150e69b1243ca0f0c9baeb98f4443cfaa7f3628ce57fb2e8d15a89c678c455afb13d0a04d0ca3735191b8f57ef0fec3b887a30b4229325300b5e107455ab74fc084814d859adbb180c560e4e1080f88c9ebf314ea9cb9db730564c4cccab731989459ae60634", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000280)=""/171) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 358.035375] binder: 16789:16792 Acquire 1 refcount change on invalid ref 0 ret -22 [ 358.055728] EXT4-fs warning (device sda1): ext4_resize_fs:1916: can't read last block, resize aborted [ 358.104214] binder: 16789:16792 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 358.120279] EXT4-fs warning (device sda1): ext4_resize_fs:1916: can't read last block, resize aborted 03:35:12 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:12 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000340)={0x1a, 0xffff, 0x0, 0x0, 0x0, 0x401}, 0x10) bind$llc(r1, &(0x7f0000000040)={0x1a, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x0, 0x8, 0x0, @dev}, 0x10) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) 03:35:12 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7400, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x0, 0x7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x10c000, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000b4d12b594ab5408c009e7b00", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) socket$inet6_dccp(0xa, 0x6, 0x0) 03:35:12 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x304, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}}, 0x1) connect$bt_sco(r0, &(0x7f00000001c0)={0x1f, {0x400, 0x1, 0x0, 0x5, 0x400, 0x6}}, 0x8) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x933, 0x81, 0xa8dd, 0x2, 0x5}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) poll(&(0x7f00000002c0)=[{r2, 0x204a}, {r2, 0x40}], 0x2, 0x6) r3 = getpid() prctl$setptracer(0x59616d61, r3) unlink(&(0x7f0000000300)='./file0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xbc, r1, 0x600, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x1) bind$bt_rfcomm(r0, &(0x7f0000000540)={0x1f, {0x5, 0x4baa, 0x80000000, 0xffff, 0x3, 0x275a9746}, 0x7}, 0xa) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb8, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000000000000}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8040) syz_mount_image$hfsplus(&(0x7f0000000700)='hfsplus\x00', &(0x7f0000000740)='./file0\x00', 0x9, 0x3, &(0x7f00000018c0)=[{&(0x7f0000000780)="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", 0x1000, 0x6}, {&(0x7f0000001780)="7ec11622704fbe4d78042613880999ab4d51042ae8758e39a571bb4c1e90922477f35fb20bb6388b004aff11bb51bafd7d1d0242eca05c5d7c12aa7a7eecb2f131", 0x41, 0x4}, {&(0x7f0000001800)="657401b1e175e74711ee33cb13188549e7d5942b2335495dc522eb4c681e30988281e6387f4d376d3487f6fa3480733bd3a5937e37280cc711ae3a2a7f59fe073225745a75f431dbe85a43df090444e9a31013f10bcef38ec6664f29cb1b50b19b70356ce533747c4c80bc746b3a7e11ef703d1988912954c2d9de8946932b8aaf106de078a7581094607b47952a80ed32", 0x91, 0x100}], 0x10000, &(0x7f0000001940)={[{@force='force'}, {@umask={'umask', 0x3d, 0x10000}}, {@nodecompose='nodecompose'}, {@force='force'}, {@type={'type', 0x3d, "53b219f5"}}, {@umask={'umask', 0x3d, 0x7ff}}, {@part={'part', 0x3d, 0x101}}]}) sendto$llc(r0, &(0x7f00000019c0)="9aa3f7f2097b5dbe3de31ca51e4b82406472686069e7ceacd6d4e94a9933f5ab135bf8b6ec8c3afbc432e5cf94224e310b19093db92dee08034ab1ac622883e3d401b95a2d1fcee7882d9de75f730322091f627071a7bac5d6ce3e2e6b03a5092ec07c7a763450f2b8af02e67ac2a4462568a69030e3ff9de6b8c49faf37079f12fcc035342d510b55c8e8d76f27331d67ac7a89c366e533ae28adaa7471d55b208c97b83798f002", 0xa8, 0x8005, &(0x7f0000001a80)={0x1a, 0x305, 0x6, 0x1, 0x85, 0x20, @dev={[], 0xe}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000001ac0)={{0xfff, 0x8}, 'port1\x00', 0x80, 0x800, 0x800, 0x9, 0x31, 0x1, 0x10000, 0x0, 0x6, 0x35}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001b80)={0x0, 0xff, "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"}, &(0x7f0000001cc0)=0x107) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001d00)={r4}, &(0x7f0000001d40)=0x8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000001d80)={'IDLETIMER\x00'}, &(0x7f0000001dc0)=0x1e) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001e00)={0x0, {{0xa, 0x4e24, 0x5, @ipv4, 0x80}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001ec0)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001f80)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001fc0)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000002040)="99368467bb45781c67601e24706dc9c5fc65975e67081a1d68d7a626f1767368ebfef6cb9b4d8b108a1f53b28cf4e64905edcae77cdebba51d6074b7e9555bc2ec7d97144c1110e6aa5db1e8577da78027ebd09ede5943f13f741d1ee68ac0b204781f9b6cdfb99238b0c084e1ce5d9c5cebec45ff42b1d828a38136760fae296aedc84d5e13881f2dea2126d4e47e8fba4af0bcb5ea2fe9d9c2") 03:35:12 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x20}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r2, 0xfffffffffffffff8}, &(0x7f0000000380)=0xc) waitid(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) mlockall(0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x11, 0x6, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000003c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) socket$unix(0xa, 0x3, 0x3a) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') readv(r5, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) 03:35:12 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x7400, 0x0, &(0x7f0000000440)}) 03:35:12 executing program 6: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000600)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000100), 0x4) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) read$FUSE(r0, &(0x7f00000015c0), 0xe25) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') 03:35:12 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7a00, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 358.663457] binder: 16837:16838 BC_FREE_BUFFER u0000000000000000 no match 03:35:13 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffffff0000, 0x101000) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xfffffffffffff9f1, 0x1) r2 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001640)='/dev/uhid\x00', 0x802, 0x0) r4 = syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x4082) sendmsg$unix(r0, &(0x7f0000001700)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="4c82539f0e98040ca560efb71056641e1ed041296aa2794a20bb82179f9ac0cfe3b5ed58f8ce401d0c28e13e627be06f1c822f93ff97658558c9e7360570e35fbbd986621f80b1ee9ee372b428175430349152e0b3001088610bb06ff7737ec38eee1358cf625edc3f2ab813d7c07d42f5eb5d637ede79aaf752b3b89345f9f3d096d637eaf3a5e77c31dec620ac0cd35b94b72594942aa59cc8e02684e28865f9d82765aac8ff99c389f4a37ca7236639e51ce24b100d62dcee91ed61408187d1f45db91b33f854b8b2b64c0ce1d304a824171f0caaf5e887fea5c6e9d353342ad989e5", 0xe4}, {&(0x7f0000000240)="f532bfe08b348c0ead2740ca5a0f6bcd8d3f62acc2bca0532a9c9ece95741ee9ccd690b977c4fdadba224337b07ad724e249f4b7460ab436203625c6082384c24eac584138abc4395e2ef6ce02948aa921c14f9c9a1af7d26034cb7cf8bb206317b8b8c6362f7c3cee3ce44257b9756bc3ee19386471c9bef73b69b330d443de9625e1", 0x83}, {&(0x7f0000000180)="cbdb856808b7ff9902fb5091e3ac3d02a824a8d2cf4a7b868f4b507373dcf8137e2f7da9", 0x24}, {&(0x7f0000000340)="fd73f8531248faee2fb39e09cf727a5bec5018a6fda46dd7d3d5902c5d10fb17b5ffe0e623ba5dda440e18d22329b76adc40b5c2bbe1ef9937ce858f56e2bbab429a92c09ffd82", 0x47}], 0x5, &(0x7f00000016c0)=ANY=[@ANYBLOB="52614adf319b5b76184558ca78", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0x20, 0x8000}, 0xc044) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000080)={0x30}, 0x30) 03:35:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x100000000000000) 03:35:13 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40106309, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x10001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) sendto$inet6(r1, &(0x7f0000000080)="4ef2b24fac9dd5d0ffd81a6931d5b8bdfaed3964305bf94480ee1af8d257bfaa77d46a1db3a78bc8771bdbe121d986da571671596e04a5b68435786e57e4946f70be8b442b0426e99ec86acafce5b348b37dc4d00be81907f572a064697d365c6d1d969ee6690817b81c865588d3ca13ff9ca7581c997ebbef847714910e194e37b8f5313ff202b01abfa77525e4c00cbdedb29e3263d18e0efc5d43a931970cda51ac946bb5a6e822013f498e257a7737bc193147616aecfdace0ad2510ebead42ea8063fc12597cdd624f25ef7af2a0b7011e3c7821011ffb3de9c65c8e178e2c87eca448c5f8008e92efb6b44d53e1d2d62c733", 0xf5, 0x4000800, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x1a}, 0x6a4}, 0x1c) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, &(0x7f0000012ff8)='./file0\x00') madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x20000000000009) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) fallocate(r2, 0x0, 0x0, 0xe439) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:35:13 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xffffff7f00000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:13 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r1, &(0x7f00000000c0), 0xff) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000000)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r6 = getegid() r7 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getgroups(0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee00, 0x0, 0x0, 0x0]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setgroups(0x9, &(0x7f00000004c0)=[r4, r5, r6, r7, r8, r9, r10, r11, r12]) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 03:35:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={&(0x7f0000000040), 0x3, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="b8000000210023020000000000000000ac1414bb000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00100000000000000000005c00110000000000000000080000ffffe0000002fe800000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000000000000000"], 0xb8}}, 0x0) 03:35:13 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:13 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xa63084000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r1, 0x43) umount2(&(0x7f0000000080)='./file0\x00', 0xd) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000000)='u', 0x1}], 0x1, &(0x7f0000275000)}}], 0x1, 0x48084) shutdown(r2, 0x1) 03:35:13 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x2f) close(r0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10001, 0x40000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x100}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x841}, 0x8) 03:35:13 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x3}) 03:35:13 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x8) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000200)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1fc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:13 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x5, 0x0, &(0x7f0000000440)}) 03:35:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="e4ffff00000000000000000000000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:13 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xffffff7f, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x40, &(0x7f0000e4b000)=0x0) r4 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x88800) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000100)={0x2, 0x9}, 0x2) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) [ 359.554614] binder: 16896:16897 BC_FREE_BUFFER u0000000000000000 no match 03:35:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x40030020) 03:35:13 executing program 6: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x10000, 0x100) write$P9_RCREATE(r0, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0x4, 0x2}, 0x5aef}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$P9_RWALK(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="623a352cc748"], 0x6) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:35:13 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7a000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x4c}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x8}, &(0x7f0000000180)=0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r3, &(0x7f00000066c0)=[{{&(0x7f0000003700)=@l2, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003780)=""/4096, 0x20004780}], 0x1}}], 0x1, 0x0, &(0x7f0000006780)={0x0, 0x989680}) 03:35:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x10001) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000b80)) 03:35:13 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7a, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:14 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6800000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:14 executing program 6: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000580)='/dev/bus/usb/00#/00#\x00', 0xc4a, 0x3415c0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x4, 0x6, 0x6, 0x80000001, '\x00', 0x8}, 0x1, [0xd65, 0x7f, 0x20, 0x8, 0x3, 0x401, 0x8, 0xfffffffffffffffb, 0x40000000000, 0x10008, 0x3, 0x400, 0xa1, 0x80, 0x4, 0x8000, 0x633f3371, 0x7fff, 0x6, 0x6, 0x10000, 0x40, 0xfffffffffffff75c, 0x1, 0x6, 0xc00d, 0x6, 0x9, 0x100000001, 0x8, 0x800000000, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x66d4793e, 0x3f, 0x100000001, 0x401, 0x3, 0x1a, 0x2, 0xfea, 0x401, 0x4, 0x3, 0x87c, 0x193a, 0x9, 0x9, 0x8, 0x6, 0x3, 0x100, 0x7, 0xb3, 0x3, 0x718, 0x5, 0x81, 0x9, 0x0, 0x7, 0x1, 0x5, 0x80000001, 0x5, 0xfffffffffffffffa, 0x800, 0x9, 0x3, 0x5, 0x40, 0x400, 0x1, 0x7ff, 0x7, 0x5, 0x1, 0xd4d, 0x3, 0x9, 0x8, 0x2, 0x9, 0x120, 0xc557, 0x7, 0x100, 0x9fe, 0x4, 0x2, 0x7, 0x4, 0x6e, 0xaa22, 0x7, 0x7, 0x9, 0x3, 0x3f, 0xaa8, 0x8000, 0x8cbf, 0x5, 0x80000000, 0x4, 0x1, 0xa8f, 0x8000, 0x4, 0xc9, 0x1, 0xffff, 0x10000, 0x1805, 0x400000000000000, 0x2, 0x1ff, 0x5, 0xbe5, 0x6, 0x0, 0x2, 0x9, 0xf7f], {0x0, 0x989680}}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) futex(&(0x7f000000cffc), 0x8, 0x0, &(0x7f0000edfff0)={r1, r2+30000000}, &(0x7f0000048000)=0xfffffffffffffffc, 0x0) 03:35:14 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4e00, 0x0) fdatasync(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='cpuset\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x400000, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x6) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000080)) 03:35:14 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:14 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x200000000000000, 0x0, &(0x7f0000000440)}) [ 360.361322] dccp_close: ABORT with 1063 bytes unread [ 360.421297] binder: 16940:16941 BC_FREE_BUFFER u0000000000000000 no match 03:35:14 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:14 executing program 4: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = getpgid(0xffffffffffffffff) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)={0x3b4, 0x1, 0x500, 0x70bd2b, 0x25dfdbfc, "", [@nested={0xa4, 0x4b, [@typed={0x8, 0x4, @ipv4=@rand_addr=0x7c}, @typed={0x98, 0x4b, @binary="0047eb56c947df73af66d5904c96aa40a64b404710d30b83923eab2ce5dcc57299665645f015f84f02b5ab0ceee83279bb375e767a1fe1b5388b9a1cb39390c1d42d8f92810e895e1813ab7d666f9631074d13d80cba0e768ec00a15edcc972162967d82769df8a249622d03fe4b546fac9c98c264ba6a22cdb7af4ec77b71e6884bb6cfa17373c22226e9f1d6fb41c4bf100e"}]}, @generic="d92e44eb31260c1097a75090d05b0122863fc8122b65462e38dbaee396d824313cfb335f3bb87d1e64fd813ce4d0a48888bc", @typed={0x4, 0x85}, @nested={0x2c0, 0x25, [@typed={0xe8, 0x47, @binary="7126781db2cc032efb33cd65a1cce51403bed102623afff79e083ed8a8acdc1743a20d0b98a0bd2803f396d10a0fc6449013c1a4f8148c16c4cdbacc67e79ee260f47ea37894be11113e1bd0a19b422210f45315c8377b56f34a7c0fe6d24ff17f57140e7e0bea6d9839e8fb0a8d17338df98ddb5f9f6760f11c93eccc9d5363dc38216e596d35a77bd19328659b2830570480f02bf6b354f67cab66bbf60e9d28eaa00d30924cf82aa5bd6753bdb57c343bb4ce97a7edb24f228e8664ba9e613d7629e6ce9dde1763b3422ec8f5f7686eef639315c9bdd81c60e803460890f6ecb6c982"}, @typed={0x14, 0x1a, @ipv6}, @typed={0x8, 0x4d, @str='.\x00'}, @typed={0x18, 0x8b, @str='vmnet0^-*:!}vmnet0\x00'}, @generic="833924f26c396db045d2348e1a21ffd53cae70fc41a040cd92a3ebce5f078b1bd6cee2a799ff090178de76f540713608733f42191cf50a", @typed={0xc, 0x25, @u64=0x8000000}, @generic="3d3527b681f2ce0c94812abef64c52d6449baedb926c912d1f3bfec5387fe5664a2adb024e0b414880d8b2b314d84406d37c236815ce7fa26f0341e1f9c9ed637e684d9a16a394445558967968e8a5405516c177438de47bb62c7a49cfba7b0d2ba3374ab648ddd35791d2186d48fd0fb2e8024e37dc308f6530ec5a8132331682780f35c6333aa171d188f12d19a3e87c6d648b7289685b90dd98c69d82932e5fa2edaf8b84a41258c19c04bd0b681bc7fd6b7e05bbbdf54d343953ddd3c3faee998d4ae6fc5bb55a2dc59ba8880788397956e1fb021c", @typed={0x4, 0x1c}, @generic="1cff8308aed7e37b27f1fc28c144a0323b40a5e3e6010a0eae90aa1af2cf2bf9524c7c41f06770fb794a40bf563e1ad2002a5335cebc91e2e90640a7f01e8255fbd90866acd661465bc8ce54970d1c53879ca9534e57fa54fa2691eba0912573edec1328b349bb6cba9376cba600112c7e3e53a1077f1c3239e2f12017aaedd698"]}, @typed={0x8, 0x4e, @pid=r3}]}, 0x3b4}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0xfffffffffffffffe) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:14 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6c00000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:14 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x1000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:14 executing program 1: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffff00000000) 03:35:14 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6c000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:14 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xc63, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:15 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4c, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 360.892780] binder_thread_write: 12 callbacks suppressed [ 360.892792] binder: 16980:16982 Acquire 1 refcount change on invalid ref 0 ret -22 [ 360.914704] binder_thread_write: 12 callbacks suppressed [ 360.914714] binder: 16980:16982 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 360.977947] dccp_close: ABORT with 16 bytes unread 03:35:15 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 361.013935] binder: 16984:16985 Acquire 1 refcount change on invalid ref 0 ret -22 [ 361.025889] binder: 16984:16985 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:15 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x100000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:15 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x48000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 361.150861] binder: 16989:16990 Acquire 1 refcount change on invalid ref 0 ret -22 [ 361.159475] binder: 16989:16990 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 361.272466] binder: 16995:16996 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:15 executing program 6: socket$inet6(0xa, 0x0, 0x80000003) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) r2 = getpgrp(0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/ip6_mr_cache\x00') bind$inet(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000a00)="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", 0x3ed, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 03:35:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x400000000000000, 0x0, &(0x7f0000000440)}) [ 361.318191] binder: 16995:16996 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 361.353772] dccp_close: ABORT with 1063 bytes unread 03:35:15 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:15 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x2000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100010001000000afb1362802acc0e5b781", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 361.382862] binder: 17003:17004 BC_FREE_BUFFER u0000000000000000 no match 03:35:15 executing program 6: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 361.456491] binder: 17012:17013 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:15 executing program 1: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x3f00000000000000) 03:35:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x408000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000200)={0xc6f, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r3, r2]}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) flistxattr(r2, &(0x7f0000000240)=""/233, 0xe9) [ 361.515194] binder: 17012:17020 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:15 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x5000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:15 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xf630c40, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 361.696727] binder: 17038:17039 Acquire 1 refcount change on invalid ref 0 ret -22 [ 361.715488] binder: 17038:17039 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 361.790171] dccp_close: ABORT with 16 bytes unread 03:35:15 executing program 6: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xc008000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 361.812598] binder: 17044:17045 Acquire 1 refcount change on invalid ref 0 ret -22 [ 361.847411] binder: 17044:17045 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:16 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xc630000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 361.902462] binder: 17051:17052 Acquire 1 refcount change on invalid ref 0 ret -22 [ 361.913258] binder: 17051:17052 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 361.924232] dccp_close: ABORT with 32 bytes unread 03:35:16 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xbe080000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 361.985365] binder: 17057:17058 Acquire 1 refcount change on invalid ref 0 ret -22 [ 361.994718] binder: 17057:17058 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 362.068414] binder: 17063:17065 Acquire 1 refcount change on invalid ref 0 ret -22 [ 362.083198] binder: 17063:17065 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x500000000000000, 0x0, &(0x7f0000000440)}) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xa630840, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x634040, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4c00, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 362.220083] binder: 17074:17075 BC_FREE_BUFFER u0000000000000000 no match 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x8bf, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:16 executing program 1: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7a00000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:16 executing program 4: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18006e3fa56b00000100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4003002000000000) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x700, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:16 executing program 6: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xd63000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:16 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:16 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x600000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xe630c4000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x7400000000000000, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4c000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x681, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4c00000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 363.068657] binder: 17133:17135 BC_FREE_BUFFER u0000000000000000 no match 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xf630c4000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 1: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x12000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x8) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x60, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4000000000000000) 03:35:17 executing program 6: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x300000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:17 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:17 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xc03b002000000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:17 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40406301, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x2000, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) tkill(r3, 0x22) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x293ac, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@sco={0x1f, {0x6, 0x6, 0x4, 0x401, 0x3ff, 0x800}}, {&(0x7f0000000080)=""/82, 0x52}, &(0x7f0000000200), 0x2}, 0xa0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 363.932178] binder: 17194:17195 BC_FREE_BUFFER u0000000000000000 no match 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x1263484000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 1: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xb630000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xc0080000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x40000000) 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xbf080000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "df5a4ee9efcbc0f6ea2d95a622971554175b370849b488649394688e97a1fa14893c44bb591f5c60b3fe73c2ac6a0f5e28df3ee68efd30df5e01784c0aea39"}, 0x60) write(r0, &(0x7f0000000400)="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", 0x200) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x8, {0x7, 0x1b, 0x3, 0x80020, 0x4, 0xfffffffffffffff7, 0x716a, 0x7f}}, 0x50) sendfile(r0, r1, 0x0, 0x10009) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40086303, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6c, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xdbebff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:18 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xa00, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x6000000000000000, 0x0, &(0x7f0000000440)}) 03:35:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) userfaultfd(0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 364.820594] binder: 17244:17249 BC_FREE_BUFFER u0000000000000000 no match 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40046304, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:19 executing program 4: socketpair$unix(0x1, 0x1e, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000df00", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000004c0)={'security\x00', 0x1000, "f2254bd859973cbeb38e9e5e09a3eae14a82ea866eafffb5f526f4a885c1e5f360360bff53c7edd747e78eb449c0944611e2c952480e67316d61a602cc1b24487f94314ea2bd2f59227e6b28cdf0932a47912bd74a0bc48383ae7119b52c7fa2da169f7369a448fdb1f77c673521446d44f3562b9d174fbc384a3221a065bdd957297876932651cd5b9deadacdcc2c66c86aa9d6d926742ab239f827a3bf7c42801ca535471e3c82f64a30c87ef796b3da91a2c1153aac3d2adc6a22b167bc6472ff0239b6ee5e3bb58449e085c3a0f4466dc44b4850c342375b564f01bedbf610fa264b902b31d9d7aa99377ebd5c6d09774153448b6394690383ff094a51051cdf3fd5b0ade50b855e65b43a7c23df618e711c10f5863983412fc8acfa345b1e3ed1aed62b4ce2124ca7b2862e62a9478421f9e5fc4776ef22d973acb1f34c435bf23d2f1c4d6b5bab55419a8079d13f44bbf05c1c868bd17476766a5eaa45b9ccdd549838eebe12e504fa23faaa1ed6b5382a650d8df4d3e822d8fefbf64266f2b2ddd6821b145a757c5ee1ee2fdd349aa0a525a5863c5e2d34a2ed9ca6f3e2eefc99d307e93ee44a9bd420b6a7edc4676dd45ad6f399805f801b9286bc292548f843d0d8491f042733c2ca979635aea5ffce5bb06db2a1b6d51918325f6748ae630ff31421f58c2c88d7e2c8e0e1e678946b2e32cb66b21fb869395c8863ec44b7a861d33a06a468d7691a0705792d31c37025269553c4d31a738fe5694ae9af24e47e3331065cbbbdbc06239f0f88c8edb3e8f18ee9d69b2267c405de848acde1efd9ebbd72ecdd941472eb01492396eb50c29da77761de8e339569e96bf78a1c158798db3a196fd38019543ff5c7a3534c0397ede3e5078d8abb08ed0a55e1b58cf153e5d4dc619d6b99924207243044fbec3db489750177487a0637ae7265e8436354ffa8bac956029380c7ee850ec646a5978b6dec566451019f58820463dbd679a2d4a591fcc7b63dd7f3001c7c74965b1f9481693749d3278771ee5e271b92f4ad7dc94f8c90a3e6449827d2f2843c35683fd32e85542b965e0a61fd8caddc896bb5c1b1e2e73761d00f63f58f06cde20e1064e20f8b89d0d66b78792f6a7a5e84614ad70eb39f3630dab0b8aefa6c3542756962b30abe7be219b00aaf147dde19cb669470d3a0242072e7fbcc21257b3d7f27766fdd9e5ec3f01e28626c9cfea8a82dd6c692c8b0b9484af969a72d0a0ed25e7b4938807a4eb05d33995229784f7a00308cb913b81eb2358f76db9a8839c9d4f6b5d4491d8ddf8563176e741739a90f34cb4211c8f3d776f32e564560e9e0d11c313fc1603ec680ba62625e7e94569d52f150874babbe2e383d8d40e40696a78eb3d5c5b1331a5af2cf5a4a187634eff6e5952ac25765a588ffcc41387ae9dbf7842f7e408c387b16ce8c58441fa6241eca5a75e23e4ccec86a6007b37d05352131fe7abd1ef935acedd2d7a52c2d158c15d15621670c191e78fdc62acb360300ad28ccd29598225e1bbdee8156370296ea8aed875cc300289f1a43b0a9807d854dda0dfcad845e2cb37482f9b543248f4ed9f7a5643c1d4fecd292c293fb6d00f03922ae1a0432fa1d4d25603c152f1a39053fa31a5e3926204c3a1b0639519c52f47d1896a23d037066b58646abb6b28bc947341ed6021b4e673111bfb10aedc3fed87bb15ece011043dddd3b23fa40f0b159169f338e240eaf66f66c773ba5e07b0c9039b61310edc97f94cada72082b1f6e57f33b3e8b37cb4687ccffa9f16e2e0f30f906d80b71432f963722a3a44d86c2ff077abd89dc1431f0cf8c927a831b5b143ac05132a341d9a987229632e8e83b51b11e16b220842df739ad974cd5e9f9de92556a40390af273a794869091500e106bbd6a15e358f356c02a6687ea16214b91bdc18cd67ba4ae656b31606c843cdd0c1079ed33815790091925331bd8aace10ddb64dba67311624ded37cb390705288cbbce0f48a8367d5a677e225f78121bdcb68e83b9e2a53e66dcdc26ff2199e8b7e9e092495e1f2066d22268f29280a253cff6588ea65d9baed87d1808baf92c4fc5838a83d4eecb09a9f4379702ca8c6fc6727763727b5706ca7c85ef3342a436e458aec8852b85d9fd128dd743cfc37789e55faabe28031dc3474337ff7020870f90661b6a41876093fd4e40ee601c588351fec3a92c6476ddf84cb0a6607d369f88ebfe425e0402eb04a07ad996f6b0b11e50c6b9ca42b28a47de200ab514338de6a0d7b436c5c828b0abf10919b48e6d338a13c9c13fde44830e25ff85f9760862beddd2e21b39b8c635ee6425ad642bd67c00a2683bd1ea53b0571fa12da2afb2e4b8091fc4c27de81a4806206eaab29d89ee30bd99fd73c616c127edee5bdf407037e4fd4d364f21b9c7cefc722e9aa527ea78e96352bfc71ff87ce8d47428bec371aadf9d528ed770ba23aca96f6f67686ce9d8a01dfb4d849b8134606ff238873b0532defc108fabddb0ccbcd8071b5f0a10e986414515cf124a95bd23994edbd2bbda2313bc9f7730cfba961d771094a3f94df3c714a2f863e24853453ac44ce5230fe3d8312bf00d79ba0bde77ae6573f78efbab337dc6976058daaaa9749b052f269a4d51912abf130a5571c444fad3c117b8f0026d990810f9816066fb04dd32c6c9f905fcb4c3d743320e992296dc787b5434acd744b9a38f378ecf4ddebee026030546b7b25ff4f8d68456b35393df43891d3b770d1b390cec355c00c31913acc03055f26788d5e109ca64aca82a72db43f05c45f9fd85afcd79bd7ded3d53898b05b5f1749aa56df6afd9045536831d1d7a9a4a1087bf4c39553d7eb000935723079c2d9d0cbdad0126ee85e279d043a9bbd8478ecd77997496c8a964bd2931505863ae1851a2fce97d29e1dd82305788fb80d4983239fbfa5b90f1a46982b4479dbb4c39fb2e6eb829c7b237cf608a16be54b70b23402de0e0271666eaaf7d68f8cdb1450a6723c05480091f593d32446d84a4d92a2f439155123a50651558884cfd50be87783d5214c255beae09974d97e142ad6b345489c1877520e93a7c7e4f494d421e509a4ff8ad2004888922d89d5d14d7bd05093c546af78b07caa51ba1ddd7780634fd9b4978e6149cea437b04c36418670ecf67122d238a7b1c9e14fcb682346e133303e940398e9f958f5b75597648944bc300a652bdbc6e4657ef9b62a49216b81df6fbf2c75cf0ce2d44a6ddb2eec4fa9bf8e0676ecdd7672d79e8dd820f5dc9e9c81f4be083dda68c94002f83a6954a7761122bfd637851cdaa07d3018ecbeee35b69c3095e8e3232d242eb3fe7cb3f9eceba624eed3cf24f76374e0094cbfffd05f80b862087d425beae0e9cd39f90145769a36bebcb235046010d0be5a8d4b5610875a6de59a3191f9ceff5b490cfcb728cd90f4ad1bded7f7eb3d15027153022f17ffcf928683627a1bd0fe4b2772b34e96d382533bf23603a3e77d3fab76a7af09965db5c1f73951e1f66df990fb65df2347db35753a44c81018837ffba30ddf044c3fff2f660d2b1d3fb3bd7ed5ac1d3372ee86eb5a894a23d1bc63d8d12475759b6419ba1df751b126fcfcb23945342fcc5d0709d8e5daa99353bb4a604565d9d1f9940a2bb1dc62ed78f94fd8763859d391de757318249f1a42e4bf331174a168123e6857f384441f3893e08184898e87309e1e5654a6e60884c956840b5bd4054c8cd809bfb4e7eccde0c657493cea1603349b9347e225c16ee769c8981815b70ee1c22bc5bd6d5a54e2f94df11020a2a10611dfab6dae919f0d2ff87f54a4f10cebb6bd4abd435cf04905506205a17d6e79895c12ee563021a5be6378fc4f28c816275f380f4df17a1f33e58cf8d3af9caf0b497b0927eddfe57c651cb1057f32bbceea13c3dd3bee36c443402656575ad3a7f64b01c0f26199c723d436ef34bb771819e35e1c704c8db36c966b25ee4be1c30bd8142e28a75f4c8cedddc291152bab41893111eb1ac4a840d167381179aa5deb7b7c458633592c80170b3bf1bc8b366b2a6ebb04a386a1ef3e779f7d2ef7a4e650a9ae8d40a315c0f044b503563d81f3a1c18215f4d372151212d2c1e2c2feb0a74d8d08e2a97e62d93efbf254dd9d64d34ada602bc38ee0d9bbd7ebef94fd9ccb42ed854612d02f038d40b68b85293f04da21ac0e52061ce4257992c5db0fad20be9d4ca9b049d6afe2bd0485ecbbe547f2d7236a1ba604da12320de57b4c2bbf48e00b4b076b8af51353409537e09d434a088236ece2348eea42fa2d4e9aa5e1ff00f23e608ac772582526e9e056097166d2bf3d890b7b726b0a7288f6694f1c864699aff8035b1ca00182a40dd8fd5dba0b9c21375bb16b11259ec68b65f0099949946b1568b61fd6b47711a8116a1798bcf943b22fd89d4a7d2977a7e5c0b64d4077687c57c565b3120496e8149b3701d0aa8af3dd5bf42010120b601566cd4b55d5d13f33b87bebe3cb55ededaf8d0a3a05013282f49a32118dd0c950b68973641c44eaf7a0547a23e92a58ebf12010612619269455b892157154a9dc7de6ebe2a57664d61278b82ac51f9de5ce6208ab6a2d6f07931399f8c038217f03c76cb4460ad3e33f1cefca41efa7a711e92ca234ed45555c9a16b6f547a6168c0af1dca79066e4618832db4ee5e30ce462245bf13c44b0eccc14d5939f723d68f8c797f364fcec8477c193d388af56a25e6977c0b9e3dd8f54ef509d31af57540684a7ea819d9c78637191585a957579b3e7d538cb3058a8dc762d0e4ab89f5c6cd88a1e920bd5030f8d7e38a190c1c91fd3be8c041ce9ee308aa25ee65af3edb06629770ad67fcb39b7b2263db7a19f98de366f997a7f051fb3fd5c76b3d9692cd2906e5f2eb299ffd623ce1907357b25447807a3e5da3517f4f852e1ce3e3b9acf9ea2ca2fe685996d956caed69c7d3e6800d778e87ae9244a790d881d4d8d1cef108d13acd2e1d20e8c4c9ed686534ea2ccdf0999b3bcfbf3dbb9d5ed437253d7b2e847be7459eadbcc417a70e51b662b9eeafa9783c88701c4a02af5912da3ff7105a2851a5fce89185b7f5b58845bd0eb010e0b00c797aacf784fd4db16eb3f75c3c8256ed3a3a830e5d4124c9b9f0e07ded663d12a63a56cbea7f53b5778b4d9139855f7cb01019c17efa1c210c33e97c8a79e86476e19ff062f0bdfdd4f656c6e840878058f320c466cbf5751a7bb024bae6588ebdc5e5678b1a3a7ab39e272a28402309fdbd32b0e05871ef101e9cbd4208e0750e47d009b76ffc7ecc965bce084faab3fe82af88f3af669763d6a7a2895a78bdba5aa80a1ccc43c69c8933dd116aca0f5d40816cffb76cdda9756f412bf95a16d13e39c5d16ef8c0fc6b2bf11ca013907371fdd0511c0de6483b5fdcb0fdb132debff4c21ea56eecb0649d0144ed0a9fc81b2c7e33e10c4f3354e699f74aa192df9c74a507dfe5f1ff11016f5d5f24a1cb661ebbe1ff6e5c4438e7363081d8209e9599d778beb9f568c7bb69744bbc55a5d3ef452a2b3da9d7cd4a615574842c3dfd6953b8a2c09bbd85a32fbc49422fe0901ec87b686ad3e47c72626526198ccf5dfd03ef6c4135ed54fa684e84bddec5c6db7b00e271c5b920e1a3ed2ddab0c1509e276c7a4e48ac98b075edff69116dd63b6a12b37c8e6bf87f1c1fc6de9dcc98b89dee92ee319dd66e284ff1472c49357d0be586e63d548ff03d74c95b1c0a9d2648c82d4dffaac28c55340722fa04337b1b5"}, &(0x7f0000000240)=0x1024) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x50200, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c65000000000000000000eaff0000000000000000000000000000004a000000f42c8093c72105f0679944e2a1a035d8470dd001decb077f3b40660d8eaea210fed4e61afdbb282714e4304f75e76eb94dbb0ddbabec260a4d967262223c8022387b8d3d76a5da2daaae"], &(0x7f0000000200)=0x6e) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000080000100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) 03:35:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) open(&(0x7f0000000040)='./file0\x00', 0x40200, 0x39) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x12634840, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1000000) 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6000000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:19 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x800000000003fff) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) read(r0, &(0x7f0000001040)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f00000001c0)="31620a1e8d888d92198a07130f0472bc131cbd0ad21a6dc066565d8610c9", 0x2}, 0x20) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x3, 0x0, 0x70}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x1f, 0xffffffff, 0xc3e0, 0x7, 0x9, 0x4, 0x5, 0x40, 0x100, 0x4}, 0xb) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x80}, {r1, 0x4421}, {r1, 0x401}, {r0, 0x20}, {r0, 0x2000}], 0x5, &(0x7f0000000280)={r3, r4+10000000}, &(0x7f00000002c0)={0x7fff}, 0x8) write$UHID_INPUT(r1, &(0x7f0000002040)={0x8, "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", 0x1000}, 0x1006) getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x20000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:19 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x800) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_adj\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='-4', 0x2}], 0x1) 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xb63, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 365.600545] syz-executor6 (17296): /proc/17295/oom_adj is deprecated, please use /proc/17295/oom_score_adj instead. 03:35:19 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x5000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:19 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x5000000, 0x0, &(0x7f0000000440)}) 03:35:19 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x6a73) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x21, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) close(r3) close(r2) 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x300, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x74, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 365.771278] binder: 17309:17313 BC_FREE_BUFFER u0000000000000000 no match 03:35:19 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xa00000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) r4 = getpgrp(0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) r8 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000005c0)={0x0, 0x40, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x0, 0xe, [@generic="2ec8844c5c22df1f4733e07d9deed9489b72a8104cf7321597e2b1648bc45c4007c45bb9a8d97a3b5c919c987dbc8aef4bc0343b7525c4a551435fb26ddc2d7de7ba764092c82c5ea6497e950f6b22b393c9a9ac0eb120d2178ab5a8c86053aefc663e0030dc69e6ac0b14184c2bf675c97473780fd6d2f59d417f8bd5dfb291e987ff4f23e9d08261ff199cb7bba188da7c348c94d4e16914a0c5e1e378fce5e148c2131e43d227b42c383417101f3e", @typed={0x0, 0x50, @str='9\'\x00'}, @generic="1b2138bf34f09bc171d836f59dbe8ed65dcabbc6cf653436d7589b13ecb59ecfd8e22ad7b313185f81cfba21c890e665ec972d828ac8ecef99c1869635aa626b31d6856dd63c0c4f523fb481d7c405fe23061d2f0b2716"]}, @nested={0x0, 0x6, [@generic="af14f602a274a2b9323252e0121b949799324255e026f11f920dcdc91d95129d4f90f09aec2e23747239ac14d37f861ace1280e7fa69b58179fcd68d8882a3edaafe20458d02fa5c", @generic="6448021c64206c5a4a5bdf735248d761416857df15c8b9b19f55da7c649a", @generic="5cbdda9adfa97e5aababd2f9736685884a95774aa90ef82b8e6cead6dcdc735ea077d4e5fe5f7c13f7bc08d11cac467faeaa05d3a8db9757a4a0c6324901e24a655e27d97aa62309399ac44924cca65e67603aea4d8fa5c9125dfb2b990e438df8d6818e4776426567571ae4c65f58198c16d7", @typed={0x0, 0x76}, @generic="e2d72ccd0c41037013709b3c7d3aa50b01be7307a9cceb0a5ca785d9957da0dd27eb7f70b366a4c46064c248bbe198f0a4365643fd9b7cf1d59dac410f843aadd3302a85c1", @generic="1693d3a23abdf970f55fa66202f3fd85e842fe1deca4e7da80b5b884", @generic="d0515f3b63dc9ed80c217c58c1b109f3c81769629e080b9db68e1b84660b19640d3108fa4b5553070525ea39402828136a17cd868d3d0f3197fbb5496133c3a0f4efc099d2421b748e7ce1ba910a73945f23b27e9b901fbf8f847cfa71e95b232d8452581cd101326d4f2faa3b79bfc0c1f43b4d23a00132f33c42a4feee5586ac8b59e10d", @typed={0x0, 0x4b, @u64=0x100000000}]}, @typed={0x0, 0x41, @u64=0x8001}, @nested={0x0, 0x66, [@typed={0x0, 0x10, @str='{wlan0ppp0[\x00'}, @generic="6fb50a155723c67e0446301fe4114cc7fedc3c63d8cdc5876b8a9624", @typed={0x0, 0x8a, @pid=r4}, @typed={0x0, 0x65, @uid=r5}, @generic="bf71c965cc7b8f53fa730b916eb5bcb1f3a1b8168b0306e919ba37fc706cd22933c92b6b1456a5059330a67a33f86927878c40b84bc00f237c1f98478263ca98b43ae8604882", @typed={0x0, 0x6b, @uid=r6}, @typed={0x0, 0x30, @u64=0x4}, @typed={0x0, 0x49, @uid=r7}]}, @typed={0x0, 0x90, @fd=r1}, @nested={0x0, 0x2b, [@typed={0x0, 0x55, @pid=r8}, @generic="dca135b38bb45d623a7fb60e0b37778a2c10733638a42ab6531909df9f215e1d0d4e51dc5343f2f044518c9a892ed61e2bf67e3c2bd8ddd587a7e157d1c195b2ec52a13b59ffc97d0b77c3d95f6eb6b60a92c58f200ac4b6070326a258336671124f276e72696daaf03918321f53b35f35544c4f4eac5529f7fc132680f8beb766780cf5a67ffc64f3b02cab4dc11c260448b5f0f1da1ce632a2bb3fbe940cbf1eb533274ba41969f36dedf8074a", @typed={0x0, 0x89, @fd=r2}, @generic="30de1de6dd351403619a881532f20050ce8897e205a4344388eb4a83d9822a367ccc3e82391a7cecc2dac0467eb3e81f76980dd3b4313478d9f4ceedaf3cb3b27b54e6c9e604e523234879769e95c767ba1a2d6fac06f87337e6f9038c0c76f875cfcd2cb3d750b075692be06c5b51085e664cacb8ff1a2f223300809c9986c53a1106a64d776d61c1b4c15ab259e7502610b96bede6bd94f13a9360ce8df779c1b62551a25d9a6c01599c73913041da35a4", @generic="b4ab15728ae21f77c0485ddeb1239ae37e1a6698174c89918cd0", @generic="eb8355dcaaefc6db4c5ea51b8b0c2a4f9330726f59c3b4b4e96e1863080fe448872182500e87c06d0a16e2cebfe87c4b02bdae949965712dbc543d098fa6b919f8d81edaa680d58acd51419e0756f6d31bc78880d72dadaf72d7c392ceeb469f495e1a819ce0b75a8efb2fdefb6a98c73cfc1e8d0e251f3d6b7acfb0639f074ac8b93ee05ae2f6ab5fe710e34aeaf16b18d7589a3bdbb896d542ed9b5f2fcde03a611a638af8dac0319667580e49", @typed={0x0, 0x16, @uid=r9}]}, @generic="7cf64bb3d65cb02fb9de51116968488f1c7120a698f59b4d430684f92eaf7db2d1d1a5a58353c6ab39217a5703982269068769b67dd363c94de2e70c8841c6dafc579171f52211396e279c9a449d6fa87ee648c5a5c96a1ddf646c9906493a0434e9e3be799f761c89ab6817aef833d2777cfa29dbb5061ce7f207d0ff61f303e1e9b31e83e54b391db626b1d7b03f97e69b2655863245f2cbb3a4b8ef42ccd135c81e87cc580a664d0da9dbab097cd0b5c42b5c73f7ee9cccf472e26a3f27ce428aeed2c15e7e7262937e2531a5ef53e4bb7d7fc192d910341873884e1e7b8d", @generic="031aafc418d1dbfc0c63747c96504cd39b07b0494f7784e22f160e154267978f3e81b0bd56f61d9933a92a91d504a03fc42975f2779773f97f81166f4103535719aa24011146b8d55225e286cd63463ad086f0ae18b39887c604bc983c9828ba6936196dea8f87f3edb3d5b9333cbe0c53cca87bf88a9538550532832c3c6f20db2673566196a01b92eaa8a7d57136437f310ad0b8f6bf50e32dc9addee7ea07dd4953764e7ac5a42b6be3df0d69790000a815721c04f66412342d8de986ac7773b42c4dd0ff", @nested={0x0, 0x10, [@typed={0x0, 0x88, @str='/-em0posix_acl_access^]\x00'}, @generic="0e181bac77fd507f96d3ba464bd10230e1672bec8e50d79e53ba8a7339dade429203187a466b7ef5197607a76196378f45ba0f4b1e2c359b236786d5fbb8506020f5fe6861ede80becb8fb4b9eab39593d6288df1157d9b0ab1cbbea2d5b97c06141139910b34045", @generic="066c66ed48bd61d5dbe1aa12ab56d708bcbbead95d0f2fdc68387aa3b6352a8771e2af7cd834d7dba6a2be4ec2a09e5c15b8d0c1c19a671b9a4a41675b78"]}]}}, {&(0x7f0000000e40)={0x0, 0x1c, 0x704, 0x70bd25, 0x25dfdbfe, "", [@typed={0x0, 0x83, @fd=r0}, @nested={0x0, 0x80, [@typed={0x0, 0xa, @fd=r1}]}]}}, {&(0x7f0000000e80)={0x0, 0x29, 0xe10, 0x70bd27, 0x25dfdbfc, "", [@typed={0x0, 0x1d, @u32=0x3}, @typed={0x0, 0x22, @u64=0x29}, @nested={0x0, 0x7c, [@typed={0x0, 0xd, @ipv6=@dev={0xfe, 0x80, [], 0x16}}, @typed={0x0, 0x64, @uid=r5}]}, @typed={0x0, 0x7d}, @typed={0x0, 0x57, @uid=r5}, @nested={0x0, 0x25, [@generic="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"]}, @generic="5aff0cc3e1d54eb893fefd4d8196199627d8854c934ea4c5f3ce68f9be32984b3c343ee151492efc5179766fd0e8d25522d7e7f59a3401594ace4fda1af3256d15adf03b945ff58fdf1b3f6152bd59284799fb78dbe12ba5bf126e0eedf8bf1d2e48eb9577f14b2b0c506ae2e23cd744c7d015c8a1c5e01f0721b015c14985a3b9e5", @nested={0x0, 0xf, [@typed={0x0, 0x20, @u64=0x8}, @generic="08b1dbc9b202358c8b3a8934bbb6addee13d21c0ae1b36effb224ba486d36ec3a55275ed395ee15f2626241e7a03f859b86aeeb6f81b0b6da980d2c1447feee4eb29936e22f968f161a5159b2ed3f5be7ceda53d221bae92a4e1f36592e375c5190c83b56dd0c1e2993c4d95ef0fefd349a4ce96a6eb86733e566df21cbf8860f5fae8", @generic="a70957d2dafce3f729a9019fe0a3a4f6d5a638c64c27d7732c66620afcaf0bd8146c3bfeb96b728a7e5cecfbe1a9a56ea5445fa72f7104dcd2d291ac6f7e068299e1789388ac4b58041ca6bbb78076ddb5fdacab9c45c528c80ff1e7f554d8a251577fcf959ca3174f8a4c0f34b009fa0747022feeca75aff313ac8c02ec90b036f48eb01d6006ad198c8ec317a96aa5e00a1cba93627c2f1b1baa6d82ecf117bfac4af63abcbeeac7b5a0f489b4799724551dec4fba104a9a735dceae8c20aa3d7c5b49d21c0875ba20114835910af5bc13b38d35cf7bbe7d2e1294f1da53dd3bf62b82958b", @typed={0x0, 0x2d, @fd=r1}, @typed={0x0, 0x80, @u32=0x9}, @typed={0x0, 0x2c, @binary="ed649c021b21798750de2d1d096fe577dac4246dded4567100f6cbe0800f8a3ab0246ad824337692f96fe0c0fbf5256404a57b692635f5e80402da1f5327c506a6de08e674c6384e9f19c0fddad85302bcab1b974ef5d999963f9f38e0daba4b77b08a47f2"}]}, @generic="e672662aa44034a1c5b7eb42dc62257ea990ee54666ae62b342aabaed06fdcc21f191b277a868335d8b39175820e05bf6ecd99fdfee745c6b3c12c884d0fd65ac3df9bdd77e9792c6e5f4154e3279fb506c21b97f975f29eee39a147b646b18d64c8f9c3d1ed12e8943f81474e3cc1f186299c5f6b34559ff689cc361977271c5f9a591b9f537ef549c895a04f858bc700df08855484a74dde1b59c3242b7ca19bdc91173b1c656b5f5656fda730bda75a469ca90bafad08928856c84fd13ae95576bce5ed04c4f80b7207041571c866a2e8422a64c98ccc4f8b18b9bf942812a88c62cf193cd873ec4de75fb84f"]}}, {&(0x7f0000002240)={0x0, 0x16, 0x1, 0x70bd26, 0x25dfdbfc, "", [@nested={0x0, 0x2e, [@typed={0x0, 0x8f, @ipv4}, @typed={0x0, 0x7c, @ipv6=@ipv4={[], [], @local}}]}, @nested={0x0, 0x5f, [@typed={0x0, 0x6c}, @typed={0x0, 0x25, @u64=0x401}, @typed={0x0, 0x81, @ipv4=@multicast2}, @typed={0x0, 0x6a, @uid=r7}, @typed={0x0, 0x5f, @u64=0x1f}, @generic="8d744a9d01e29f3e20a24446ccee2046b7b536172c5433e5062650f90f2807f88d6e1eb38d9f409c119a5365540310c8f81b97b50cf647851756fca36070ae6f611b6a0a8add003965d875af3efc8a01e5ce7f814be45d667ecbc39a76a9efac2f859b6872626eaf156fd2d81cba8d9cb8692f71741cb016bfd49eecc6"]}, @nested={0x0, 0x54, [@typed={0x0, 0x52, @str='\x00'}, @typed={0x0, 0x47}, @generic="42f9bc3e18b35924ca484be9ef7f8bd42281dff4d82b349cb5a8c6dc8fcbb6b480ea7ba7bb40db21109a3534c4a52e25ff33fab7ea0a866ebd649f3fb3cff34c0b6128d191ecd83d0e28214d5f3a13b883a6aa4f9ba4534e3c310a2796adfad3ff9fd496"]}, @typed={0x0, 0x6a, @u64=0x800}]}}], 0x10000257, &(0x7f0000000080)}, 0x8000000000084) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:20 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x7) syz_mount_image$btrfs(&(0x7f0000000440)='btrfs\x00', &(0x7f0000002780)='./file0\x00', 0x0, 0x1, &(0x7f0000002ac0)=[{&(0x7f00000027c0), 0x3f00000000000000}], 0x0, &(0x7f0000002b40)) r1 = shmget(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1c1000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000040)=0xfff, 0x8) shmctl$IPC_RMID(r1, 0x0) 03:35:20 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x8631040, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x3f000000) [ 365.976161] binder_thread_write: 32 callbacks suppressed [ 365.976174] binder: 17330:17332 Acquire 1 refcount change on invalid ref 0 ret -22 [ 366.007989] binder_thread_write: 32 callbacks suppressed [ 366.008000] binder: 17330:17332 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r2, 0x2) 03:35:20 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xa000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 366.187692] binder: 17348:17350 Acquire 1 refcount change on invalid ref 0 ret -22 [ 366.206423] binder: 17348:17350 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000000)={0x23, 0x7, 0x1, {{0x16, ']-ppp0vmnet0trustedem0'}, 0xffff}}, 0x23) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/66) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x2, 0x1}) connect$unix(r0, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) accept4$unix(r1, &(0x7f000046f000)=@abs, &(0x7f0000937000)=0x8, 0x0) 03:35:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x401, 0x40800) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x37) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 03:35:20 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x8106, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 366.403591] binder: 17363:17364 Acquire 1 refcount change on invalid ref 0 ret -22 [ 366.412884] binder: 17363:17364 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:20 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x2000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e27, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xde390000]}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) shutdown(r0, 0x1) 03:35:20 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x10000, 0x200000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) sendto$inet(r3, &(0x7f0000000280), 0x314, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) shutdown(r2, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000280)={0x80000000, 0xfffffffffffffffb, 0x800, 0x7, 0x4, 0x4}) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r5 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x516e2db6fcb2f54b, 0x40010, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)=[@decrefs, @free_buffer={0x40086303, r5}, @register_looper, @request_death={0x400c630e, 0x2}, @enter_looper], 0xd6, 0x0, &(0x7f0000000300)="f11d3192b2cd1e3c719b2bebfc6eef12cb00546271c78f3963bdbaa1a6d3ac245794c8cf9c70799919772c7b71a661365916af282001d83d61be6b1adb7397a68ee2f074a7b6a8f5748f13354d2b06c9193fcf3b81bbd76293cc36bf1c2846f339bf8199eccd8bb771cadba8991fd3f65fe42a64159206e6829026488a8ec97991e9d21e34c1fc127eb4b45c6f17fce8678e34176dea25eac53f64a7c03eac66c0e9d2d16342579dbcde69dd186e71ce06b798a4043100926332de52824ceb70c34a39da0692051255e07081c401090b940a6fb60b87"}) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x2, 0x7, 0x2, 0x1000, "d9dbdf9a987ee66d5a5aad5408aa425864394ef1197b0a2ddf0b4086eaaefb68f8d6d72292b3a88a0584d71e1bf06d78a3be4387f80583f41daf57537b13ab", 0x30}, 0x60) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000040), 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="580000000000000014010000070000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000001401000003000000", @ANYPTR=&(0x7f00000011c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x88}, 0x0) 03:35:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=""/147, 0x200000}, 0xfffffffffffffffe) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:20 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r2, 0x3, 0x5e00, 0x2cbd) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43}, 0x43) fallocate(r1, 0x11, 0x0, 0x10000) 03:35:20 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x600, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x6, 0x0, &(0x7f0000000440)}) 03:35:20 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40046302, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:20 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x5000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80040000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e27, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0xd470041877f0fcc9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local, [0xde390000]}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) shutdown(r0, 0x1) 03:35:21 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100), 0x4) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60) 03:35:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x3f00) 03:35:21 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x200000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 366.710204] binder: 17378:17387 BC_FREE_BUFFER u0000000000000000 no match [ 366.807699] binder: 17395:17396 Acquire 1 refcount change on invalid ref 0 ret -22 [ 366.830005] binder: 17395:17396 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:21 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x863104000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:21 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x8010000000000087) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x5) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6300066e01acddf3488cbb5b7c12cee57e114700080000000000000000000000"], 0x4, 0x0, &(0x7f00000004c0)='8)1z'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) dup3(r2, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 366.936094] binder: 17407:17408 Acquire 1 refcount change on invalid ref 0 ret -22 [ 366.944432] binder: 17407:17408 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:21 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000100)={0x8, 0x1, 0x2, 0x6, '\x00', 0x5}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000001, 0x44031, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/user\x00') ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4cf) [ 367.020874] QAT: Invalid ioctl [ 367.038542] binder: 17417:17418 unknown command 100688652 [ 367.052382] binder: 17421:17422 Acquire 1 refcount change on invalid ref 0 ret -22 [ 367.054701] binder: 17417:17418 ioctl c0306201 20000500 returned -22 [ 367.072037] binder: 17421:17422 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 367.077970] binder: release 17417:17418 transaction 676 out, still active [ 367.086449] binder: undelivered TRANSACTION_COMPLETE [ 367.096144] QAT: Invalid ioctl [ 367.101026] binder: BINDER_SET_CONTEXT_MGR already set [ 367.107498] binder: 17417:17418 unknown command 100688652 [ 367.113434] binder: 17417:17424 ioctl 40046207 0 returned -16 [ 367.120409] binder: 17417:17418 ioctl c0306201 20000500 returned -22 [ 367.132996] binder_alloc: 17417: binder_alloc_buf, no vma [ 367.138833] binder: 17417:17424 transaction failed 29189/-3, size 0-0 line 2970 [ 367.159981] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.173463] binder: send failed reply for transaction 676, target dead 03:35:21 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x7ffffffff000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:21 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x163404000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x6c, 0x0, &(0x7f0000000440)}) 03:35:21 executing program 6: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) r3 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x67, 0x101002) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={0x0, 0xfff}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000b40)={r4, 0x1000, "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"}, &(0x7f0000000480)=0x1008) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r6) r8 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f0000000740)="98", 0x1, r7) open_by_handle_at(r1, &(0x7f0000000280)={0xe3, 0x8, "b215c6dbcc8dfd7249f2dc83000d1a85c845d33fcee9a7ff2577fa58da65dcff434d9824a78d6446114548f0996b412f0ab6d8b07f224bcb250b2ef8bc4fbdce24425c66d1f31be8df5ba8d638305c2e44944804c9aa53582e97e5eef14f737e05441532b51da81fe88d6b7729e32669880330e9765ba3e417dd5357b1a15181f9282829f453b122e285ba863d866731ee73304b664c353f62fa5a9d7dca2c0467a139353ed0aec3bd83b22051f33c4c68608beba8ac664fef60c03a252a0149f6dfb2b87c169fe8b67e71e784f3bad659868b9bab2576ace04bad"}, 0x80) r9 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0), &(0x7f0000000280), 0x10c, r6) keyctl$dh_compute(0x17, &(0x7f0000000180)={r8, r9, r9}, &(0x7f0000a53ffb)=""/5, 0x1f4, &(0x7f0000c61fc8)={&(0x7f0000000140)={'crc32-generic\x00'}}) 03:35:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) getuid() sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:21 executing program 1: r0 = socket(0xa, 0x800, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000e80)={0x100000001, 0x10000, 0x4}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000fc0)=@nat={'nat\x00', 0x19, 0x2, 0xb18, [0x20001ac0, 0x0, 0x0, 0x20001af0, 0x20001c50], 0x0, &(0x7f0000000040), &(0x7f0000001ac0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000110000000000000000006772653000000000000000000000000073797a5f74756e0000000000000000007465616d3000000000000000000000006e723000000000000000000000000000000000000000000000000000ffffffffffff0000000000000000f8000000f8000000300100006d61726b5f6d000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000f800000000000069700000000000000000000000000000000000000000000000000000000000002000000000000000ac1414aaac1414bb000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000000002c6f7365000b0000000054f139580800766c616e30000000000000000000000073797a6b616c6c65723000000000000069666230000000000000000000000000aaaaaaaaaa00000000000000000000000000000000000000000028090000280900005809000064657667726f75700000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000616d6f6e67000000000000000000000000000000000000000000000000000000500800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000083ef000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000ac1414aa0000000000000000000000000000000000000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000ac1414aa000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000000000000000000"]}, 0xb90) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000e00)=@broute={'broute\x00', 0x20, 0x3, 0xcd0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0xa, 0x219, 'erspan0\x00', 'lo\x00', 'syzkaller1\x00', 'gre0\x00', @dev={[], 0x1a}, [0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x11}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xd8, 0x120}, [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"e0b4f7831c6c8916891419a506d72d089853a985e358e09650447546963b"}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xaf96d1715a864c38, 0x2, [{{{0x11, 0x0, 0xa01, 'veth0_to_team\x00', 'sit0\x00', 'yam0\x00', 'veth0_to_team\x00', @broadcast, [0xff, 0xff, 0xff], @random="fa477ce33eba", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xd8, 0x108, 0x138, [@pkttype={'pkttype\x00', 0x8, {{0x4, 0x1}}}, @cluster={'cluster\x00', 0x10, {{0xc79, 0x3, 0x4}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}, {{{0xb, 0x1b, 0x0, '\x00', 'irlan0\x00', 'yam0\x00', 'veth0_to_bond\x00', @remote, [0xff, 0xff], @random="ec18d628620d", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x938, 0x9b0, 0x9e8, [@among={'among\x00', 0x8a0, {{0x8, 0x100000001, 0x3, {[0x400, 0x5, 0xd2, 0x8, 0xc63, 0x3, 0x6, 0x5, 0x7, 0x4, 0x2, 0x7fffffff, 0x6b6, 0x8, 0x800, 0xf5fa, 0x200, 0x0, 0x10000, 0x8, 0x8, 0x3, 0x1a, 0x52e, 0x9, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x7, 0x4, 0x81, 0x200000000000000, 0xf5a5, 0x1, 0x4, 0x1, 0x5, 0x5, 0x4, 0x6, 0xffffffffffffffff, 0x1200, 0x3, 0x10001, 0x9, 0xc4c, 0x4, 0x0, 0x7, 0x7, 0x938, 0x7, 0xffffffffffff7fff, 0x9, 0x100, 0x8001, 0x3, 0x19, 0x81, 0x1, 0x6, 0x7, 0x4, 0x9e, 0x2, 0x7, 0xeeec, 0x101, 0x0, 0x0, 0x15, 0x4390, 0xffffffffffffff17, 0x1, 0xf243, 0x1, 0x5, 0x0, 0x0, 0xff, 0x0, 0x2, 0x65, 0x132, 0xa4e, 0x8, 0x2000000000000000, 0x7, 0x401, 0x835, 0x6, 0x183a000, 0x1, 0x100000001, 0xe0, 0x7, 0xfffffffffffff800, 0x3, 0x4, 0x5, 0x7, 0x0, 0x6, 0x4, 0x100000001, 0xffffffffffffffff, 0x204, 0xffffffffffffff01, 0xfa0, 0x58, 0x1, 0x6, 0x8001, 0x1, 0xdb5, 0x100000001, 0x6, 0x401, 0x5, 0x8c2, 0x7, 0xfc, 0x3, 0x1000, 0x4, 0xfff000, 0x8, 0x0, 0x8000, 0x200, 0x5, 0x7ff, 0x1, 0x5, 0x800, 0x2000000000000000, 0x1, 0x6, 0x6, 0x31, 0x4, 0x1, 0x4, 0x20, 0x7, 0x80, 0x5a, 0x34e3, 0x100, 0x2, 0x1f4d, 0xffff, 0x8000, 0x2, 0x20, 0x10000, 0xffffffffffffffff, 0x3ff, 0x2, 0x400, 0x7fff, 0x8, 0x1dfb, 0x7, 0xfff, 0x4, 0x7f, 0x0, 0x6, 0x5, 0x80000000, 0x100, 0x80000001, 0x3ff, 0x6, 0x3, 0xc1, 0x0, 0xd9, 0x4, 0xfff, 0x0, 0x4, 0x9, 0x6, 0x9, 0x1f, 0x7737, 0x8, 0x7ff, 0x7fff, 0x6c62, 0x1, 0x0, 0x3, 0x40, 0x6, 0x8, 0x7, 0x3ff, 0x1, 0x42, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2, 0x5, 0x200, 0x7, 0x1, 0x81, 0x4, 0x1000, 0xfffffffffffffffd, 0x2, 0x7fffffff, 0x800, 0x7fff, 0x7fff, 0x0, 0x6, 0x5c, 0xdce8, 0x101, 0xffffffff7fffffff, 0x4, 0x80000000, 0x0, 0x100000001, 0x2, 0x7, 0x7, 0x5, 0x9, 0x3698, 0x3, 0x40, 0x93, 0x0, 0xb182, 0x0, 0x6, 0x20, 0x4, 0x81, 0xffffffffffffff80, 0x100, 0x0, 0x7, 0x5c4, 0xbcbb, 0x1000, 0x3591000, 0xd1e, 0x911, 0x8], 0xa, [{[0x0, 0x9]}, {[0x2, 0xfffffffffffffffb], @broadcast}, {[0x3], @dev={0xac, 0x14, 0x14, 0x14}}, {[0x800, 0x100000001], @broadcast}, {[0x3ff, 0x100000000], @multicast1}, {[0x5, 0x7fffffff]}, {[0x0, 0x7fff], @dev={0xac, 0x14, 0x14, 0x1a}}, {[0x3f, 0x4], @multicast1}, {[0x8, 0x401], @broadcast}, {[0x0, 0x357], @remote}]}, {[0x3ff, 0x1ff, 0x5, 0x80000000, 0x9, 0x5bf1, 0x8, 0x28ff, 0x3, 0x3, 0x1, 0xba, 0x8, 0xcef, 0x3, 0x7, 0x476, 0x2c4, 0x840, 0x4, 0x7ff, 0x57, 0x5, 0x8, 0xfffffffffffff264, 0xffffffff, 0x2, 0x3, 0x7, 0x3, 0x100000001, 0x1, 0xffffffff, 0x1, 0x8, 0x663, 0x3f, 0x9, 0x401, 0x0, 0x0, 0xd87, 0x1, 0x5, 0xf818, 0x4, 0x0, 0x1, 0x1, 0x2b, 0xf48a, 0x1, 0x5, 0x1000, 0x8, 0x8, 0xffffffffffffffff, 0x3, 0x5, 0x10, 0x0, 0x6, 0x5, 0x9, 0x800000000000, 0xffff, 0xf030, 0x6235, 0x5, 0x4, 0x1, 0x7, 0x9159, 0x3ff, 0x2, 0x2, 0x4, 0x7, 0x0, 0x2, 0xfffffffffffffffd, 0xbcc3, 0x9, 0x359ff7be, 0x9, 0x314a014e, 0x4, 0x6, 0x401, 0x6, 0x3, 0x2, 0x8, 0xff, 0x7, 0x7, 0x800, 0xff, 0x5, 0x89b0, 0x100000001, 0x100000000, 0x2, 0x5, 0x2, 0x9, 0x9, 0xff, 0x20, 0x7, 0xffffffff, 0x3, 0xffffffffffffffff, 0x0, 0x5, 0x1f, 0x2, 0x6, 0xfffffffffffffff7, 0x9d00, 0x3ff, 0x8, 0xfffffffffffffffa, 0x7, 0x2, 0x9, 0x8, 0xff, 0xff, 0xfffffffffffffffd, 0x1, 0x30000000000000, 0x4, 0x101, 0x9c, 0x100000000, 0xff, 0x80000001, 0x800, 0x3, 0x0, 0x200, 0x83f, 0xffff, 0x4, 0xc91, 0x4, 0x7, 0x80000000000000, 0x34, 0x1, 0x1ff, 0xee, 0x47b6, 0x1, 0x8, 0x9b, 0x2, 0x100000001, 0x8, 0x101, 0x9, 0x0, 0x3ff, 0x7, 0x100000000, 0x0, 0xa390, 0x20, 0x9, 0x200, 0x5, 0x4, 0x1, 0x3, 0x0, 0x2, 0xeb8d, 0x3e, 0xe93, 0x7, 0x7f, 0x3, 0x6, 0x6, 0x45a00, 0x9, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x13, 0x1ff, 0x9, 0x100000001, 0x0, 0x6, 0x10000, 0x6, 0x8fc, 0xff, 0xff, 0x1e2, 0xffffffff, 0xc, 0x5, 0x2, 0x0, 0xff, 0x7ff800, 0x4, 0x0, 0xfffffffffffffc00, 0x0, 0x1, 0x7fffffff, 0x6, 0x1, 0x3, 0x800, 0x1f, 0x9, 0x4, 0x800, 0xffffffffffffff81, 0xfffffffffffffeff, 0x800, 0x100, 0x5, 0x9, 0x5, 0x7fff, 0x4e, 0x5, 0x20, 0x5, 0x91, 0x4, 0x2, 0x39, 0x7ff, 0x0, 0x8, 0x7, 0x2, 0x4, 0x4, 0x1f, 0x367f, 0x4, 0xffffffffffffffe0, 0x8, 0x9, 0x1, 0xf8d5, 0xa8e6, 0x9, 0x1], 0x1, [{[0x2, 0x4]}]}}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x1000, 0x9, 0x80000000, 0x0, 0x0, "bf7accdc4642116b38cd230ee8e17e9e3be93b00071dd4b76a6727e29d21e54002f4e9322efc400f2dfd7397c5cd45f427bfd1e37750a9f289c673da28af28f4"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffe}}}}]}]}, 0xd48) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000f40)=0x4) [ 367.596431] binder: 17444:17445 Acquire 1 refcount change on invalid ref 0 ret -22 [ 367.612350] binder: 17440:17450 BC_FREE_BUFFER u0000000000000000 no match 03:35:21 executing program 5: capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x2000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/184) ioctl$RTC_AIE_OFF(r0, 0x7002) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000200), 0x100, 0x4) 03:35:21 executing program 4: socketpair$unix(0x1, 0xc, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$inet(0x2, 0x0, 0x400, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) setresuid(r3, r4, r5) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x872, {{0x2, 0x4e20, @local}}}, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') clock_adjtime(0x0, &(0x7f0000000600)={0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x8, 0x0, 0x40, 0x0, 0x2, 0x0, 0x1}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0x0) keyctl$session_to_parent(0x12) lseek(r0, 0x0, 0x3) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000000c0)=0xffffffffffffffe0, &(0x7f0000000100)=0x4) sendto$inet6(r7, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 367.642501] binder: 17444:17455 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:21 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6800, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7f, 0xc82) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x940, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000100)=""/56, &(0x7f00000001c0)=0x38) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e23, 0xfffffffffffffff7, @ipv4={[], [], @rand_addr=0x3}, 0xbb}], 0x2c) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@assoc={0x18}], 0xf}, 0x0) 03:35:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x4000) 03:35:21 executing program 5: r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[], 0x400080000, 0x0, 0x0, 0x2}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000680)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='gre0\x00') sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 03:35:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x388, 0x2, &(0x7f0000002cc0)) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xffffffffffffff2e) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) [ 367.804958] binder: 17473:17474 Acquire 1 refcount change on invalid ref 0 ret -22 [ 367.845035] binder: 17473:17474 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:22 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x68, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:22 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_to_bond\x00', 0xa00000000000000}) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60) sendmsg$nfc_llcp(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x7, 0x7, 0x10001, "6597df52239866a46f72034301c54706c9cf6283d150a45cc5a4481935b86d64316611b64b5e8d82e9a955c0ca9c556cf0604a3fff002ba37df347005917ca", 0x3d}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000100)="d5c27d54e02e9aece8ab228c38e5247237469ed5b7e2fe", 0x17}, {&(0x7f0000000280)="636d7976bad33efc1d", 0x9}, {&(0x7f00000002c0)="c0f9b1057e5c59c64da02ae2060204fb26bba3867558dc4aac40d2ac9bd2f8da9e095b441f7d7bce72a70df192860660aba4c5bc930a399754b2339e", 0x3c}, {&(0x7f0000000300)="382c65fe6dec5ee06b555644a6a28847bdf4ded1c3fe29de97342a1f95c512938bade765ee731ef7851a351062afda1fd48d6dd3cba895362c73c55dca96575a21003f1b9bead9f7ecb269914ba6766091868972b2c310d2ab3ff8199834ebc0bd38e1b42d984d3b397edf0c435ff6186c99089ffa7b3f399d40ae24de054fd6d6516ffd2cd154334dfda284934ae1bc2304df3e0fcc9bf6d1b98a2d08bcd9c5642e0f4298b5095b45cc24a274eb0b1f7eeb5510e24b16c29cf31b833581516d", 0xc0}], 0x4, &(0x7f0000000400)={0x88, 0x107, 0x7, "ccdfddf474bb35d1949ed8ae7451a1bb44ddcf2fe6f01ac24c403fda2bdb3276ae4950b92515313a9640147dd7f9eeea15e9bda0c031bb827d83d958d73f66b60d53e752e1e96eb5dccc50ab23cd94ae0bf3299b490e3e75603bd5d68771e11978ffcff48d752777390622ff7f335b3ea4"}, 0x88, 0x4000000}, 0xdc69b6607f9eb1c6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f00000001c0)=""/149, 0x70e000) [ 368.215099] binder: 17491:17497 Acquire 1 refcount change on invalid ref 0 ret -22 [ 368.233270] binder: 17491:17497 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:22 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xa503000000000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x402) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000080)=0x10000, 0x4) 03:35:22 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8}, 0x0, 0xffffffffffffffff, r2, 0xfffffffffffffff9) read(r2, &(0x7f0000000100)=""/48, 0x30) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="82c7cba45a9439c027f47e727909cadb499bea35fc2d1626d627038de2c822f3dd4e80f876afd44c350ba03e5f3551b5d0d5629364ba9efabe0bd432719e5b3484d11af4087f4da1392c9efba339f24b618b5c94ccf88db4c79c4e29c8252c8a1a2c1997108f7b7e3ff770153b392d6658e8ba704bc5", 0x76, 0xfffffffffffffffa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000480)=0x80) getsockname$llc(r6, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000500)=0x10) keyctl$chown(0x4, r3, r4, r5) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) sendmmsg(r2, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) r7 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x28841) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f000000dfd0)={0x36, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c63000008e249da50f068f671e8c3327238f1b3d4b85da4a8bc2acfdd879ece00000200002568fdec91b92428000080000000000000"], 0x0, 0x0, &(0x7f0000000680)}) 03:35:22 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x630d, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:22 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0xd4, 0x0, &(0x7f00000001c0)}) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1, 0x0, &(0x7f0000000240)="ce"}) 03:35:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x5423, &(0x7f0000000000)) dup3(r2, r3, 0x0) r4 = dup3(r2, r1, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) 03:35:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x10, 0x0, &(0x7f0000000440)}) 03:35:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/171, 0xab) getsockopt$bt_BT_SECURITY(r0, 0x12, 0x3, &(0x7f0000000040), 0x13b44b) [ 368.544687] binder: 17515:17518 Acquire 1 refcount change on invalid ref 0 ret -22 [ 368.556110] binder: 17517:17520 BC_FREE_BUFFER u0000000000000000 no match [ 368.580206] binder: 17515:17518 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg(r0, &(0x7f0000000800)={&(0x7f0000000040)=@ipx={0x4, 0x4, 0xf5d, "a79378b38a2e", 0x8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="ff874fc8384ae575d5a1eff44b4ab79b2f1b863912d534783e0acf465aee06df70935f9432345fca1c2c56ff343b1a83f4a9475a05dc22713950d3cea0442171cfa1aa09b9b166c0b170047acb19924712532db5989da6c090606bd0ce40fe6eea4a5628ab38a66e549d51d69b7db1284ef2a32fb34ff6991ea41b8574ae7d037be99f58e1818354ffdfb5bb", 0x8c}, {&(0x7f00000002c0)="aac28b183a089100783c8d0b17b1bc35d9a85e21e09105a2eadd0fb3a6a925761cff12262cf2be38636af7463db213c0dd4790a383b9f12369e40d8e72266170d478e9f72f692fb9684714ce73a5a9d5962106a0c72d6c3bf397a9cae8761684d8e2387445f0359a231fa9e719b57fe06b46fb699453e0df74f8693c2e5f90cb6c8e99ea9dc4f6ce91c3e5babd84bea3fa4b127e3f805fa4bbda4041b12aee8a866a2398f88ca5341bcbf413b9ed29da53f8b9d03149030692ff5746fa2b644b8d29e2cdfea7aa6fb1b3015cde84f7e7926441da24e9d776d81a287c5c4cadcbc34efc31a52a0ed50702b85ae2027243", 0xf0}, {&(0x7f00000000c0)="851ce27672d79a1428a51a48c5b67e132e340e8b7220b98ee36badfd50b98775a1840ab428edfc3f2ac9e3c9ea622fa0e0a57ae1b067978e9864409789d95bec", 0x40}, {&(0x7f00000004c0)="732983592522a9d1c60f1ea87def441234c5cd81ebe2dd854158453931070d87262a6a524e2b5474baac05930263abb22c3fc3387fed501fe046a3b203c90aacc1b3ba2d4f33d98c338c5d56460eb168202099b42e5e94779d5abb8fbf6345c0676d8dba677d5a74acae8ab14692e3d966ea93e5818845802fc8debc2beccae4b9ff3cff1dc50a44e31707fa8b3184bc779d439ce1db8f2498f14b1578aa06498c204552a2f6a7293b9316aeeb7aedfa1e50b4e2ea6ed64b538c3b56ae9163da89d9f23458b88e1e1df5377e1b9b8af905e8ab276de2c9e93cba9558281ce8e5744b23", 0xe3}, {&(0x7f00000003c0)="ae843f45620db52b", 0x8}, {&(0x7f00000005c0)="75b84d6810f909e137d4ad85c88bdd21500504e96534e2f2c0d8cbfe1b8008d90c482874ab97574fc98b0748d5d0c59688c5ad37a75ef375ec1bd1516b0f9e879e66f85e66dd11a9935564b5e3f4b055171dd3eb26977595fd45b5d82fbcc8e5251db1738ce5ec4d11d3eefac9c8a28b8905a742a085f5e771d3a486eecd7579cfb4a189da22044942cf90510dc04f1459813db06afe5b0508ab173171dd007fdc1ee5e7377b8a254f5d03641f84649b", 0xb0}], 0x6, &(0x7f0000000680)=[{0x80, 0x113, 0x3, "fd181ee42b0d607a66cd36de282c2afa4c9ed92bf4249b99c5d6d9f75fefa61e090ea5a5e64812a6b8f870edf04e4de48dff97e8036e680e2d35c9e3782627c3935426fe25ed9c8ca66cd2a9a3e8d9151198898fe1cac55ca7d4a586d1de2bf29ab32952be5ecc67a625c79418501b"}, {0xf0, 0xff, 0xfffffffffffffffd, "1d05479e367ce45b38b6425390a2545c442f749072d675c4c6759ba623274aa6fb0cc2f5455a5ed661bcaeab6b4f662fff6e58328291132ff2697e43d41d5eacfc6cba50dd3fdcfd68590bf1892025c64e2daa04ac9476f3a0e42203cdde4edcb14ed6d2f4fcbfec8ed892012b0189dfa1a8baafe03b1d9eb339096d18c0c4af1683a5a3111588a58434a1c40a6d87d87bab943f4945d6d66aa5d94ba868d4261458e725bb0f03603632bfad7d691bc88eb496234cb98bd7084ba4c3ac525789cf006b7822d2095c2a4233c9dffd8ca71f80df5b222c7050b49a79a11b94c6c8"}], 0x170, 0x80}, 0x4004810) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r3, r2]}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:22 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x1200, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 368.621879] binder: 17510:17527 unknown command -632692216 03:35:22 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='/dev/kvm\x00'}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000780)=0x5, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, [0x1f, 0x1, 0x0, 0x6, 0x0, 0x8, 0x9, 0x0, 0x3, 0x20]}, &(0x7f0000000100)=0x100) r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x5, 0x0) futimesat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}, {0x77359400}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@rand_addr, @in=@dev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe8) setresuid(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200006000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) [ 368.680482] binder: 17510:17527 ioctl c0306201 2000dfd0 returned -22 [ 368.775269] binder: 17510:17542 unknown command -632692216 [ 368.781200] binder: 17510:17542 ioctl c0306201 2000dfd0 returned -22 03:35:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4bbce34b546db7f2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x7ffff, 0x100000000046) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)="1d405327fe9913fbb9b7c738305053fcf9f5385a589b11e7fcfd102e89", 0x1d}, {&(0x7f0000000340)="ad53724ff30cb548c5ba1fc39c116fe792d00fa453ed59f4934d905a2dbe032925c17436ee58458b88da4f7efdce3a4790da2f667a14a00220d6c07bab9feda157e9bf810631098861236a6d072f170b97c874028826338ae70ebdc1fa6851659495a952c5001dcb7e071089aab6038bea963c6cce593b82c0ba4b35aa70b3abdeddcbb2f4dcfde2bdb9f950572b8dc39e98a4da2434138ed5ccf10c43a4298c0ea3e2b49802b84661e6af30eb0c648bdc60bacb12f3a1f203c64fa0", 0xbc}], 0x2) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) clock_settime(0x6, &(0x7f0000000180)={0x0, 0x1c9c380}) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x111800, 0x4a) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000080)=""/225) 03:35:22 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r1 = socket(0x1e, 0x1, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x4b, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r1, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x4) r4 = syz_open_dev$admmidi(&(0x7f0000000640)='/dev/admmidi#\x00', 0x2, 0x40000000000080) ioctl$TCSBRKP(r4, 0x5425, 0x6dba) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000003c0)={{0x21a, 0x7fff, 0x9, 0x200, 0xa2, 0xf5}, 0xaa3b, 0x2, 0x5, 0x5, 0x8, "3640ce6fdc85209b3dc606c4a346246d0b0834983e3ba228c806c3756d7e60c82d16cfd7331952abbe356126fd872771ba4f2a5625d7d3b84c32e54989cb8e41c4bb93c08ef1b3ac5c7797e1c50a31d678879b38dd164b67476952e65113c1cdae18809bfa25070daf067ccb493689921627fdb6c1789e316ffa0c14d1015445"}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000500)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) recvfrom(r3, &(0x7f0000000180)=""/71, 0x47, 0x20, &(0x7f00000002c0)=@can={0x1d, r5}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000940)={0x5, 0x10, 0xfa00, {&(0x7f0000000740), r6}}, 0x18) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480)=0x0) sched_setattr(r7, &(0x7f00000004c0)={0x30, 0x2, 0x1, 0x9, 0xaf1a, 0xfffffffffffffffe, 0xffff, 0x100}, 0x0) ioctl$TIOCEXCL(r2, 0x540c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x880, 0x0) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020be9000f00000026bd7000fcdbdf250c000000c002000000283ae6050023ee1b85b9c7e4050a2e4599ee7b46988e6f536abfab2d67974e2792111da11a6059c4c09f6c6f3676c08c85288bb8cc11ffd904586fbcd17a258af2f03c9fed0901001400000000000000000000"], 0x78}}, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000680)={{0x4, 0x2, 0x7, 0x1000, 0x6, 0x2}, 0xfffffffffffffffa, 0x40, 0x7, 0x3ff, 0x230f, "5dc779cf162b16905ef2131536767e47e824692e223c063d8f1bc6a6e7fd7de6888b7f19ec26384f8496b170032a267c4d7d4b9f553c0ee3ffe4b8bde0f12a08f94cc934d498e02bb54b9ec3dc675fa4bc35016fbfcce689cd5d41daa88b0d3d0e5afe1054170be68ea4119d7f1b9fc808da8e8b44b76bc2ea32301826c805b4"}) 03:35:22 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:22 executing program 1: unshare(0x400) socketpair(0x8, 0x4, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, &(0x7f0000fee000)) [ 368.859033] binder: 17547:17550 unknown command 64 [ 368.875510] binder: 17547:17550 ioctl c0306201 20000480 returned -22 03:35:23 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x500000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:23 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x100000000000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:23 executing program 1: ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000002c0)={{0x0, 0x10001, 0x59a}, 0x48f3c70e}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000000c0), 0x1000000000000134) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x2, 0xf2, {0x52, 0x9, 0x3, {0x7f, 0x3ff}, {0xaa0, 0x2}, @rumble={0x8, 0x20}}, {0x53, 0x4, 0x5, {0x80000001, 0x2}, {0xd43e, 0x800}, @cond=[{0x6, 0x5, 0x36, 0x3, 0x1, 0x7}, {0x7fff, 0x6, 0x8000, 0x4, 0x1}]}}) 03:35:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:23 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x402001, 0x0) signalfd4(r0, &(0x7f0000000080)={0xe9c}, 0x8, 0x80000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x400000000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000002, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r5, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x5a) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000002000)}) r6 = dup2(r3, r2) connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="046305400000000001634040000000000000000000000100"], 0x34c, 0x0, &(0x7f0000000080)}) 03:35:23 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x630b, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x300000000000000, 0x0, &(0x7f0000000440)}) 03:35:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[], 0x97) sendfile(r2, r2, &(0x7f00000000c0), 0x8080ffffff10) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:35:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000000040)=""/171, 0xab) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 369.563498] binder: 17582:17583 BC_FREE_BUFFER u0000000000000000 no match 03:35:23 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x3494020000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:23 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x11634840, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:23 executing program 4: socketpair$unix(0x1, 0x100000000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x400, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x2e60) socketpair(0x9, 0x1, 0xffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000080)) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 369.715040] binder: 17578:17600 unknown command 1074094852 [ 369.740713] binder: 17578:17600 ioctl c0306201 20000180 returned -22 03:35:23 executing program 1: perf_event_open(&(0x7f0000001240)={0x2, 0x70, 0x7, 0x0, 0x2, 0x9, 0x0, 0x0, 0xb80, 0x0, 0x0, 0x7, 0x1, 0x7, 0x6aa, 0x8, 0x89, 0x53, 0x3a4, 0x0, 0x1, 0x7, 0xc3, 0x0, 0x10000, 0x3, 0x200, 0x6, 0x0, 0xfffffffffffffff7, 0x101, 0x3, 0x0, 0x200, 0x7, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000001200), 0x6}, 0x2144, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4ac}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001440)=@assoc_value={0x0}, &(0x7f0000001500)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001540)={r1, 0x4}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004c80)={{{@in6=@mcast1, @in6=@ipv4={[], [], @remote}}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000004d80)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004dc0), &(0x7f0000004e00)=0xc) getegid() getresuid(&(0x7f0000005a40), &(0x7f0000005a80), &(0x7f0000005ac0)) getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000005d40)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005d80)={{{@in=@loopback, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000005e80)=0xe8) stat(&(0x7f0000005ec0)='./file1\x00', &(0x7f0000005f00)) gettid() getuid() fstat(r0, &(0x7f0000005f80)) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000006640)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000006700)) fstat(0xffffffffffffffff, &(0x7f0000006880)) getresgid(&(0x7f0000007fc0)=0x0, &(0x7f0000008000), &(0x7f0000008040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009680)={{{@in=@local, @in=@local}}, {{@in6}}}, &(0x7f0000009780)=0xe8) stat(&(0x7f00000097c0)='./file1\x00', &(0x7f0000009800)) fcntl$getownex(r0, 0x10, &(0x7f0000009880)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000098c0)={{{@in6=@mcast2, @in=@rand_addr}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000099c0)=0xe8) getgroups(0x4000000000000177, &(0x7f0000009a00)=[0x0, 0x0, 0xee00, r2]) getresuid(&(0x7f0000009a40), &(0x7f0000009a80), &(0x7f0000009ac0)) fstat(0xffffffffffffffff, &(0x7f0000009b00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009c80), &(0x7f0000009cc0)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009d00)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009d40)={{{@in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000009e40)=0xe8) lstat(&(0x7f0000009ec0)='./file1\x00', &(0x7f0000009f00)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) syz_open_dev$evdev(&(0x7f0000001400)='/dev/input/event#\x00', 0x1, 0x208200) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000240)=ANY=[@ANYBLOB="916f6163546d652c00"]) 03:35:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f0000000080)=0x24, 0x12) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000240)=""/106, 0x20000, 0x800, 0xed1}, 0x18) 03:35:24 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x6c00, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:24 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xc008, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18ef00000000000001000000010b0000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 370.016726] binder: 17578:17600 unknown command 1074094852 [ 370.037644] binder: 17578:17600 ioctl c0306201 20000180 returned -22 03:35:24 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x500}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:24 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0x2000) getsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000280)=""/230, &(0x7f0000000180)=0xe6) r1 = socket$inet6(0xa, 0x80003, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r2, &(0x7f00000000c0)=""/32, 0x19) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000002440)={0x2, 0x8}, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) sendto$inet6(r1, &(0x7f0000000140)='9', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x5, 0x4) setsockopt$inet6_int(r2, 0x29, 0x78, &(0x7f0000000080)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x10}, 0x4}, 0x1c) 03:35:24 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x2, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000200)="9a6ec51fa999e0fa11a99e9093c17b1a00000000e1ff0369373dfe46794a306d8c3452d90b091906bf8a7eb3676efd05000000048c622bd957ac0c120ab4a9aab5fd094d2d5c06863173be", 0x4b, 0x8000, 0x0, 0x0) 03:35:24 executing program 5: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1/file0\x00') removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@known='security.ima\x00') 03:35:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x600000000000000, 0x0, &(0x7f0000000440)}) [ 370.504919] binder: 17641:17645 BC_FREE_BUFFER u0000000000000000 no match [ 370.508600] binder: 17648:17649 unknown command 16396 03:35:24 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x263044000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 370.553318] binder: 17648:17649 ioctl c0306201 20000480 returned -22 03:35:24 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xa, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 370.857434] EXT4-fs (sda1): Unrecognized mount option "‘oacTme" or missing value [ 370.896326] binder: 17671:17672 unknown command 1661140992 03:35:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101000000000000000000000000738ad49499b89cd72aecc6000000000000000000"]}) 03:35:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000080)={0x5, 0x10001, 0x3, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 370.908965] binder: 17671:17672 ioctl c0306201 20000480 returned -22 03:35:25 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 371.049458] binder_thread_write: 14 callbacks suppressed [ 371.049473] binder: 17683:17684 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="9d0f01ca0fae290f30360f21fe0f00d1550f013b0fc76ea70fae605f", 0x1c}], 0xaaaaaaaaaaaac71, 0x0, &(0x7f0000000100), 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000003c0)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40101, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0)={0x932, 0x4, 0x5, 0x401}, 0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000380), 0x4) [ 371.094415] binder_thread_write: 10 callbacks suppressed [ 371.094426] binder: 17683:17684 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 371.169278] binder: 17683:17684 unknown command 0 [ 371.175728] binder: 17683:17684 ioctl c0306201 20000480 returned -22 03:35:25 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x8106000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 371.260882] *** Guest State *** [ 371.264274] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 371.273187] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 371.282070] CR3 = 0x0000000000000000 [ 371.285835] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 371.291889] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 371.296037] binder: 17698:17699 Acquire 1 refcount change on invalid ref 0 ret -22 [ 371.297926] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 371.312472] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 371.318640] binder: 17698:17699 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 371.320546] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.335688] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.343715] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.351781] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.359813] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.367895] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 371.375964] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 371.383994] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 371.392034] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 371.400054] EFER = 0x0000000000000000 PAT = 0x0007040600070406 03:35:25 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80000, 0x0) fstat(r0, &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000ae08000000000016", 0x33, 0x1400}], 0x0, &(0x7f0000000300)) 03:35:25 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x400c630e, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 371.406539] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 371.414038] Interruptibility = 00000001 ActivityState = 00000000 [ 371.420331] *** Host State *** [ 371.423609] RIP = 0xffffffff8120b2b4 RSP = 0xffff8801c835f350 [ 371.429693] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 371.436155] FSBase=00007f36a50b5700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 371.444031] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 371.449974] CR0=0000000080050033 CR3=00000001d34d3000 CR4=00000000001426e0 [ 371.457053] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86e01380 [ 371.463782] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 371.469921] *** Control State *** [ 371.473432] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 371.480164] EntryControls=0000d1ff ExitControls=0023efff [ 371.485684] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 371.492693] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 371.499414] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 371.506055] reason=80000021 qualification=0000000000000000 [ 371.512404] IDTVectoring: info=00000000 errcode=00000000 [ 371.517903] TSC Offset = 0xffffff3731941e1d [ 371.522272] EPT pointer = 0x00000001bd63b01e [ 371.541146] binder: 17718:17720 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x626041) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x0, 0x8, {0x0, 0x2}}, 0x20) r2 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x77, "f95036d03a1dcd8952d0e669984fce62574d06a6e69af08026b5dbb7a7268d80b149c7ac639e5f6a663e5f4bb8549ddee22a30354a07f1442eb8783d09c4b7402368becbe716551198f1b1a6fe6e13a0c77fa3736cca5539e3b96f701ccce93fccee190282627d33963e3f6f4db9bf6f9ccc396081ba5e"}, &(0x7f0000000200)=0x7f) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r3, 0x0, 0x20, 0x100, 0xffffffffffffffe0}, &(0x7f00000002c0)=0x18) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r4 = socket$inet6(0xa, 0x80003, 0x800000000000006) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000000080)={0x0, 0xfffffffffffffffc, 0x80, 0xfd5, 0x7fffffff, 0xfff}) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r2, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:25 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xf0ff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x4000000, 0x0, &(0x7f0000000440)}) [ 371.570005] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.577358] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 371.581927] binder: 17718:17720 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 371.599791] F2FS-fs (loop6): Invalid segment/section count (1441792, 8 x 1) [ 371.606971] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 371.633627] binder: 17724:17726 BC_FREE_BUFFER u0000000000000000 no match [ 371.644905] *** Guest State *** [ 371.648357] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 371.657279] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 371.666179] CR3 = 0x0000000000000000 [ 371.669973] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 371.674012] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.676014] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 371.676034] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 371.676057] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 371.683101] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 371.707546] F2FS-fs (loop6): Invalid segment/section count (1441792, 8 x 1) [ 371.711475] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.711495] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.711513] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.711531] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.718678] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 371.726675] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 371.766923] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 371.774964] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 371.782988] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 371.791032] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 371.799052] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 371.805535] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 371.813122] Interruptibility = 00000001 ActivityState = 00000000 [ 371.819415] *** Host State *** [ 371.822664] RIP = 0xffffffff8120b2b4 RSP = 0xffff88018b867350 [ 371.828745] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 371.835285] FSBase=00007f36a5073700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 371.843141] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 371.849074] CR0=0000000080050033 CR3=00000001d34d3000 CR4=00000000001426f0 [ 371.856161] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86e01380 [ 371.862937] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 371.869075] *** Control State *** [ 371.872565] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 371.879302] EntryControls=0000d1ff ExitControls=0023efff 03:35:25 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40486312, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:25 executing program 5: r0 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="03d2f4bc193b1562b8872716c93482310c01880bdaf99860d5eaa4f21e2a40fa4e1725b2ef2c17ae36c962a7ebaf6bb191567762d11b0352a20555add7debe4fa3f18d58b4e83bda1d9ccd90ec81f59013e4514b640e2e8fd4ed76cfd5cfd2d5a8bbaa1d3bd147f84302dc297dd41a802a2083a862914b2a5c15e88ed9afccb6ad8474f144d8d80bc7c7b840d2e0bf63cf8221e51370ab24fb1a578d77423ec695202fb5afc9a34685960ca8adffe2f3a2df9f1e8c9a968eb3d0f86399a606d0d937f6344c", 0x280, 0xfffffffffffffff9) request_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='security-\x00', r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xffffffffffffff0a}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x4e23, 0x29b, @remote, 0x9}, {0xa, 0x4e20, 0x3, @mcast1, 0x9}, 0x8001, [0x1f, 0x7ff, 0x7fc00000000, 0x20, 0x100, 0x48000000000, 0x6, 0x1f]}, 0x5c) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) [ 371.884799] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 371.891809] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 371.898542] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 371.905158] reason=80000021 qualification=0000000000000000 [ 371.911542] IDTVectoring: info=00000000 errcode=00000000 [ 371.917062] TSC Offset = 0xffffff3731941e1d [ 371.921415] EPT pointer = 0x00000001bd63b01e 03:35:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000002c0), 0x1000000000000180) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) r3 = socket$inet6(0xa, 0x80000, 0xfffffffffffffffd) epoll_wait(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x5, 0x0) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000000c0)=@generic={0x3, 0x1e}) dup3(r0, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0xd, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001100100428bd7000ffdbdf2507000000", @ANYRES32=r5], 0x2}, 0x1, 0x0, 0x0, 0x20040880}, 0x20008810) [ 371.952601] binder: 17737:17738 Acquire 1 refcount change on invalid ref 0 ret -22 [ 371.962593] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.969848] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 371.979272] binder: 17737:17738 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:26 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000600)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b00020000bb2000000000060095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000140)) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x100, 0x0) 03:35:26 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000940)={'syz1', "4c53764db27c5ef6be7346c6bfad4212f766228868d796817e915e3c44beb776fbf41947dd3f12e600bc67f93f068b38799d291fe7b7d90446b7c267590ddad9bfd99f30a816b87b9d10b590833f203fa47057c24120f7d01b6f6a686af9c4b00402a437e098d5e37b8fae6551ea81370b6bfbb4bfecf0962905023bde97333204fa867f2dee4ef45268ca9428a753295aeafa4b87788c0d8331bb263d3c4f287dd8e8f663cbb398b334f0a16669f8d023aeaaa0d6850f901d99f8536ae0e5c1e3374c44038fc6cf"}, 0xcc) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440), 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="8a07581ef836f12279ec27f910cf7bc96e35d61f000000000000005f07671ffb844380bd0352b8db3c4db25789c1f9067a11c462ac67da88209e54d47f962bb4ad94000a32a40d271be1adf1dbcb448f293ab2689229dcf8a7174b279b5d4e39925b97c837e44f10960bbbf61ab3b3d326ec1929eddb0d9d49d0e7d3501608a9e6538fe60000000000000000f5aebb65a9d7b8749ae674eb43fafd34503281cf830625a4205246096b06c3ffd2b0d84a1b940a1762b7b2bc9c75ed6dad882f83ed04f464034affc9e593647ea17bb8eb0bab8a35a02b182653c1", 0xda, r1) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000200), 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000180), &(0x7f0000000300)='u', 0x1, r2) r5 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000140), &(0x7f00000007c0)="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", 0x159, r3) r6 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r4, r5, r6}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000040)='ghash-generic\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'ipddp0\x00'}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) 03:35:26 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x463044000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r3, r2]}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 372.160032] binder: 17759:17762 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:26 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x38e, 0x20800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@ipv4={[], [], @loopback}, 0xff, 0x3, 0x2, 0x4, 0x8, 0x40000000000, 0x29}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7673319c, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000004c0)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x450036ea, @dev={0xfe, 0x80, [], 0x1f}, 0x8}}, 0x0, 0x4000000000000000, 0xc60, 0x2, 0x80}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000440)={r1, 0x4}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x9d, "6c5b0b7b5f0cab154f54b3188b80e175fc1debba981e9a0ecc683a9af34a4342b6e29bb24368a14f3536cc6ef75aeb483c3453624227166b59fb42a4a014f415092972bb4c7d3c2b0e95317eb8eb3df0751d5f2532d26158649a62887316d53e53fdaed905f33d8c6d40271a38e1d3a9ec32382ab80653df9fcaeb515064af60bb444019bcc983a0818b1efa8f05e9c6386f4ff093662225784e6c9620"}, &(0x7f0000000180)=0xa5) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000300)={r2, 0x401}, 0x8) 03:35:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xbd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "fd9968149ac729467d4e4838cc7d2b84977fb3b77fa681359de9e594674a492403d1be91b0c9618ec813c305d164a19874b06beba879241f637746572084f08b724cfa149de397e20db54b92b3bc27aa800a0a3d2ac98197e5ed4458ca27fa71d2e680f9732daeffa8b451eb0532fcf8e514bf0ed1b25717cd8df2768e341ae024f1ccf76c4214c09b58aaaa7e7b3a4fdf49d7216e"}, 0x99) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) [ 372.217967] binder: 17759:17768 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:26 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xbe08000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:26 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000040)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7}, 0x10) [ 372.336897] binder: 17779:17780 Acquire 1 refcount change on invalid ref 0 ret -22 [ 372.354597] binder: 17779:17780 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x1, 0xec28}, 0x8) r5 = request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffa) add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)="68942e47e46defd6bd0febe63d67bdc27857a5cc3bc0f930b1f59b204ebca46557535fc7dc38f714a675e36002706807f59357ce9009440af567b9abd94db007cf6751f8489dca63b1", 0x49, r5) io_setup(0x104e4e845, &(0x7f0000000740)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) io_getevents(r6, 0x1f, 0x1, &(0x7f0000000440)=[{}], &(0x7f0000000500)={r7, r8+10000000}) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000040100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40401000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb8, r9, 0x700, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xaf6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffb}]}, 0xb8}}, 0x20000081) 03:35:26 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 372.456611] binder: 17790:17791 Acquire 1 refcount change on invalid ref 0 ret -22 [ 372.476885] binder: 17790:17791 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:26 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000002c0)={0xfffff00000000000, 0x8, 0x7}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r3 = socket$inet6(0xa, 0x80003, 0x800000000000006) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000180)={@local, @rand_addr, @multicast1}, 0xc) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)) getpeername(r4, &(0x7f0000000000)=@pppol2tp, &(0x7f0000000080)=0x80) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001840)={@dev, @dev, @dev}, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) bind$can_raw(r1, &(0x7f0000000300)={0x1d, r6}, 0x10) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r2, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:26 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x1000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x10001}, &(0x7f0000000440)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000bc0)=""/4096) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) unshare(0x400) clock_gettime(0x0, &(0x7f0000000ac0)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'tunl0\x00', @ifru_names='bridge0\x00'}) flistxattr(r1, &(0x7f00000005c0)=""/76, 0x4c) prctl$getname(0x10, &(0x7f0000000840)=""/227) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000780)=""/153) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2000}, 0x4) pipe2(&(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000500)={{}, {0x7fffffff, 0x2}, 0x0, 0x0, 0x157c}) clock_gettime(0x200000000000009, &(0x7f0000000480)) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x104, 0x279d}) syz_open_dev$mice(&(0x7f0000000680)='/dev/input/mice\x00', 0x0, 0x80) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000b80)={0x1f, {0x0, 0x3fff80000000000, 0x8, 0x0, 0x6, 0x4000005}}, 0x8) getgroups(0x2, &(0x7f0000000580)=[0xee00, 0xffffffffffffffff]) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x19}, @void, @mpls={[{0x0, 0x20, 0x40, 0x8}], @llc={@snap={0x1, 0xaa, "f2", "c0bfb8", 0x201, "0000dbf769da93d483929e63f52954e7f32782c76275c704e3bfc858943082035582b683af6fb3682fe7a93cc82bbbca8da07463441c9b6fd23bfcdc695330c86679b653df5317538d39ee756de5f6df9da1f447f7cfdefca6829b0fa6cc51bf45fedeeba0636ad593707bf4af25fb9325ce5499d9c9d0a534082a6f93d2a71d5d14965b32784ccaf7506db512a1a0a35da3f84238cd76"}}}}, 0xa7) setfsgid(r4) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) clock_gettime(0x9, &(0x7f0000000200)) syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x1, &(0x7f0000000a00)=[{&(0x7f0000000940)="edb5115c4e5780acc2402531b6df0d9c87a34ede9461172ce364f19385f2a2bc01951951d82c8b1756c154d4cb8fe408af991cd65ae4b2675d9f951e14e98acd9d8ee26e81d868b811f53bfbc109169491ea5d624afd2fa8ba118c3d8efcb876f2b77578bed2c06684bb920a96421160f79fce20577cc52f44235963fe2b3e87b773233340e0950a8ebd9e8b83b8b253e390047497166ad5b2c1de0127d164c1aea094469ad0ed", 0xa7}], 0x2, &(0x7f0000001bc0)=ANY=[]) 03:35:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x600, 0x0, &(0x7f0000000440)}) 03:35:26 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x22000, 0x0) ioctl$sock_bt_hci(r3, 0xc00448ff, &(0x7f00000004c0)="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") sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000800000100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:26 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) socket$inet6(0xa, 0x5, 0xfffffffffffeffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000015c0)=[{0x10, 0x10d, 0x6}], 0x10}}], 0x1, 0x0) 03:35:26 executing program 1: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff, 0x100000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)='[', 0x2d7}], 0x20d, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000380)='C', 0x1}], 0x1, 0x0) [ 372.739891] binder: 17810:17816 Acquire 1 refcount change on invalid ref 0 ret -22 [ 372.775998] binder: 17807:17808 BC_FREE_BUFFER u0000000000000000 no match [ 372.780549] binder: 17810:17816 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100000001) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4c4a82, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0xfffffffffffffffb, 0x0, {0x3, 0x2, 0x2000000000, 0x3, 0x52ba59e5}}) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x20000000, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback}, 0x1c) 03:35:26 executing program 6: r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) fcntl$addseals(r1, 0x409, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x21e) 03:35:26 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x68000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 372.846069] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 03:35:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7fffffff) syz_emit_ethernet(0xb5, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 03:35:27 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000380)={0x4}) fcntl$setown(r2, 0x8, r4) syz_open_procfs$namespace(r4, &(0x7f0000000200)='ns/net\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f\x00\x00\x00\x00dno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) [ 372.915519] binder: 17838:17840 Acquire 1 refcount change on invalid ref 0 ret -22 [ 372.953661] binder: 17838:17840 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:27 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x400000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9201, 0x0, 0x0, 0x0, 0x0, 0x410000000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 373.006918] 9pnet: Could not find request transport: f [ 373.038191] 9pnet: Could not find request transport: f 03:35:27 executing program 5: r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x810000000000c988, 0x242000) recvfrom$packet(r2, &(0x7f0000000280)=""/91, 0x5b, 0x40010100, &(0x7f0000000140)={0x11, 0x1b, r1, 0x1, 0x9, 0x6, @random="6d8567993726"}, 0x14) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000180)=0x4) close(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) write$FUSE_LSEEK(r2, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x200}}, 0x18) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) [ 373.067323] binder: 17857:17858 Acquire 1 refcount change on invalid ref 0 ret -22 [ 373.096126] binder: 17857:17858 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x200, 0x40000) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:27 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xa5030000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:27 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x700000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:27 executing program 6: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="0205010007000000000000000000000002000100000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x38}}, 0x0) r2 = syz_open_dev$midi(&(0x7f0000001580)='/dev/midi#\x00', 0x9, 0x4000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000001740)={&(0x7f00000015c0), 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0xa8, r3, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc95bf2482b361c6b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc6c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xa8}}, 0x4040) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 03:35:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$packet(0x11, 0x9, 0x300, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) prctl$getreaper(0x28, &(0x7f0000000000)) 03:35:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) 03:35:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x63d, 0x0, &(0x7f0000000440)}) 03:35:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 03:35:27 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x74000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:27 executing program 6: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x1000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 373.714478] binder: 17891:17895 BC_FREE_BUFFER u0000000000000000 no match 03:35:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x2007fffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc0000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000200)=ANY=[@ANYBLOB="a15ea4807a8c658b109bf64be01800008090f0d770dea3ff7fbb5269ae16e1f231c0ba1ee09ad9e0e2a785856184c40d17e9ae8ee0efbb73d27ba829936178d61651b1ec43d9d97352c9f03e2cd401de78756866226aaab7a6e41df920c9341df49e929293e6eee9ab745e7413cd6e3ff738a4082850a2a33b", @ANYRES32=r4, @ANYRES32=r3], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:27 executing program 5: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x1000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:27 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='^system\x00', 0xffffffffffffff9c}, 0x10) write$UHID_CREATE2(r1, &(0x7f00000000c0)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x83, 0x80, 0x3, 0x8, 0x7ff, 0x10000, "eaad607203f20bc395d48e968a54c8f4f74160aa1acef48d2ccc060d5a90654c1aac3c120e1f5c125f4218cb86de5c4b888d43e8465ed678f2c5e6f639c0d7f30350300a24ee147ceae2685f5f9daeb894790307e5a1f70e6d885387581369bdca71a2c259e9321e3a69c6a4b96a15c5568bc161d47f800662bf0e6a486397b5d8372a"}, 0x19b) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x400, 0x0) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) 03:35:28 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x34940200, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:28 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0xe630c40, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:28 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x500, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:28 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x2}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:28 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x26, "62efcad9469a3d0e0f469765691c43fdf1c57fdc87a66dcc697dc6bfd7ba11c9c1138cfec43a"}, &(0x7f0000000080)=0x2e) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x3, 0x400}, 0x8) syz_read_part_table(0x0, 0x0, &(0x7f0000001740)) 03:35:28 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x8be, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x3c06000000000000, 0x0, &(0x7f0000000440)}) 03:35:28 executing program 6: [ 374.644410] binder: 17949:17952 BC_FREE_BUFFER u0000000000000000 no match 03:35:28 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x2000000000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:28 executing program 1: 03:35:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008864bb5be36cb25b844a7a4f", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:28 executing program 5: 03:35:28 executing program 6: 03:35:29 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x963104000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:29 executing program 5: 03:35:29 executing program 6: 03:35:29 executing program 1: 03:35:29 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 375.060701] binder: 17988:17989 unknown command 0 [ 375.070278] binder: 17988:17989 ioctl c0306201 20000480 returned -22 03:35:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x4) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00') ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000080)) sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:29 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x500000000000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:29 executing program 5: 03:35:29 executing program 1: 03:35:29 executing program 6: 03:35:29 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x763044000000000, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:29 executing program 2: pipe2(&(0x7f00000013c0)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004c00), &(0x7f0000004c40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004c80)={{{@in6=@mcast1, @in6=@ipv4={[], [], @remote}}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000004d80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004dc0), &(0x7f0000004e00)=0xc) fstat(0xffffffffffffffff, &(0x7f0000005b00)) getpid() setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)=0x4, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000064c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006740)={{{@in6, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000006840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000006880)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000009880)) getresuid(&(0x7f0000009a40), &(0x7f0000009a80), &(0x7f0000009ac0)) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/204) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009c80), &(0x7f0000009cc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000009d40)={{{@in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000009e40)=0xe8) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f00000001c0)={0x200, 0x1}) syz_open_dev$evdev(&(0x7f0000001400)='/dev/input/event#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000540)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000001800), 0x820, &(0x7f0000000240)={[{@noacl='noacl'}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r3 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r2, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x100000000000000, 0x0, &(0x7f0000000440)}) [ 375.625157] binder: 18002:18006 BC_FREE_BUFFER u0000000000000000 no match 03:35:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=ANY=[@ANYBLOB="18000001000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101041) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000080)) 03:35:29 executing program 6: 03:35:29 executing program 5: 03:35:29 executing program 1: 03:35:29 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:29 executing program 5: 03:35:29 executing program 6: 03:35:29 executing program 1: socket$inet(0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x40, 0xb5, 0x0, 0x6}, [{}]}, 0x78) [ 375.792398] binder: 18022:18025 unknown command 0 [ 375.799324] binder: 18022:18025 ioctl c0306201 20000480 returned -22 03:35:29 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x1634040, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:30 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xf0ffffff7f0000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:30 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)) getpgrp(0x0) writev(r0, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x10) 03:35:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)="262a1e00"}, 0x10) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5656, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x80000000, 0x0, 0x0, 0xffff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$kcm(0xa, 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xf0, 0x4, 0x6c, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000140)}, 0x20) getpid() close(r0) 03:35:30 executing program 1: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000440)=""/4096) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x3fffff, 0x0) fstatfs(r0, &(0x7f0000000100)=""/247) 03:35:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001000000010000009d0ee5739068ab7e041882d9b4b302b69b472c5ebd276d4e3ad895018712ee2d6752", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:30 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x630c, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:30 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x300, 0x0, &(0x7f0000000440)}) 03:35:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000080)=""/72) r3 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) [ 376.551631] binder_thread_write: 11 callbacks suppressed [ 376.551645] binder: 18049:18054 Acquire 1 refcount change on invalid ref 0 ret -22 [ 376.578404] binder: 18058:18063 BC_FREE_BUFFER u0000000000000000 no match 03:35:30 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ptrace$poke(0xfffffffffffffffb, 0x0, &(0x7f00000000c0), 0xfffffffffffffffc) fstat(0xffffffffffffffff, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)="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") preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:35:30 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000540)=0x80) dup2(r0, r1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=0x9, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x9}, 0x8) fcntl$getown(0xffffffffffffffff, 0x9) 03:35:30 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 376.604697] binder_thread_write: 11 callbacks suppressed [ 376.604710] binder: 18049:18070 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:30 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x40406300, &(0x7f0000000380)=[@dead_binder_done={0x400c630f}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:30 executing program 6: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x500000000000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:30 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6310}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 376.778557] binder: 18087:18088 Acquire 1 refcount change on invalid ref 0 ret -22 [ 376.798227] binder: 18087:18088 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 376.891335] binder: 18093:18094 Acquire 1 refcount change on invalid ref 0 ret -22 [ 376.916968] binder: 18093:18094 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 376.935558] binder: 18093:18094 unknown command 1074553616 03:35:31 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6312}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 376.949156] binder: 18093:18094 ioctl c0306201 20000480 returned -22 03:35:31 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ptrace$poke(0xfffffffffffffffb, 0x0, &(0x7f00000000c0), 0xfffffffffffffffc) fstat(0xffffffffffffffff, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)="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") preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 377.025925] binder: 18098:18099 Acquire 1 refcount change on invalid ref 0 ret -22 [ 377.046434] binder: 18098:18099 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 377.072067] binder: 18098:18099 unknown command 1074553618 [ 377.088172] binder: 18098:18099 ioctl c0306201 20000480 returned -22 03:35:31 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xdbebff7f}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:31 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:31 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x400}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000b00)=""/210}, 0x18) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) add_key(&(0x7f00000009c0)='logon\x00', &(0x7f0000001000), 0x0, 0x0, 0xfffffffffffffff9) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000005c0)=""/237) keyctl$dh_compute(0x17, &(0x7f00000007c0), &(0x7f0000000800)=""/208, 0xd0, &(0x7f0000000100)={&(0x7f0000000900)={'crct10dif\x00'}, &(0x7f0000000940)}) waitid(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)) socket$l2tp(0x18, 0x1, 0x1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001040)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x2cd, 0x9ae}, &(0x7f0000000340)=0x8) socket$kcm(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x3, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) socketpair$inet(0x1e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) 03:35:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) truncate(&(0x7f0000000040)='./file0\x00', 0x9809) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0xfdfdffff00000000, 0x0, &(0x7f0000000440)}) 03:35:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) fcntl$setstatus(r0, 0x4, 0x2800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r3, r2]}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000000), 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) [ 377.520737] binder: 18121:18123 Acquire 1 refcount change on invalid ref 0 ret -22 [ 377.540969] binder: 18119:18126 BC_FREE_BUFFER u0000000000000000 no match [ 377.558011] binder: 18121:18123 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 377.566861] binder: 18121:18123 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 377.575430] binder: 18121:18123 BC_FREE_BUFFER u0000000000000000 no match 03:35:31 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6304}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:31 executing program 1: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) fstat(0xffffffffffffffff, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x6}, &(0x7f0000000100)=0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="19a5eb9033d0c560ab3ff6ed2720da78c21b70efbdb68a50d1ef862754f62d9982fbcf061d692e53d55ca127dd75de40cb923db3e2401b5dccf74e1e48bd06c2ac7bc15ae1f912f7b7a7a9bfaca77884ec22846cc3c9fe00a847"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5580]}, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@ipv4, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000a00)={0x1, 0x0, 0x223a, {0x4, 0x0, 0x1}, [], "459b0b4a5f4830b02f0f11d1e5fad317bb2b13cfcad3d8f30b86b536209ccb447152bce646af0a121324c796aa341088b640c6ed48ed03ae7a9b2fd70ae4d98a4097b6a7508ac34bae46dda46522ba4a1d777df5f28511ed4294390aab5beced80798e8b99b3378ef43c75d3c4be66489fef71a541e60c10e593469922934b5173deedaf2bbabf5b9c5c474b05c332f4d555a49cba970c35f4994a5720a85864424294b9e50bec93fd84cd18d5eb31cf69f76481d54bf58a0708b30c4e23447075507479b06df1e09ba6312c164d46aa5318584be3f0c29777eacc50dd5e2209fe20a64e0e19ff34d3c740548770730fa6db9cb417c0ea2b324d7d38330cdd55934a9aa967bc1deaaa264b1558b286430288e60b8fe39dd42db6127849dbbb8a52b157b981380ed6e3e43c9f2d6d42789a08f60b10727525e06b3b9ccadf7b0676859b83398e71100d7e0eab84a81611cf5c0f0901a16a8354ea40e1b8d8a4efff4de87292f4f7d0744eeb3f1f7983e57085225cc274b78ded510f298f14fc421e26c1e98971a9c61369f8ae35c5f134f92e17dd8d91e6c16d15c1b38e7b4027016c73ccc0c7a06913662f10596059259215d18df8de13887ed62a254bdc1079f2fd0f2c844695f16092dd86153dc0f03a33ff6e03d2e877cd4db02f5792ff4c2a9c92b68740c136e31d9e641ceac683e8504c11d36cfe09a25318a0b09c41936cf792d871d3e1e58e5a3eac9692df1a1ad1fa0c2c9efd5df7774a14a5fd65c7393d5a93c9ae880adf7100952dd3bc12fbb52aa699046f102721bf2b1774fed32b00c6324ef090fded375b93c7b44790699e92a13c19e4373f72e5e71f16a45caddaa76f523251999366bc26dc8cf0601a131db3456be703562a850cdbebbdf4372d6c690bcd86cab2b5e8b95ea09cb283e51309d68c202362424103930f5031cbafd5676851dc94074aba27d648c65d9e7e626551d2b5e2fd4d71da6b454ed99e20a16a40306d08c5f4aaefe4b225b06863a2501391577a84a72b001a608f34ce27e32b28c22e84d31498b5f38987d4a2cf384d4d9376b5cf2e74bf0c754e08c57c09311cc0fffb8d6f6bee8be16bab8ad1786823675de9ed42668dd0db02556b8f4aaa7a1e7e980429a46061eba7b8df91893e848c45fff4abc2def34fddba32a20438c0993842d86776479b8a84a4afc7b5ddf2391cc34a6a6f8f9fa509dadb0448f95d5a038e5e8b883d9aa65aa6e493e63752f0067f50a5df05019717421171cc9eeb5341cae793c9b3791d6358fd2d387ddb81f26736ee51b399d9a613381e684c98489c2da170eec5abaa201f8edbb9d609d3d4317f482c72007b38c6aa87f0f45949a22a31e98c9154ef2bbe5fc17c64def8bd5a59d41d3a03e0f443d62a4d2cc1bc576ae37d5661c50b958862e50571bc0f849c9995c8273133b08941159bf915edfd891cff3fce20669ae11e970a010f2f487ed2b895b7cb9c5b5ea99afefdafb858be7bcbc87ccb90cb3d886bfd4e7d62954be5b459fbf36038d2547247107f45c2291c920fdec9b9d2c50b7eb3d8a4bea2da96f10826e3dd1ef19b41a027b0d41eaa1d891705227fbf24acd51074985ab8fb05a89f2d3a006d93e33f27afe5dafae6f0513a0cd9bda912f83c1866a35a6469eca7bee12877f18f59c360876e6b7edf9f92811867e06a10b1cbc0a5657c7fdc9f87570ddc4f06cdfa364a0b095a6c68983b6f08fff0db53d9c73a365f414df954b7f5677c11e462ebcb2b883165c3700f428d7bdba0927829ea3323b8e1dfb9ad2481e970163d6138374d6dc298a38ce754bd9e70f8904f08a37bedcbcad0fad78dd9ab146e3f3901bf014a317c380d727da77969f04dc4c24cea118e0633dd65a7cbe2dd5ac59a646b962610abe769607e6a4c857b35daa18dc095a4f5fb915791521c5318c1984214b0cf98a4ba2f4a01df94084f88a9c213aac38f0dbd0bed8416e7e124d42ab3f7808b9316f3bc25aa080118e2b84d256d7dab3c2adaee91b3302e5cb678dbb4fc74d900db9d3dd063ee5a6cac1ba0570fa052c08a2fc94a0f2120be70bb4514fac51d00690add6727c4f2b337f6eb60e06d9dfb0fdabd0d7740719f1633edc5a666268aa10c358c1e6b6e85e069e1902449060a24cdf95f61f5275482b3ca969136cc6c540f81299bea2d949035cc3cf10e564097c922d413c6bd19a8be3ad6f898d4376ef501e3631f2d9b3f2d9ffb7e23e043efd791e28fb8ab595e3324ee0f78accee570175bbb0891ee73e227806adc5335944780fe28a59b7f350476f03c86d582a17f1890975f7282eef9e02f4c16bfffe1228de8e0b9aa3063ad3244c010597ce8cc39d6b501e178ac625c95b145fdee2961d9707ea5fb6150b40dc06c7efcf1fe53f681a091f9e72f7b835a68d41997a2b6332ed98ad2378a9db7e2f7365027df354c536115449f7d94671b256e5d78b86510850755fff221cada2b88905278f5f6cb0e4884192e48292b29dd0c0981ef0af8dc4b0093e6766fc3a4f0abb77289036c8ce07a5d07bf92659556379c48eb31af0881a9c77d9b5e2f0387fc17b1adff625e441bc5adf5fb9702112ff81584674ab9d9cb9b3f7fa1196b260755460660e7d4700b934cecd65c0e2233308eae9f1d3cdca579a72cd41a5fcdd79febd9212ed4bbc6169310850c196b2951a0529c56a56a4273e0c227fb9f3197473c37ef940b8f5a229a7e276f7e2ed29f60afc531e0a297de3c3d47c6c82cd756a9d592c258dbcb2b76972b569a800122f2ed90ab87d3bde511a9c7be980a386dbd52d201350d6d9221c03460cb8cbac65ee5ea22d16949f66974a8485f9cb102736c748bba8e096de1ab6fef47a833cc7c52e4877e3e77e0d0a724de289eb60ce51e2cdb5ccba56c3f0117c6d245436c41a1524e7bae0138cec204a75f5a74380652c899d7cd735cfe7386bf107025f8278b6a0dd99eb5badce1e3c03e6838b99921b9f4692448507ca960323db42d11791300bf48c997601500b66dee44ee9f859d30c9b92709390addf8110b6e241836b5fcf5429b79e0be524b5c05b23f61bf955480bac598deb20d61237ac312da3714c9d124c33bb481cea2167ff6dba084d0c720ede93386511e65c730a57f0debf15691eafe774b617a0d1b92215684c471052142e6463fd30b89f70aaeca374ee0dfbae2efb89ef6cff27821dbe637ae2b1fc1d8d24bc1a2cbd13ef9a49aa02bd446e50a608a6bbe96b8305cc5a525cad049662810385f0f4b2b7e46fdb74eaf9c525bb5e69dddf6ddb8f9bd08956b4b77eea5b090f2a1b6632a20cdceb7edf06b624ea12ccc667ec94db147a0c39dee1d5779565db8e403050d0d9e4a72b9a8a41a963f69b72ec7eb6c0522e96b9f9a7d7f8ca0c2279f1fa8654bc426e1368ab74d384a62ee86d4690dfb990885d5c535175a3a5d6127d5b9e94d6e34aa55e527e00e598560d75d5426cc49811958e197fb9d412f5787a0572bb038b227694e24ee03fd9263dbb22639c59508446be70c1f2b4db1140b5be6872786bc72f6d760c8ab8b855a2601fb062929a2f6066f3e74ea4a3c11521c1e3f71a7f37b46e7735dff6470b087ffe991996bd1fb4375be979ec0d58b0002e9ec53b15ee898125a7bd039e5f54909d70ac4897e6b75a0819d88692278bf9d2b3d838678cff450369abf0ff9865b155fab89bc7fd12a5964f61dddaa9aae11eeb8955a7b6d3fefd3a5d5b8cd3d888b27e335ab545757d8d5807661e4d5f730dfb23e4a6656ad40edccfb3aa1fbf5612450c5a6395ee78953502406bebfecfa5b281d6cbe01ad613042f1f9ef183d08b87a27b6a6ee43779f1b4932a2d6dc81be8664817693936be1574467d98f6d8757c41af52651ad077eeda82a07cc6db8ab374533b9217a20e40261c6c692d35da6438cd9c61d328c2ce1827024630c34631e80ed3b7c2d1a390f99ae85f19221bf34be688294ff17ae944ae997f602a665b1c23eeadfe634cb4f819d3820ec7b0f0501010000ac09187bbdb77f24c85493ce147253b6b955803c807721c06f8f90a35e5f6db07d206ff872915bbb2926e69da52e561ffcff9f4a007d67155844ca1e155bffa0370f3839cde6f02c4dd4b7a6293363a307f32b30355cffc1ccd4e9d87047e0d1a1242e937c8b2d42b1588b441e945d264e53eca2f151d2243eb6480d70be2f5bf0cbb8aa994eb1d31c4315c51872285f96e892355ab2ead09ec8edc4a94dec162d10eb6df7068e78af15eda38941d75ddc6455b7370a188ea1d7c5a6d04eb98ee6b0383e3cbf28ee678d47f4b1c0831c03596c3a3b08d1fcc1615b30680206945dc516d751c9050d92ea4d6f6d7090ece32306b191dd4c72a828df2a46cb8355c7f354f79d33b1437cd303378b3ce7feba0dd2c4074312a626c35bbcf8b7695925f7ca6b86bd8974dd8dce014a52dbb397f17d6f5ce242e3bb13b8800977299a94ba963e0bd608681842311dcf734397b3928b0973b3db393624de7b2fa79ed8438991b49957d5bf5ff7126d5fe916d522d8beeea375128857100315019d658880b34a097f9beb80352c6fdd67eb2b6f4ac3708e62668c395f44264b716dca7f386b6809973f88e1007d7b2c0e10a39a561adce6a8980283d9d366b349c29fbee630b479bdf6c90588fdffe2138e4f67f017f22a372cd765f620076eaa57aec793a274b56ddddeae7d7fe8bfb1df9599ff3e1d5a3f2a587395e9af676593c23df46211aedb98a9ba2b535f255dffecfd76abf5b6bd64c584a022168f10525a198be6ee54342ba71eda89e2dbaa333397745f0764190cae1c959cc28c6acde6daca4585c759f4d8448920c47bbff35610cf600a18db43f7f5e42748b092d656f0a1cc0e49c0f3d7a38ec9f3f3ed825d582ec4c5112cba18444ef09b71cccc9993f591d0317ffe303baf3eaea94357bc618820fe4a86e6b144c5004a8438678c637f83fc3e745393da0e16ea4f7ed410d273639b9e65960155b6ea56ec73efe145be85ae5972d5dab3dc65178448a7e8ee11d2d2a6cb901a07bbd10a6fa143e93f32a9c28b78e9fff4a80be620e1d2b745b026d7cf6857ad7c766b43910d9ef5c2aaebac1460cda20888838c38a83cf09fa1491948b8f4264b91f0fa3073178ed3adafe93276e6522d11e717c750946e5d73f721295c0628688036ba4addb1c8915d8a36582d1f1a4006e20c2ffdfab9c9fed1f617a4a667816d694a0b4742491d032458a74c8d8773c8e75ed3ed7ad511fe7490168cd399fe67e986ebaa57dc8350f92f4ccfb52ef6d21df2e5c3a780308472012c13c2e2ec4f67beb7206cf2511c1e5e0a218f4fc987f61e1af87cff3ff60a8c70f1508dc9feec911af71dad545b041735f63b56604cc857b5d58ac5031d7d7451ce845d32c4e07a1821ad2f68a25cdb5241b61050342aae725bccb23403a33824f205235e38cf57588dab52efb1182f6e0ef039aef9f29752a1b1384cdd87d154ad63517cdbef36d5fa48fbd7cf56c3d73f82faaf4891d30dbec27e7feba0d9215e4e4b484e1956c11ffe5b02ffe7ad8f073bb4a5e768f56b2a724ac8d07ae475838692af2ab54a71c3c037ae2c107fd2b04e6092d4cd8ea80b3340c0c8f9da150c11122896df766f26479460f7edc8c54233f2748849c5301edeee51e2575e49587ed2c49295aa5cb3aa824b750a3a5a20ec076c0c13e27dab777dc1b22637394e188533f1cfa7b0f14e6ca10b05534d63c9f31b92f1df7f9d5575dc18201643ef0f80a551e8392482", "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"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'erspan0\x00', r4}) r5 = getpid() sendmsg$nl_netfilter(r3, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x50008600}, 0xc, &(0x7f0000000980)={&(0x7f0000002a80)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="434a82b48ae056706278000048181193d39d851b7a1f63d9e9f36e50554e19783ba411cbf086ac0ec2453eb495a9f8485c10713b4e9af13dbf7dc76f9aa5f818bd05af9c2b6da1d805e14951028b13"], 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f0000000480), 0x2dcc) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000400)='\x00', 0xfffffffffffffff9) r7 = gettid() perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0xffffffff, 0xfffffffffffffff8, 0x1000, 0x4, 0x0, 0x0, 0x10000, 0xa, 0x5, 0x0, 0x0, 0x1, 0x7, 0x401, 0x10000, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x6, 0x0, 0x101, 0x5, 0x3, 0x80000001, 0x400, 0x5, 0x100, 0x7f, 0x0, 0x3ff, 0x3761, 0x4, 0x3, 0x1, 0xfffffffffffffffa, 0x0, 0x1, 0x7, @perf_bp={&(0x7f0000000540)}, 0x20000, 0x200, 0x100000001, 0x94ffe108685ea11d, 0x0, 0x7e, 0x7f}, r7, 0x2, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000500)='./bus\x00', &(0x7f0000000740)=@random={'trusted.', 'keyring\x00'}, &(0x7f0000000780)='md5sum&bdevnodev]mime_type\x00', 0x1b, 0x2) keyctl$link(0x8, r6, r6) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000004c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000640)={0x2f, 0x0, {0xffffffffffffffff, 0x3, 0x2, 0x0, 0x7}}) 03:35:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x7e, &(0x7f00000000c0), 0x0, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3) 03:35:31 executing program 6: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x500000000000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) getsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$rds(0x15, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000140)) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000100)=0x60) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0x5, &(0x7f0000000080)={0x3, "8b7a97"}, 0x4) [ 377.687043] binder: 18141:18143 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:31 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c630a}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 377.732571] binder: 18141:18149 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 377.755008] binder: 18141:18143 unknown command 1074553604 [ 377.764222] binder: 18141:18143 ioctl c0306201 20000480 returned -22 03:35:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) move_pages(0x0, 0xb6, &(0x7f0000000000)=[&(0x7f0000ffb000/0x1000)=nil], &(0x7f0000000ffc), &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 03:35:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x100, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x3ff, @ipv4={[], [], @loopback}, 0x1}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8001}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x3f, @loopback, 0xd65}, @in6={0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0xf}, 0x401}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, 0x37e7}], 0xac) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x81, 0x4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x200, 0x1, 0xff, 0x8, 0x5cf6, 0x7, 0x8}, 0x20) [ 377.845610] binder: 18160:18161 Acquire 1 refcount change on invalid ref 0 ret -22 [ 377.878279] binder: 18160:18161 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f0000000a80)=""/237) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18003fc303e1ffdc0000160000000081950000000000006a"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x37, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r3}) [ 377.904546] binder: 18160:18161 unknown command 1074553610 [ 377.915412] binder: 18160:18161 ioctl c0306201 20000480 returned -22 03:35:32 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xa503}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086607, &(0x7f0000000040)) 03:35:32 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x40046302}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0xff, {0x2, 0x4e24}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e23, @multicast2}, 0x202, 0xf46, 0x717, 0x9, 0x8, &(0x7f0000000300)='ip6gre0\x00', 0x0, 0x0, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r2 = socket(0x2, 0x802, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r3 = getegid() mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',access=any,\x00']) r4 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r4, 0x8007ffc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="05030000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x18) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendfile(r2, r4, 0x0, 0x400008bca) 03:35:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0xffffff7f00000000, 0x0, &(0x7f0000000440)}) 03:35:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @loopback}}, 0x1e) fcntl$setstatus(r0, 0x4, 0x40400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x5d, "eea66aaefd5c08b1b9e0c0b5ca60ce6fb46f58bfe68348f7b3c60e21457003d399359c714903d352b604e1abf969bd35b25e845456376fcfdc6b3f4bb0e9626a0ecf239c9bab31d156790d4b29e7e08023f55e4fd562350ddc896c9fb0"}, &(0x7f0000000340)=0x65) sendmmsg(r0, &(0x7f0000009180)=[{{&(0x7f00000004c0)=@l2={0x1f, 0xff, {0x6a, 0x7fffffff, 0x0, 0x2, 0x0, 0x200}, 0x0, 0x1}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000600)="8e1d8982ca6c17283ad5eb0a1be3c519b819cb3ab7a60fac7403175274b7f34d7d4b5006377728a40c26822f9764afc0c59a0bb5cd00bab4a576734100f18a6afbd97fc4e4229647f24c5e984fe277f6686eba006827b099b04d384958fc522d973ffff2039e642e6de403b35a3c04208e3e03b5a2e5c6d1f6dd9875cb3f5427c84b0423bb704e8099f665f951b47e7efdba7286d17b3bc2541334", 0x9b}, {&(0x7f00000006c0)="1eee3c856d6405d551609f8d2634f301fa0524179864a0098feecc61322af9dfed470e11be61df3c9cfc342ccb30dc083829a3a2c3a51089b7dbc45811918b8e866af54a24ff25479887c2c3f23dae49ea76b8731407c001adf8e2a70acb59b82958d13c6a8466f42724ce42a79275", 0x6f}, {&(0x7f0000000740)="57abbdd0196142312b897bd5c6be76ac216cdd59b5c6654afca7f17787d14881d57208ee877c6b89469cffa829245ce50e5ca4226323d593a63a887fc72a95b4ab7b5ddb10cf78", 0x47}, {&(0x7f00000007c0)="6365d775429a506e4d5302c71d97491f1eb16fb6eaf998463c5cfab55744ee22af6481caf073794d2486fd99988ce0172309789fd88ac33a9507f70d26526244efceb78767dc035211a9f6", 0x4b}, {&(0x7f0000000840)="029fc31d2f3b7ded12d9201995d62bca6deab70e157324f06374ecfa99aee6185a6c1251878dfaa78781e236776641ef0a083a7ff7d520b005812405e8005c70611278e25173fb596bf56cbcd9fbfd7af9ad740fb1a3d7ec1c84d37a6dc3e8bd6e235def0b3433e7d17fe07c7238f1818945bf400c96ffa10c92a67ac8f127bd65a53663ee6ebd7bef8ed399903aaa6f572ab4e5e29abcf9bf0010816dbedbdc0e4e046fe9ea", 0xa6}, {&(0x7f0000000540)="8766990452c6648b9986eed3a6c624d135fd274727f7b3ff62557e489c8ffbb4", 0x20}, {&(0x7f0000000900)="f91273929b", 0x5}, {&(0x7f0000000940)="6862036845e84c73d32259646a715146c9318bb60e8403f186b84d3d03545924fa0309d46342ff792a8e54189fc1dc3fb12e7dd04abe5379d1a63a08f33ae91c1a8269142c11cb23b7fa0498af719e124a1993b22f66298ee0607fddf6f3e1de91dcb4c3f28ba59ea6c5e7dae66f028b3475541e6b7707f68023c2b08395df49516f6238ded85a71912a5b9c081fe26710ac", 0x92}, {&(0x7f0000000a00)="b4e97484", 0x4}, {&(0x7f0000000a40)="1ea14e56cef87b41f88fe0bfb90f3526ae55759b4945c0a344cf38b70480cdeb157737c2f275d9b2c5138ef8e128c16d324967622ecc11746cd307d1821bb7be8418195d281342a46b8b0ccc8d2c7694a6322cfc0fc6ee1dcf8e0517898a58223d7b381b3dbf48b16891765fcb5e5c703a8cd8f964b1e4d9db4dd6d3f03faca0016a1a7b6b26169913b2a766155c4bf4788bd3204f90b7b54fc01e0f48a2b8cc630227b4b4f4c9ce3e98115640ee3d842812ec58d2", 0xb5}], 0xa, &(0x7f0000000bc0)=[{0xd0, 0x0, 0x4, "5ed520dc3b8d0dff53ed262778ec60f41afc5a7d6a6777fd87939cabcd18491fd63eb9139c5157707c21fd97d8c9c54f47b30f84cf5d7411fff1f047bcf5c987c02df8da349d0c6ff0af83236a150b2131f3d6e4c99f03c3dbc65726faff3f2ee8d46d7069f5c62468d520b760f12efe8d5a8836edce44a831d067f3dea3bb1ba659190606b92df9404e75956bd826e1e10824925cfa13234b077f057faeffd9657338920f67fab07609ce08b147bec873df268afa3a383f3b2b"}, {0x1010, 0x117, 0x9, "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"}, {0x1010, 0x113, 0x3b1afd08, "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"}, {0xd8, 0x115, 0x9, "1f42dbfab8c52d9dc818e3c1227da88cd8f7b226d5c305dcebf5be7216895f21a9136fae859111ddb31d3dbb05558238c3c0ec25a7cc38ceb5faca80662b399483505e986b52327338a2b4da8fd9fbe95d352f2bce13db8997b172bafc94ff4b114dfd1ac0b2f7612db4a86bfd798f6c71093a6157607df573742b12a1d06d6d722e21b617133e6fb8b1ac44447c7244f78b7e8e157f8ff92ff5e518525320f909558e6c5aa571023978de6f698613eb8b48b9662b1132cd21d73a74d692a3d3ecb6fafc47396a6f"}, {0x110, 0x103, 0x5, "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"}, {0x1010, 0x11b, 0x81, "6c226f2832547ab604813bbe3de0e9e57a8ba746e62ae3fd070d668ff60b52918eb8575ba34a03ac86587e82fab316595077a92eada67676bcc2d96c91852abf3e6dd1390c16c879291e84f8e6644b3309860306f90756aa3f9f726134bddcfbe7eef83394102808283f8d14d46eb6fcca715c7c6e7311e46f333ca939546e9d8f0e09732caa42e18e1afd28bf28e63b7da2176dd9b740014dccbc8883a2f2e1c0c23af160d946e66d9113d767fe74f0844b537112a9bab9b82a3f9101c57f20c5a1df1fd6254acbf16bab545f2de1e10d9b06e93af9155671c81565e27e85263c493878bea5e0b822e3b1a472998ecf82d372e63d26532478e4c3d9578afee06d5a011b4f8890efab98a9623fd4942795b01afba7c16afa45fdb131a455333d067395fcd55284886e0947de6e6674d8a57a449f15097614df537955bd6f8aa8fd24646028a9eeafe02b20f68e19f1eb50b06bf15158c62cebc8d122dd08667936c7c8447673bd9e408702e0d68089a27faa8bfac50741525c11fad8d63b28c1961350c896aca9a9fecf52eb95d0ef425eedd59e24acd8dba0bc54b158561493b74e1dc3d45111adbd0315d3bd0a9290bd335968db71c33b4acc4af079aa2ecd268f5f90db7bd7f6d5c34d8f918172c50af6f18fa9f285c700004612181d02f71f83c2965478410527048c45413be026b71a3a633914019318dc0df3130d9aa16033f9f5f929a6afaf0f1b07f24b160a3c3dd28dfac84788625d43fdb446e746cf48bbe841ea56a878f96d74b93792316330341f1cda7e060c5ed4756fc459dbd9827d099bd9046564447ff1b2cd6f7736ea5235d9051617a092beb047393b5d0ebfd89d45cb0ecaad26870f03c7ede104de0dae6f5970c5aca617f9eb2812185bd6052f45c8b4c7abda93f58bec9579394042fe6f0d22666cd83be470bf8f2db02f27e2b5ec2502fa24b43b16a3891d19ba5416ca2afb514c306449909a06797eb666ed790379ec7ad8e01e5f2fa6f83f820ccd04ed604729116d87e4001e02d3146a1d39ebd314e2fe29063aff58809a37f09b4e957a8ed1e38d10e8331ca1e9f10b9a3d80fa6f252cb374f187fe1fecb3a40b9eb4e25fdaefa11dcc716bdcab1b5ca9b2449339f30eb1a32a9527f4e1d532f6e25741c8708e5e50f33f5dcf7a9ba9f3c5fc93a1eabd03470efd94dcae4b69ba30effd7c4a271dd67cb1aeddd13706a1be6af5c1af4af4fd85db61d00e28ba7f5eafc553c85e572c653604f35599dae301f3e2dfcef485855f6001b7929f761b39bbdd931b253050651695929d9da06ba85dbc03928ccfcafd62aadfde1b20783a7b1911cbcc4792447c1cc0e5e1ffcb8988c93bd84e103aca1a3c85230ab02bf5ba56d6fd75b0b75a88f13d0c8f4ba279ae975f167bfc0257d4437df0a9b28fc912c773d037af815c4e920fceb7fac5ec5f423891e7b74b1a7ac3dad4425ae70b00bb453b6f1d2c1e1f5524ae4b44808676aab823277e339e3f3776d39dab069b380b94393a21cac12d8c4778a46c866f235c69cdfdd39f8bd36614e9b5ffe307c690ac7df7b01655a99ef40fa74162e3d79ead8b662e102293bbeb1aa3c5006905f2571ef347a8446c223019ca11fc69b5583e4c35d31163f76767248ab9f6be80faee3da369f44ab93cdb3a10a812f43d2141d79a17e31ed58dcc7df0d37970be745d95513d160438c0b99fb6b866444946c63752db4a59315e209ff3906e25f94d75e2ef47fc63dc32975b2939f6f4aa8101b1916b3ca3ef012a7d4e8dbaaf9b150437525f6dc1e702f3ac178c677cee15c1988472c524e66cabca23cec5efe8b08e68f53147e520f442913b30d4ea85ed361d1c8e7c5bc51895a7bb18496ee7bed3c990af6333bd420b8a3ebae4f16e4cee9263405bc919ad277e6940ba1ceab12e4c5a0dbcd2a8754f06f54f3c630235b5d8306ba29e53c88aa8b4b3e017c636789c2d83fb818e6f6706774c7744fd3ee666d096723e6c6104064bc0f354ab7dc9ccab85c651c0c7e203ce7d7ef35121e5ab41ea78f1de95ea27a3cad801f2ba6b68f5709394cdb25f03839192e3658024a88a4fc2f26509cee25a3517160a9d0e248f7e40805d25b3ba79d6916207d81c696775a75d6494c536d24473b1d13d9d26e1e2d05338819fc81eb936186c9fa790061d5ccf6cc6e00fcd90c6e395ffe08ddf17b64241a7518dcaef574eb92489dd7930fb6121a6184d4266268e415bebacced3e8054c022424f25e91f70546d44fc6930737773b32b43dcd83f7b8e21d2642e49daa5b297cde792e2d1a5f22421603a528379682499260dc5b3d1f487125f65d8ac2f47877d6ed353a57c17e5aa01b60223ab9044304b27de7b050917820879b57a0cab4d9a873d23017b1144ac7a04a119ab7d5b09702b1854583fd9fdc5c583f2190d3a5926806aeb0a09f45d29705932650b8cc02c984fb97d6bd9f17ef32932e14962398f3579fcc6f49e944f7a1e138e8c54a3e737094115cf616c0d35cbf60993fced5dfe439b0d21315373dc400a6e004ff8f9c9729f48dca34f8ce1d21958f266696c834d510295b3732692970e8a16246441d3815519b2f0679247693d893b9024187385ad010420d7c170b76d806778072b2ad0e2d0d097e27af3455ee396be84a40a449720d797aa2990809831607f3a0ac3e1e15cbed8b38484b8b492bd91484c234c7e12a56668db373b94fda891f32ee36a321159548ea507e94e07cc48f81bf976e56fc3f23db61e364714ef23343e82eef1ac8e060a5d45d1db90f06dba6e73e15887a39d6d048fef793ea1a7c5946491d75e6193b725592872196b7bf434f41c8f8d6bc2470ae6270008f189d6f58e7ab4a49381594cabef2a2ffcac918bcf163e53342a158aa4b4e9ef6846671a0b8e62b6a3e7b0ba8d159ce583f0882212e7b8f75b172be48900f879e5d08c0cbdf4bdfad3880c7b1a9aace0e541cc01aae9a1c2ab8986eeeccd3f86d59f0d486fae92c0ead69ee5fe85eaf5aa6409e2be8c57acdb49a85450c04c2b5197bb5db0787de72ed0759b9504a4a2b6794be8f048cd73954cb046944acacef432656ebe8c3083d160234609c780652feae1190802ea967eae50f7e57b60b1baf79cc4e438e26381a6565c0fe8ec09acad1ac7116494e3c0bf6644bfd94b43c59983c82427c35d0ec5ecc2dd2c1eb0b61f0698e80a0dff440ba56d377cc4026dabc71c137f119894fddac0b06023bb469c1114289fe5c5e94ffb6dfdb59a977b062ccc94136e7e3d21efeb0ea6dde729b17cf774f6886cab01012113bf7a9862542d2061cc6514c14c961f1dbbe241ec1f6fb176aabba29977c786892e2939458928f30aec0f71241786ccbae2c6c373b2fcfb9c0aabc3f23e5a7b3608e3eb45935dc3655dd524401ad68a267a193e81baf43eab017b139aa2070832a38ebad71abb1f6a556280640cdef7afd1c4066f185ad8e46b9d34b4a93193fd7747e7dd27060bf9eae3bb3e5129443d345ef7703faba7198b69ca0b2bcfe6dc982a4c88e6b7deb902b143cc7443eb0d646c08d50dd5b704a24a68b3679113fe6229b742b94df9f32a2b6753c2b0ad567574905b55b7c082f8dee59ad2b3e8f7077502ee7acaa3f31a3c73dbf3ad413fc9568af5356490bdfcab120b9a267fca77d57f9eef45d1895c44fa0052366a4995d8e6145699213cf149c0e708478c462db4e3dbb314fe3c3b5f5f23e2c47365a34e25d5d704e819494f339b49923b7194d23f19eadd087a0eb15fabb2f8d780c2ee77ebddb560ab1e45304b6c0f5f9b2ee40f1f0dc7b223590c5e9ba72d11a2df84640c931c66091c180e19fafbcbb4df58a9a56c60ca87772c781b539f2019d86ce25bd719c4984197bf04e6b57a14795fb09f2b8d5c2f8762889a80b754eb814ad0c5c4cfb827868656907ccae825c833603b4a6c844335361bd8d6bd9adb7ec759a223d2560cddc0aa05a4caa618b7373f87f81aabf9756c608be13eb3d1d30121bff931ec08880e0d3332485d1a8b0d1c1488fd98c87149b9d7e86d039be9289b9e95783deb974b9905a5cf6de71da83681eb72aca04e99eeceb1c907ec69e8fb7fecc73d8e2201389f2f50b238f04ac93c0293a90b87b78c658b24a0d24f7bfbe086d251ff027b5c60bcd40c970b6b40dc18fe272d0033067ce18b2d1b7d60d02e8ecf4e6cdf0b95c6632da63fdc18c9fd35962752189d4c15a0b7b6ae8ba2dc6c92580cc5234b2eb665cec5290dc3b275a99a7f127d75e7d9db70dbe42db7e16b935a386daa9b0d3aa198f9f87a4c11fb80e43a0d8a16ea637f746ab9f9de9288962350ffd079fab50a7abb122366a470b83fcc40e088fefb2ef907da67bea76f339f3427533f778c5bd81b5c0c2f9a1877c7faeec9dbda71772d45c18683e229fa40024b02e9fd11790c6b65c5907b44dc9f6b6806feaf5bb64325e36badf38c49abf5a57f2424b172aac00f617cc7764a90ca47ba95dd2c3c70907b8f8b400ea0934195b699c3169bfaff18b7cf0adb36586bae43fc7bbea7172d926ff17fa7753a2b2876d11a1ec46dd14ad0614c83337d0b79bc2e2f888ae683598e01eea1022daf60915c3895b7dc394b70babcb7399ad20b7682e6d1af4d5f980785bf803b1a458d57adc153d93b0c0ac83cd6ff33458d9169f936a457b33bd98cee58a517e6ed56259820e56f3b394a029373fee960aad81c48954e542a84937f05c28b8a7cc81dd89f8de5b0990d813a284dd2fc8fbebb99ebd9f843a0b39c96dce55ee82fff7165106c573c5f531df4e6cf2c968e8347712eb2d3df03e7ea3d1f32af27329c4938a10444265c5bdd1a9b35eba6e5a57b01efb015e0368ca310833cb0b826995255b7c91f64999b1b88abafc90c396bc2ef6071bb839f96d841435da0537433f2f9dcf2117e04fe4b3a96736b1a11da79b2559fdbd7cc4a4b23dbd1295a60fb2d8af4cd5ee93d1f8394573df144ab3937281db1b3ba58be88c77cab43899b99d476d2f393b5bbe46b035851d88e524755b06e1aa2eef656896ba86b55ce71b25c9d0fbfa9c20df317e256db8e4b3f3905e371bdc1ad15e9c4fcdf001656f625de133aff0b1d19539267317b6c25f99f3583c06969568c8d3b391b93d13d24ed6956a7167b813da92de8a8d86643123d89885f83ebcba7195cec976f654fe77e53c17be3cd4e8a160b50e19feadee3737cd227ac333d2e36c39bc1fa698adb1cf8ba897c0bee0b8288c2aaabb488a315532e2039403cba5b11af6ac59a090e846eacdc81eac7ef055c78bc983a4fcedc3af19938b854a3e859e93e22bd071fc759ade717128697dbabb7fb421bba24b8b5b3582109df79b8af1ed465de849640efc0fb344dbeb9616647d257d19bf539ddd0e2819abae34e445c82ffc712b98abe26da7cef00b04126eaa83b9ed2c9fb7e8acc984a8055578119d0f7ddbbfaafda522c0765ade6516a8fb99639b138f1ac50fa1cae487cb15b1816c1b6866b86f6d3551442a452875568100ac726bab657529d4b7e3ecd07361c315de05d30685311b944e32704f11bf0609658c5eabf8aac56ca37e7c32d9511136d2a6797015c1c600d5cdc3aaf60ebe994e6e94996b6d48481bfbc91981965b80983d488148a739a7775af9fc85ff87e876c289c46058d5fb050feafc9427bab6bbf6cdc0804dc05ed5f14b08102f52f19c9a2bc9ac9495dfd0759134aec3ef4abfa4253770e7d8c7795936a95315acead6217e059304042b6c7ed4581b2a99582ab45d"}, {0xa0, 0x105, 0x100000000, "acfee19e8fd233d13c6b644bb5afb74f2cbd1860fcde77663482b7177afe8fbe847c23c88e521d7f813efc1be5c6f28d72afd2fc54b1d787f449dc25a3cd7b4b379ff4018cdb14754fdf80338fadbf2fdc375d938e917536712371d7c31d4f98ce7cf992f86365bc4cf8ae1f900c9edfaf086fd4efbb8c2c5ab51d7414b6584d69c7f932406dc951c85c963d9596"}, {0x38, 0x11f, 0x5, "e2e4c961201acea0776432cb8ecb4f767d3d74396e00771611cfeeb14bb2a240b963aa"}], 0x33c0, 0x885}, 0x1}, {{&(0x7f0000003f80)=@rc={0x1f, {0x9, 0x3, 0x7, 0x8, 0x7fffffff, 0x2}, 0x40}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000004000)="22d7eb6e2a1fa7f41dfc26a221ae9dcd37b68a3880317c70d8cf529a056c1243ae94cec9706b36034e79baab883aade8451fafb304f07c04e1646c2d9c4f2c33c619e7b2fb2a6fb3efc89150f18ee5b00df58b5a8712437a33101f9938be821d1ed08b37a21b6ab296248933457a21fff5cb772c3b2eeca74c57b93cf609877dc2528c85a7b49a7812a3826309819cce249aa4402a68dab984305feaafdbfea30c87db660aeddf89746e19cc23df58aa9693ed0049bdbb2202e7b7d0e7513562eea9d481dc4dd258db0a9b1f", 0xcc}, {&(0x7f0000004100)="e3b9904c208a9cc3d91260dd1b42c753a49d505552cbc7ff669c671ee3b7689c9d465167caaf501c5905e8dbcb1e23a2f962c7c44185e74b3238c7142b6a1ec55cd131c2e80252da5daf13cae7236f6efba329019249af836d0c73fa1c479902f11423250277335a81c3f29ff21c6f1374629e5558071a9c67da03e371c0a05357a044ee40ce26c4c7dda42690d42c3b16f007f01d4316bf425cd29ff2cc09faed8269853aeff14828cbf72168aaacaea3b70d4576bbf9b368cb15e50b5a768ac579de385377", 0xc6}, {&(0x7f0000004200)="4b0ff8343a9176e6ab4a3d72bb759f79ad85bc3bff252ade234017892539ca17e608fdaa415a517b1b6d570a4fe18c381b94e01a35a39d2d110e39e020bcfcdac7aff956ab5f737c01", 0x49}, {&(0x7f0000004280)="78d8", 0x2}, {&(0x7f00000042c0)="44a04be49490b03adae6ecb0548efb13bd2588128c474d9e7627c3c2bc74fe3ecf4afbe5ecc3195e9492520cd45dc970ac01832ce134d72bc0e20d9aa59294c05a41d074c636f18d4bfdbad415fe7bf856bff5709cc4588ec451dfc351a105140cc81a5b6f5a803fa69e3c1d51dca2f2400da961216d762f8bb3195f751ae1c30446473e71fa73cc7b40714ebf869711af6ca45fde4da9815032f5a625f596a186a3a9a35895f3c266c14a6638fe95cd3742825a86a951de6091347de6e81612dc60eac2204184db36a5c584fff0d389cd1e", 0xd2}, {&(0x7f00000043c0)="4248aeae78b9a590eb603b703b4325635a4647939a92393b89d98fd5d1d624bd2160809e94e195ba350f7d4a1303d8482d9816a66fcf6a529189bb322f4f26e2379d381641f0da90dd036a2d8a49686b36dee18b7670817ede77e5f59f314d1b4fb2c332166fa0de2c38d30bcc339cf2c5ee6877e06daa5d7fa5f59e758397c86bd442e39dc981d37b9ae2163a775d0d390ba9f58f012fdfaba6eeefd8e63efe68bc4703e724246884146a066c77c7277d3fa7f173b66b3ad2caf58deb6ab6ad6d9e9cce0e8921d12d930b0ccbb43e62d061cca653aa2901a6b8884178bf19b7ccf79217bfc864039fd898b1a90322aede4995cda05f5a42aec5bb386c3416fe36328bcb53e8dc43414ca529c0ebfef56ec4b234e967abedb8b7585dd9e6efd30611548d09568ceca354ef75e02b4dae829a3fb9f10c16bc04801f767e4e954e2ed8e354182b4509cc3f0f776e2e7551c05add4f9f662aa4a8c40b68d8cca3b9e6524c3896c6520eb6fa0bc510d5d5eb4960c1fd12362b9db9f4e8cd627892106ec71d0d795946b0e951ea96e95a182879a6ae29d04e1d10cf8f58089e4c04a55ad881d0b952bda4dee97638ebbdd30117c651da56f4f88132f4c16b899859fcfea8ff8aff0d5bfecf9325365e6030ed9efbe99988e29f1f4d25eaca013b5002ba5f261d8617fcca06bbc5515bd32e73370b9e3154dc1a41a59219a55a0b2490240dd549e600d5752471ca0280aba6117103adcc3ca2a762db53fb12cd20ca4c9ef015e52a908da183593dfb077c3e85c7c97815d8708e8a81718c31f73bb2f6ff61fad0ed6ff3ffd2165c7f60416ed6d2090f881a9c2a35dd550d2d6c68afb79a6f09560944f61605e33446abfd2ffd002ee6e6cbcf01dce846cfdd9c3492f64bcafe55dea8f161ad373ffbd13ac0c0a9856d8cdde4acd73aa4841ae60f3c4fc5b1bcef19aadffb133abde25107b73a843b63f8413bd19b1bc3df166938d922b4daf96749f7d225ba06008d9f268a1fea6720e0f8a96bdba4c4329bbaf6299cc1e1de87630ab61bba303b24415e488a0e6355b61eb5f7a771f5ab9d3899d197307f0f855579459f561098851d2132a2cfccff48ff513ba74019ffb56c365813af0dd1bc565d74d5f6e65fc6c60c829aad6a97698f5391345a0b9bb5ba20340a7d5ae137dd3c732e631a2236351ae99140952e9b3048b1a1c58e4fc9b47640a5095ed46370f6e06c81827ecd186a5d1e7b4ca3f3beb531afcd5d410e2c9bd1360f54bcef3c57bca530d7bbaf09e9e315908b83f062f464f5e1ccadbd496689ee998cd985b722ee7817491cf2485b60fdaaa3005c56444e87bf1ea295aef5c19e8dd073f9be934a87952788efeb3e23228375d70c9d75948b1aa2d362053136f8e60874993a3e5a542c8e5a1bf5d21ea242700aaed6801a85ab1238da714504a26290340e08dc5ad590e82d965b0b9be95e815965794efa7893177b221d761d314bce57fe565b4f0a3b654f5e169d24f70f99a65a9ef57dc1fae0b16001170e3cf9d4881d808b1e98ef205cf689e9946b151b8b3614f87d18c07cbf7c4159aa0d9f15de149b05bed5138f90d0755a88b1a8b72a11061859bbbf7c944ceee3b6fb0f9131cd834b56b5090a58488b6a2098ff876a945fcbe23e16bd08b3ebbbe0e3768b5b715f55f4370c3e4c0dffb83d5bf7a814f322e257cbce2477885bf812fa6cb4f90aa04d5b536bf4644d92def2c1cd73b63ec9c06f32ce650425247e346fed82cbb6b48fd641c3599ea59dc5f1df7d5395527ee61694f8b1a8402b3222e353ff602458b67b2dbf68f48ae2298088ddc688754ad977759870fe96cf352e4fc457e8a25c4c73b57e94a51a48a79508986baf50a8c136f3cf6e0109543f39e5d9ed210964541037f23605f2bf4aa21da04e8aa7d37832908d9abd95905a80c4ea25a1e1af5a97d3285901dd9d74fc79da9e5edd66d6adfeee1344fc06cd6e38be7a73816f7aed4fa21e435a59707d6466a6fac121157fb1c0a4c01368bf749ef3e1bf48d0d2f9455838f33ecdd44c2078a5268cb910f6b9c55c0800843f5e46bacc0b84ea024ed94d4df28ff3b8178d470fa7b8bfd2fc28b0ac0291e9631402168963f2968665a0098a150d0e0893c5fa70722dab1885b80d7017e80b26b48a6b57d84d746c5f2dde15a3f19b8c2fcc86545bb669a73d3b4c62fda37fa3c80e5851c0470994610d9c2160ead5f358b2c59c638618f1d88e5852f7aa4c7fa07b110d05e98f031662822a89f7dc72e17b56e39cf78a7edabb492b107738c4ec05add45d93832d4dc378ba3119a02c44df45448a1a2faad22beba47c1f53bba64748319db438b6e1e9643e715a9a2bc57dd165d41176ec3ce730537f447267ad7739eec47b4c40ad6ed11d9b49fcfc2b8ab97f17d4404eebbac218b5359778e2eb3657bac29178e50a48562c7d5b0cf007fde5de119d43be0d55e29ae072a9b4261f78dc2b031587053308f58dfc0afc148a801ec2bd79c47c5d123d00c9eeeb0a5056e2d1829f5092f65a7d16a14882ac33804bfb30cc382d52559dffeaae879b81805efc04c4faa92fb1af9082726596820f8f8a0778c63072a14784680a62453491521816ee329be7f7f794703e5f1ecfa65f83d0a5970f142b6bb429fe56357bb608f5ad05ac9a233eb5f2a0b94ccacb354aa76dfba3e6337751014ecf7c09362ee7e767a35f51bf90bfc5c7e9c33eb2f78146766faab0576547c59ad3119e6bf36f396687242e1e36453f8f14844dc5c39697f37fd03a098eb22ba37dc116af5a60c62fd7221414c4f552aa93f1bd8a953420993e76d41d8d53334aca44af8171664d8c8a93602c993df351f00e1acd193afe4083c648a9f31c5e4d71a8f0f54ac8ee95b7be1db451500bd5150f63af77e29be1795815eefe5a0156ff8f3c793f0536fe7ea5867b44e590b7013cceab29381ecf00ecab55324298f496747b1fe50126106d19cfba88af558dfcd05db6a6befe319ba7400bfedf02bb25c8ca76a8f4d4f02fd37624b81d074159cadd89d66c719ceb40f9fc21e2349668c8a51b8b7d533bce094008936127f4a78142a59ab4ffd84031b8a3b63b0b446865d54cb7e010498cd22cdbe05c23387b4f678207eaf9b840436d5a2ead7e037b193222235719c5414349f43ba85358e85c065a3a75907001020eb990e3490e50db39ee28496dd77a27db128ee8ed5e0f4716145683dc3ac872c4b3acdeaf5bfe6747099194863eeef29766443c185b78fb616f0d1e093d817181356987e883b70146bb69397414c783a06b1b7bb60e47068d215750a279bc8cfb681525583a6c285b4788543c3456061fb44bc03ea2f0abfefc3da8bf9fd5e977e2f8887844780620b49877419d812d9d9a8915804b3ed1fc4bc2a324a1285d25cbc1b707b5c8f44c5ee8d27035979470aaabb164a6fbfe4ab4ab1684cc02fe7ce14f18ca3156ecb5d3f8b3caee0bdb19af9b4bac49a487347bac3bb0b6e19be658469586228eb1ca1d8afd98ff64da66ac0f214d385046e5686ccac415692777c1463cf723d4f193344122dc34d053c29e7856aa32d28e8d31706ebfdc812b7e405a5482c06faeb309848fe9645ef790faf9eb6dc4e04b2d0b9f2987060f28fb261970e0951c8eabbcd0d34de0609686452bbc317c75748cdbef8ad2b28a9ba12dbf4ec68053f687fe88a5dd2d0d1db994a60876484986f574818695bffb9fb013d0a90daf4ae0a149c52c3d775ef29ec932035d8e54dcb698963459baf5971c9cf58b6b7fda7a4a3b50f8a1a346afd869b0526e09f196a0759706a1712242eaa2ed44a5fb1b761e30b6d226f2e6d2b90490a5a5c701b3a25c91f6e466954be7178f9e07d1126ffddc70812be08957c09e754ed6dfed6c3ba189fb9984405dd6888f43b7b600f56271e5c006931ea9300a226d309ea517962ee941fa1c6688f779d9849a1298a7db441281b74caeae065f9d7e8dfe0fd630bbf47e4829a7cc51bfa778efe8de126e5063b8efc849581d37cf6dc9c8f123e8e63161444fe36e4f162874ca8157ae63b4255d614cda66ae3016acadd6c8690bde8165e0a69fd1d06572556374b0918f860908c583b19205f54fe80485abac50ae67ce6abfe9df2807501b87158f9b971fd10b48213e96033818ab99b386679ca28cf2725e2f4218ed8e088dda314dde28c9d33af87842f635622be796a61a735cd87671fcdb5db4b18c09e91ecd22673ad4d393659433e6712d0fe945a30ebabf7f9422543dae2382557d039fd439ca2373fa313018b108823af4eab2b54aaa0e876a8c08919b8b7f23ed9f878a5bea8fe1b33006f8803892c586cd3f99cc228780c33799e895064df523a01cafdaf4bab88d7dac040e7961e1f5b03f2fc37adb1a27ce58f0c0196373c6909eb985572a080e9515a3a60cc76cd3a79c10e4e0d323e53ae27859a70884986c1d847b738f6e6ac93e9e30ccca51e01a44c0dd9c2eb0900ed4abadb91f66307e211457682081b5afca556f2453c48197fc8a1c7787aaa4bed3bcdfc4c287de2becaa0e662448691f7f7be9d7bef60451d66127c15faf5f9335982855c6df70db32774863388916edd0ef7926e7b5ea973efa84bbfe6e2d8d89fdb0d0dbfc998fc4c0ed4a0ab7213769031517d3d4c486f53574ae612a156c53720353f5c6e0ef0629d47a60e0ae5c72da4b9f1c25c9b4a13b2db77b85c61ac651e097c731cc57e0ae97a89308aba3c0f0a8337c9bcb028d88ea7b7eb65211be0ada9608a599abb03591355f9b21baed0120cb3cd1a46436b550b3416c032bfc9d9a1fe64b07e63f44eb29f254db32e9917eb8448611967cf4b436670db694700bf0ef734240c8f8562e2dffe79f59582cc9e4888c2ff87044fd3d9a81c6059239a4864dc88f02eeabeed19ce50bf198396b0fda6e35b5f456b6ece789280fbf514c4f4a145a790167f0adca6774e344c89d1da5afe4f687dfc8f6cb06f3d5d6af178176023cff27d991a48c0ab74fcc1f00e9e887954c162c5d90d6fd297f67ab1c03a6dc619fb842149d7835650ee4956938b621ae7696209d3153d652aa37d08ffc2c250fe782c4a3678c4e182caefa3851c5d71a12faef685628272a00e16e132a88f99f6ad7c6520eef78e7822a6f135dd1fc904c61fbdf9fbdc927294c888da0ee2a712cef919fdf95f59c09237cd62de46c19467f0b6672a9b58c741a7e97ccad68272e4656e86feff58b63997f8451d168f37ff8bcd0094827b5f74a18462d584f1dcdb2f59c2846a917dba938466cf3216f2c12d38bc1f4821fee69f1e0739472da52396fca455a525367aeef1d16a02a2e9e39de041f5d5b76488ff282bd84d52d050ade47e87881b5be2b45d46b45f799398a4350194e31c88a0bace4c270c7b382f7249282d9401da9fb5182daf9ab2e3800df04734dd7c89ba60dea2f1827fce0eede83d5ba69c42299b0f676b216bc4de1067fa2d6badca2295fca144d5e66dfd2e839730e4a5f9304f686e7ff4d8094a04b75b43905e53af52dc30824b1ec96763576407f6b259a049728a9c5b7df12671c481b655b0f635b03149d5eb1c4f9f516b4f97b55584c65c3b11467796bb4b630d2662541064a6e73168df66a14a4b589f130a469e1a2f96be383fffdb3538203a9dd9449d4147943582db8fa07af70fdfd7d16cfb4087fe8aa25faa6095747eea6315310e7c4729edf9159e0f326f4670c0407fcb5ce7558d60b49b3cd9d4a081ce26a3e8748f8cfcb2234d4fa88e47814ed", 0x1000}], 0x6, &(0x7f0000005440)=ANY=[@ANYBLOB="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"], 0x14b8, 0x800}, 0x7}, {{&(0x7f0000006900)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x300040}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000006980)="66efea282e56a527b03eb8483311c61c6935e0ad02f772aea8baac1ddb186b389623a214f7afdc7875a1da7afa9f2173c6c3a51a232f16ff802631f6270dda7dd4deef8f7c226d0b771eb35b0a0a070db8ddebe1944ba4eb0214685a3a1f84a3cd594e4900cb5f7cda3379f48550d7a0ae99b580ef466aa9c32640ba0c41a648e9ffe0ee728055e99098d1dd459a6229cb1c0af8163e56723fa6a6ae2491", 0x9e}, {&(0x7f0000006a40)="4caf02c4749b36ac030d8da8c51fde76f993d13f48d13cf4f452a8c63f30ca2674949bf6a2ae67d0d4f6fe93f8026fd4b37c2629ab7c4f064d25ce6693823fc00c4400d4e5fdb5038dace2af04cd4fd737b1cbc2e9530e77e5ca30c7dbbcf76c9cf32c40cc1285d8bd9f646ad9a4de125d836045504524b6718695e5d86136f81eb9526edf318c5b6871594e303421f080ecd135915cd2747345e1f197b82111e361f33cea27b04307ae11d50cf516730c248cefd68305be752f08cffc54d454d3ba8ac59f2c0e59c9f1d9c776b9c095aec601ef4132681e0e", 0xd9}, {&(0x7f0000006b40)="7af4b05a49134fe62f74fa4d876cfafe41312d99ced267e5830f73fb113ecee12be91f462066ef4b84170ffa6dd41ee8fdef7366e39652126427a765ae1e52b2ed2d52f3a3fba8a066", 0x49}, {&(0x7f0000006bc0)="2ef6a7636a5cc6e0ea28ab5f1867", 0xe}], 0x4, &(0x7f0000006c40)=[{0xf8, 0x0, 0x8, "0831bb85e14c6a09701a37788a93d62e57a29803e9075f3dbd5496877d918f4ea343d723526fa415c734fd93f43aedd89d33c3a94414a0dffa4c85135699cff106028fc41913eb70277809a4a4bef0d0ba20d39f095bb31aed520e51a84462a0e109c456335a9de5122cd07c228159c7b36980c17b7baef61b7e13aa5b065e3453e294fe344377bd621a9519bd093480bc81374ed5c805e6ccf233ae50e338c2beb1cbb9a809f889884f6bedba730064367ffc2ff4217e7d9407d9bf050b885e4e89538f8692af6d49d8e838a1fc3101fa3bf0701a2462c80f3d6ca0bccdb42c961e72e101dadfa2"}, {0x1010, 0x189, 0x0, "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"}, {0x40, 0x18a98a2f423dbea3, 0xef57, "7e7aa2e760d5a5bbec94c5c290c27c227c924fc9a152cdeb1a9854b38ab74d037fa57275ecf5c9ca05"}, {0xa8, 0x0, 0x342, "3fee69a541ba03d634e99270fc169a159763ce801312fc9b8a02c372d367db45bcaa6f08a6eaaf4fe011d751ec998c5a47d5cb96ef9a3f9e5aaf4d8fe8931840390a70d3cb20d89c1f83b1d43fa2d266d1eb5874a5e68099e013939059023ee0da0c513ee541f2485738860681f596ce76edda555d7b46f55dffe65e08cc358f9e8df791b9f246aea32a56b8b718ef8fcb"}, {0x70, 0x0, 0x1, "d81c7c9f5cc1299b4b61d3bf5869f56a69528a286f20d4e8da43e6718b31b0b80bf41b5937105ecff1593aece785d929c9cc3f19c946a249a72e767501d919aa34ab8b093c0b17e9be284243bed0dc8ee604f806e66b466afe20ca0683577bda"}, {0x1010, 0x13f, 0x150d, "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"}], 0x2270, 0x400c0}, 0x80000001}, {{&(0x7f0000008ec0)=@generic={0x8, "543e7e10be9b06720d20d2bcd9ab62ffd7f5ab71fd4b5cccae577ede0a56513189f4314920422c8cfa8d88a72ed2cbaadbcae54783132aa7ab8d4ac6e50e956a103c5f8b721dc5c2e676d0a115a5308d60b9e2c7e916d51694a3eb25031c7c12ead75925bfea56b53aee44d0ce2480d99b7d463506e1d1deebd0046cf747"}, 0x80, &(0x7f0000008f80)=[{&(0x7f0000008f40)="01e5395addf086abde9fbe1d6781c17e156dd1822ce674eb49e33b8f4c5bce65fa8b0ae25986a578", 0x28}], 0x1, &(0x7f0000009280)=ANY=[@ANYBLOB="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"], 0x1b0, 0x8000}, 0xe}], 0x4, 0x4000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x80, 0x1, 0x5, 0x6, 0x1, 0x9, 0xffff, 0x3, r2}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xd7d, @empty, 0x2}}, [0x4, 0x1, 0x200, 0x2a36, 0x6, 0x8, 0x8, 0x9, 0x8001, 0x3f, 0x3, 0x6, 0x37adba2d, 0x8, 0x401]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0xde8, 0xffffffffffffffff}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r4 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r5 = socket$inet6(0xa, 0x80003, 0x800000000000006) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e21, 0x9, @empty, 0xaaa}}, 0x3, 0x9, 0x7b, 0x6, 0x91dc}, &(0x7f0000000480)=0x98) ioctl(r5, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r4, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) [ 378.503004] binder: 18182:18185 Acquire 1 refcount change on invalid ref 0 ret -22 [ 378.534050] binder: 18182:18185 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 378.537508] binder: 18183:18187 BC_FREE_BUFFER u0000000000000000 no match [ 378.544042] binder: BC_ACQUIRE_RESULT not supported 03:35:32 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6335}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 378.553981] binder: 18182:18185 ioctl c0306201 20000480 returned -22 03:35:32 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffeffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}, 0x1}, @in6={0xa, 0x4e24, 0x8e, @loopback, 0x6}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21}], 0x68) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xf24}, 0x8) r2 = accept$inet6(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2b6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004014}, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000340)="1173d7e02cb77481f71caec8216f0912e66981b03117fc0bbe78a93be8b1dda074f0fe0762ffcfb78073cf8736e4eefcbec45617d7764f67f5b51f313e30cca374bc83fe4c36d16e0f8eebdb7fcab49e6584a62ce7f79c896e9edde6b873fdb9151f9c74635acdec3e8bb78fc52f80aade1044b856cfe5972250c10aade87d8fec5d0fd3d69bdafc078aad") getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r1, 0xffffffffffffffff}, &(0x7f0000000440)=0x8) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000480)="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", 0xfa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x28, &(0x7f0000000580)}, 0x10) r4 = dup2(r2, r2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000680)=0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x70, 0x9f8, 0xfffffffffffffeff, 0x1, 0x7, 0x0, 0x4, 0xa088, 0x5, 0x10000, 0x400, 0x74, 0x7, 0x6, 0x7fffffff, 0x0, 0x735, 0x1f, 0x5, 0x9, 0x2, 0x2a, 0x5, 0x81, 0x800, 0x8001, 0x9, 0x80000001, 0x4, 0x3, 0x0, 0x6, 0x8, 0x4, 0x8001, 0x8001, 0x2, 0x0, 0x3b8e, 0x1, @perf_config_ext={0xbec2, 0x1}, 0x4000, 0x9, 0x8, 0x7, 0x3, 0x2, 0x6}, r5, 0x1, r0, 0x1) fstat(r4, &(0x7f00000006c0)) r6 = openat$cgroup_ro(r0, &(0x7f0000000740)='memory.stat\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000780)) unshare(0xa00) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f00000007c0)={'icmp6\x00'}, &(0x7f0000000800)=0x1e) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000840)={{0xa, 0x4e24, 0x5, @remote, 0x80000001}, {0xa, 0x4e21, 0x8, @loopback, 0x5}, 0x7fffffff, [0x10000, 0x8, 0xffff800000000000, 0xa15, 0x0, 0x7e, 0x8, 0x8000]}, 0x5c) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000008c0)=0x3f, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000a00)={'broute\x00', 0x0, 0x4, 0x24, [], 0x5, &(0x7f0000000940)=[{}, {}, {}, {}, {}], &(0x7f00000009c0)=""/36}, &(0x7f0000000a80)=0x78) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'ip6_vti0\x00', r7}) ioctl$TIOCEXCL(r4, 0x540c) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000b40)=0x100, 0x4) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000b80)) shutdown(r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000bc0), 0x4) 03:35:32 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x29fc}) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(r1, &(0x7f0000000180)='fd\x00') syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x100000000, 0x80000) sendfile(r2, r3, &(0x7f0000000000), 0x100000080000000) prctl$getreaper(0xf, &(0x7f0000000100)) [ 378.644266] binder: 18195:18197 Acquire 1 refcount change on invalid ref 0 ret -22 03:35:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0xff, {0x2, 0x4e24}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e23, @multicast2}, 0x202, 0xf46, 0x717, 0x9, 0x8, &(0x7f0000000300)='ip6gre0\x00', 0x0, 0x0, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r2 = socket(0x2, 0x802, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r3 = getegid() mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532312c616669643d3078303030303030303030303030303766662c706f73697861636c2c616669643d3078303030303030303030303030303030392c63616368653d546d61702c70726976706f72742c63616368657461673d70707031657468315b747275737465642a2c63616368653d667363616368652c64666c746769643d7391d13ecbeb496656bd02841bd84cb04589595967bc282a3fc83c86065fb2ce9ca45631030edbd4ee80b968c049eff46c4408a77f5150f13fdfece7b4e16d48449798192618424fa41faa3a2ddc752f10264dea24695bd98071", @ANYRESHEX=r3, @ANYBLOB=',access=any,\x00']) r4 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r4, 0x8007ffc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="05030000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x18) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendfile(r2, r4, 0x0, 0x400008bca) [ 378.690849] binder: 18195:18204 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 03:35:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r4, r3]}], 0x18}, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) recvmmsg(r4, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000380)="66b80500000066b9006800000f01d90f220166b8009000000f23d00f21f86635200000060f23f8ba400066b87c3cf8b866ef66b8010000000f23c80f21f86635000020000f23f80f326766c7442400000000006766c744240203f300006766c744240600000000670f0114240f01c966b9800000c00f326635000100000f300fae8ef71f", 0x84}], 0x1, 0x0, &(0x7f0000000440)=[@efer={0x2, 0x7000}], 0x1) ustat(0x6, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setns(r2, 0x0) r5 = semget(0x1, 0x6, 0x24) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000140)={0x0, 0x1, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xe000, 0x0) semop(r5, &(0x7f0000000000)=[{0x3, 0xb85}, {0x1, 0x20, 0x1800}, {0x1, 0x1000, 0x1800}, {0x3, 0x3, 0x1800}, {0x2, 0x3, 0x800}, {0x4, 0x0, 0x800}, {0x1, 0x10001, 0x800}], 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:35:32 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x20003bc0}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 378.732863] binder: 18195:18197 unknown command 1074553653 [ 378.765445] binder: 18195:18197 ioctl c0306201 20000480 returned -22 [ 378.835681] QAT: Invalid ioctl 03:35:33 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c630d}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:33 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'btrfs.', 'posix_acl_access\x00'}, &(0x7f00000002c0)=""/57, 0x39) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xff7ed96bd8d791cb, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) mount(&(0x7f0000000300)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='efivarfs\x00', 0x0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000480)={0x72, 0x7d, 0x1, {0x0, 0x6b, 0x9, 0xf877, {0x0, 0x2, 0x2}, 0x2100000, 0x9, 0x0, 0x2d320, 0x4, 'fou\x00', 0x27, "6367726f757076626f786e6574307b25295b76626f786e657431287070703073656c696e75788d", 0x9, 'trusted@$', 0x4, 'fou\x00'}}, 0x72) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc06000000ffc9715cef22cee4c673d4388d5e56040000000000000040e4c9ee649a371208309ca436bf919fd9636bfa255ff4b30008f88ecc9c2d812171c401624f0c142fc54f65f49239f27686b37d489e925da19bf31e30eccd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000ca5000)=""/140, 0x8c) statx(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0xfff, &(0x7f0000000380)) [ 378.865003] QAT: Invalid ioctl 03:35:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x800, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @remote}, {0x0, @dev={[], 0x19}}, 0x4, {0x2, 0x4e20, @multicast1}, 'syz_tun\x00'}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000200)="f081116b7af30f01c80f21fc66b9370200000f320f20c06635000001000f22c064f20fe6ef263e646467d8c06736660f383998e3580000ba4100b85800ef670f07", 0x41}], 0x1, 0x14, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x80000, 0x0, 0x1, 0x0, 0x2, 0x0, 0x100000001}], 0x1) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r2, r1]}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000400000000100000001000000d50dfa172fcdbca0a4119bd0cd776fcf8b98ff1d7be1b321195af3e0ccfea3bee0dd79ca4d6e755b8ac080aef3a6ac77136de71ae5f9f781b31e6f1e1134b1490c01311eac1311ffacb6ec3ad200006c2f6df040495d75e69bdfa22cd0fb9a9ba4aa24104749c4ca6b70216c3af8c7654f7b3a51aa5e5e7170eb0dc536d53be5a7715466476102052c236dd3e2f9a53a16f596fab05ca7a073d2ada362c086b6c130b222fddaf556e8625bef7cad69828d398f1be85486584067cc0bb33d7f3c66ecf12557e2e40234c55407fe7eb6170d207053b341a188", @ANYRES32=r2, @ANYRES32=r1], 0x18}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x2c}}], 0x1, 0x0, &(0x7f0000002cc0)={r3, r4+10000000}) [ 378.966685] binder: 18224:18225 Acquire 1 refcount change on invalid ref 0 ret -22 [ 379.027557] binder: 18224:18231 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 379.045366] *** Guest State *** [ 379.048860] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 379.057886] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 379.066805] CR3 = 0x0000000000000000 [ 379.070721] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 03:35:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002400)={0x0, @empty, @multicast2}, &(0x7f0000002440)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r2}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0f}, {0x800, 0x3}, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@loopback}}, 0xe8) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x221}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000200)=r5, 0x4) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) [ 379.077173] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 379.083424] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 379.090428] CS: sel=0x0010, attr=0x0009b, limit=0x000fffff, base=0x0000000000000000 [ 379.098667] DS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 379.107080] SS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 379.115299] ES: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 379.123444] FS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 379.131978] GS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 379.134294] binder: 18224:18225 unknown command 1074553613 [ 379.140121] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 379.154252] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 379.162176] binder: 18224:18225 ioctl c0306201 20000480 returned -22 [ 379.162433] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 379.177478] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 379.185783] EFER = 0x0000000000007000 PAT = 0x0007040600070406 [ 379.192892] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 379.200672] Interruptibility = 00000000 ActivityState = 00000000 [ 379.207359] *** Host State *** [ 379.210676] RIP = 0xffffffff8120b2b4 RSP = 0xffff88018fc37350 [ 379.216919] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 379.223574] FSBase=00007f36a50b5700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 379.231617] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 379.237853] CR0=0000000080050033 CR3=00000001d8979000 CR4=00000000001426f0 [ 379.245164] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86e01380 [ 379.251958] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 379.258117] *** Control State *** [ 379.261832] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 379.268851] EntryControls=0000d1ff ExitControls=0023efff 03:35:33 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x4008630a}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 379.274582] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 379.281722] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 379.288495] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 379.295228] reason=80000021 qualification=0000000000000000 [ 379.301629] IDTVectoring: info=00000000 errcode=00000000 [ 379.307328] TSC Offset = 0xffffff33146dc4e2 [ 379.311813] EPT pointer = 0x00000001b9c5101e 03:35:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x2000000, 0x0, &(0x7f0000000440)}) 03:35:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="2ab7f2288a55fdb183071475d771c999a7a1b0565b3ce1920c8fb57fffc37a4c41e8a6ed6449556557eedc8b8dd40ed76d152c6101e4db788dbc8ff0671fa120aca3c7369e040d891d5ab72b96503a65e253cefb221d7fbd471a363c1b9417f26d63ba85e662d1d8a2a4e80c4e3f75bbb1068956ff50c3c6b42285ebd63deb585ccf83e9d23eb2537c", 0x89) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4100, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r3 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) [ 379.347358] binder: BC_ATTEMPT_ACQUIRE not supported [ 379.367290] binder: 18240:18241 ioctl c0306201 20000480 returned -22 03:35:33 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x630c}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:33 executing program 6: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b705000000000000bfa30d00000000000403000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000000000040b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x48) [ 379.453199] binder: 18249:18251 BC_FREE_BUFFER u0000000000000000 no match [ 379.481359] binder: 18255:18257 unknown command 0 03:35:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = socket(0xb, 0x6, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x5d, "06575b06a9fcf0837c4d09dfb51e2aed8a5a533085dcfc5e25533019a83bf292b17fdcc4b034f8e1ef0bc35d3713ca3921cf3f6f853cfa8551f9b8feeb0686419b465b0a292acaba437fd869209e04d2f9159b4a9dc6ec9aeb4335b671"}, &(0x7f00000000c0)=0x65) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r4, 0x24}, 0x8) r5 = msgget(0x2, 0x2) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000002c0)=""/151) sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000140)=0x8000, 0x4) 03:35:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000140)=""/251) r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYBLOB="0000020000866543ec52e65b3c5dbec403a1000000"], 0x0, 0x0, &(0x7f0000000040)}) [ 379.498024] binder: 18255:18257 ioctl c0306201 20000480 returned -22 03:35:33 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x630b}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 379.590610] binder: 18266:18267 ERROR: BC_REGISTER_LOOPER called without request [ 379.598308] binder: 18266:18267 unknown command 0 [ 379.619321] binder: 18266:18267 ioctl c0306201 20000480 returned -22 [ 379.623731] binder: 18270:18271 unknown command 536879104 [ 379.632234] binder: 18270:18271 ioctl c0306201 200002c0 returned -22 03:35:33 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6306}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 379.642516] binder: BINDER_SET_CONTEXT_MGR already set [ 379.648295] binder: 18270:18272 ioctl 40046207 0 returned -16 [ 379.660546] binder: 18270:18272 unknown command 536879104 [ 379.683636] binder: 18270:18272 ioctl c0306201 200002c0 returned -22 [ 379.713091] binder: 18278:18279 unknown command 1074553606 [ 379.751409] binder: 18278:18279 ioctl c0306201 20000480 returned -22 03:35:33 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) 03:35:33 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x7ff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 03:35:33 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x7ffff000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 03:35:33 executing program 5: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x40) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef01005ceb4fd2e515217e010000006e5fbe5a000000003e8b1a0826bb29000000000100000000000000dd", 0x64, 0x400}], 0x0, &(0x7f0000012e00)) 03:35:33 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x40406301}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 379.923904] binder: 18298:18299 got reply transaction with no transaction stack [ 379.931505] binder: 18298:18299 transaction failed 29201/-71, size 0-0 line 2762 [ 379.971348] binder: undelivered TRANSACTION_ERROR: 29201 03:35:34 executing program 6: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100000001, 0x2) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='\x00', r0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0x7ff, 0x1e}, {0x3, 0x100000001}, 0x401, 0x7, 0x5}) r2 = dup3(r1, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x7f, @empty, 0x2}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x71e, @ipv4={[], [], @broadcast}, 0x3}}, 0x0, 0x7, 0x2, 0x9, 0x4}, 0x98) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='\x00', r0}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r3, 0x8b}, 0x8) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000480)={{&(0x7f00000003c0)=""/124, 0x7c}, &(0x7f0000000440), 0x54}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000004c0)={r3, 0x2, 0x30}, 0xc) getpeername$unix(r2, &(0x7f0000000500), &(0x7f0000000580)=0x6e) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000005c0)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3f}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}, @IPVS_SVC_ATTR_AF={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000007c0)={r3, 0xfffffffffffff800, 0x9, 0x3, 0x4, 0x2, 0x8, 0x40, {r3, @in={{0x2, 0x4e21, @multicast1}}, 0xff, 0xf11, 0x9, 0x101, 0x1ff}}, &(0x7f0000000880)=0xb0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r6, 0x4}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000940)={r7, 0xfff, 0x7fff, 0x1000, 0x7, 0x8}, 0x14) tee(r1, r4, 0x101, 0xa) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000009c0)) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x11c, r5, 0x620, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xec7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x629}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x5}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) fcntl$setlease(r8, 0x400, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bind$inet(r1, &(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10) set_thread_area(&(0x7f0000000c40)={0x2, 0x1000, 0x0, 0x85, 0x40, 0x4, 0xfff00, 0x1f, 0xffff, 0x7fff}) connect$netlink(r0, &(0x7f0000000c80)=@unspec, 0xc) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d00)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0x178, 0x270, 0x0, 0x0, 0x270, 0x340, 0x340, 0x340, 0x340, 0x340, 0x4, &(0x7f0000000cc0), {[{{@uncond, 0x0, 0x118, 0x178, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x40, 0xa02, 0x1, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x1, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x12}, 0x80000001, 0x7, [0x1f, 0x3b, 0x3a, 0xf, 0x2c, 0x2f, 0x1, 0x8, 0x4, 0x5, 0x6, 0x19, 0x32, 0x1, 0x1e, 0x2d], 0x1, 0x4, 0xffffffff}}}, {{@ip={@multicast1, @rand_addr=0x4, 0xff000000, 0x0, 'ifb0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x1, 0x3a}, 0x0, 0x98, 0xf8}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6, [0xffffffff, 0xff, 0xffffffff], 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x80000000, 0x3, 0x8, 0x7, 0x158491d3}}}, {{@uncond, 0x0, 0x98, 0xd0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x44, 0x1f, 0x8}, {0x6df, 0x7f, 0xffff}, {0x8, 0x7, 0x3ff}, 0xffffffffffffff01, 0x400}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) read$FUSE(r1, &(0x7f0000001140), 0x1000) 03:35:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x7, 0x9, 0x8}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCCONS(r2, 0x541d) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000000200)=@sco, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000780)=""/4, 0x4}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x9, &(0x7f0000001880)=""/80, 0x50, 0x101}, 0x40012040) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r4, r3]}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x15}}], 0x400000000000085, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:34 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x480000, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = getpid() ptrace$poke(0x4, r1, &(0x7f0000000100), 0x1) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000240)=""/4096) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24240, 0x15) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000180)) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 03:35:34 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x40086303}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x6800, 0x0, &(0x7f0000000440)}) 03:35:34 executing program 6: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x1000000000000002, 0x3) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x3, 0x400, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000030c0)={0x0, 0x0}, &(0x7f00000000c0)=0xfdb5) setresuid(0x0, 0x0, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) r4 = socket$l2tp(0x18, 0x1, 0x1) close(r4) r5 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x200000000082) r6 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f00000003c0)={0x2, 0xffffffffffffffab, 0x0, 0x0, 0x0, 0x80000001}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000580)="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", 0x170}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000002b00), 0x2000005) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000140)=0x54) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000002cc0)={'broute\x00', 0x0, 0x4, 0x5c, [], 0x4, &(0x7f0000002c00)=[{}, {}, {}, {}], &(0x7f0000002dc0)=""/212}, &(0x7f00000002c0)=0x78) [ 380.277046] binder: 18316:18317 BC_FREE_BUFFER u0000000000000000 no match [ 380.308302] binder: 18316:18317 BC_FREE_BUFFER u0000000000000000 no match 03:35:34 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) setsockopt(r0, 0x10f, 0x80, &(0x7f0000000200), 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x40000) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x3, 0xbff, &(0x7f0000000040)="2434d2955b22bacd849b9c1caf198b8ff23f1699dccf3c56c2e2ceeb563bb31872a79fb7469ff39a98f3ae942bf1a7800eb94de9c7dc38f9cc3ec384c1575bf2bf47418422634a2b3f8cabfd4fc1763ac42fc10bef2e49f9f5d6a4d8bfefa5d7ca17b8a0402b3c071c7c8875af75093a7c945b20dba476", &(0x7f00000000c0)="1f164d111789644830773000e5810ce9889c628ca22287eee457662861e333676b08b40b304a05560b63b6ed30570fa6501558a5693ef764f0c2a229c966fe7c67bdabc51468e961c796a0feb8d97c05206bf2371440c412e3f42e9cbe56ca32d018f0172e160e51d30e70d146ebda45e91dc51689a7a37ddde47a331c407f1c7a373e28", 0x77, 0x84}) write$P9_RWRITE(r2, &(0x7f00000001c0)={0xb, 0x77, 0x1, 0x1d00}, 0xb) [ 380.324973] binder: 18320:18321 BC_FREE_BUFFER u0000000000000000 no match 03:35:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:34 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6309}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:34 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="91008067dfb83c08e2d9486434f853000400000c90a1f6a1029f4c3a75358601c3566a94b66eceff3b533c7c7b82d9481f37827ebaea4dce661d3b1695baf476680b"], &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0//ile0\x00', 0x80040, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000100)) [ 380.467937] binder: 18334:18335 unknown command 1074553609 [ 380.483565] binder: 18334:18335 ioctl c0306201 20000480 returned -22 03:35:34 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c630b}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 380.593543] binder: 18344:18345 unknown command 1074553611 [ 380.599511] binder: 18344:18345 ioctl c0306201 20000480 returned -22 03:35:34 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80200, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x8, 0x100, 0x100000001, 0x63b1, 0x101}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x9, 0x395}, 0x8) socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = getpid() fcntl$lock(r1, 0x6, &(0x7f0000000000)) sched_setscheduler(r3, 0x5, &(0x7f0000000100)) fcntl$setlease(r1, 0x400, 0x2) 03:35:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) finit_module(r0, &(0x7f0000000040)='skcipher\x00', 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) 03:35:34 executing program 5: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='[GPL{\x00'}, 0x10) connect$nfc_llcp(r1, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0x82e, 0x3f, "d8ac227337580a252a5a9e68920dec01edca723761046e434ed520b6f3fa7ef2ea2e3da7c3d2427e056ab1998c2ef2e04e3111e33fa7dc812bdaf055b95110", 0x22}, 0x60) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000240)={0x1, 0x3, 0x1, 0x6}) r3 = getpid() getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="3000000024fcffff0000000000000000e1e095366914233c79ceaa59bb3e01fbfbff0701ed0606720bb94284da5df2b5db10062479955fd182a291c9dfa1f4b1daf349f632389e33f3455da38029f7d2500c1b6d2e3455cc7de925b8eee10af60f500d651b14d064222ca4420385045000004cceb52cf01bfa2192f2e63055db592d26fb527d4ed9153d93beb2b9d8ca67749d9ba025a6eb79519ceb928ff095ed297800658c581953ddfc63"]}) syz_mount_image$msdos(&(0x7f0000000380)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x4f45, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000400)="2260b258ff9a7e94bf4e91b5414029d6f070fb800aa2c0354ed5f23af7a1670543e197c788488f5b92bc95e23c212690f8dd223b49a0fd3d6507ca496aed3b6fa9a8813a1daa2d3df5cb57707d365847dabd31e633de979724850ae00cbc27dd695b5e5894269f84e1498ec88a8e0dacc3a38b4c02193146d652394ec29b9bcc1a527fc9a00326fc3f08920c80369ac50b774186eadc56f6df9f6ab4a6324240d245cd1769d86d", 0xa7, 0x2}, {&(0x7f00000004c0)="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", 0x1000, 0x9bd6}, {&(0x7f00000014c0)="e531ac63f014778cecb1753a09a89c732b89da3589c7daed91873da8b390bd26ae4db4fc2f47d7ebaf55b5af682f2d27f786c2d135133bfabc9caca21891c1ee71916eaaeb8b64d37184c5d1ad91a88cad400af88e1a3b9923af50c562be45f84c433388ac61d9487c17897607eaa544ed024cf1e02417de1810eb6751aa7dbffcdcd87018a74f47f9fd62e58d2f32b2163215f77438cefed4a05fcf0f585f99b1316e30c4023c8788d1352a419ae7b24a39d088554f0c8475ae4ec36c376195ee0968e4894064920b13751a8fe6e5460fd0eb5777f546219f28e2da7677e11f8d85de3936386f587f6c3311e8", 0xed, 0x101}], 0x200000, &(0x7f0000001640)={[{@fat=@check_normal='check=normal'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@usefree='usefree'}]}) r4 = memfd_create(&(0x7f0000000080)='veth1_to_bridge\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000100)) 03:35:34 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6303}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:34 executing program 6: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x1000000000000002, 0x3) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x3, 0x400, &(0x7f0000002b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000030c0)={0x0, 0x0}, &(0x7f00000000c0)=0xfdb5) setresuid(0x0, 0x0, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) r4 = socket$l2tp(0x18, 0x1, 0x1) close(r4) r5 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x0, 0x200000000082) r6 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f00000003c0)={0x2, 0xffffffffffffffab, 0x0, 0x0, 0x0, 0x80000001}) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000580)="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", 0x170}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000002b00), 0x2000005) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000140)=0x54) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000002cc0)={'broute\x00', 0x0, 0x4, 0x5c, [], 0x4, &(0x7f0000002c00)=[{}, {}, {}, {}], &(0x7f0000002dc0)=""/212}, &(0x7f00000002c0)=0x78) 03:35:34 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x5}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 380.796631] binder: 18360:18368 unknown command 1074553603 [ 380.810316] binder: 18360:18368 ioctl c0306201 20000480 returned -22 03:35:35 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x5, 0x428840) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000240)={0x9, 0x8001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000040)=""/31, 0x1f, 0x40000000, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000400)={@remote, @local, r2}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r4, r3]}], 0x18}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000340)={0x5, 0x1, 0x4, 0x0, &(0x7f0000000300)=[{}]}) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000002b80)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000001800)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000001b40)=""/43, 0xffffffffffffff19}, {&(0x7f0000001b80)=""/65, 0x41}, {&(0x7f0000001a00)=""/106, 0x6a}, {&(0x7f00000030c0)=""/4096, 0xfffffffffffffefa}, {&(0x7f0000001740)=""/156, 0x9c}, {&(0x7f0000001580)=""/78, 0x4e}, {&(0x7f0000000440)=""/56, 0xffffffffffffff75}, {&(0x7f0000001ac0)=""/69, 0x45}], 0xa, &(0x7f0000002b40)=""/44, 0x2c}}], 0x1, 0x0, &(0x7f0000002cc0)={r5, r6+30000000}) 03:35:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x7b, &(0x7f0000000140), &(0x7f0000000180)=0x14) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 03:35:35 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x40406300}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) socketpair(0x2c, 0x3, 0x0, &(0x7f00000001c0)) getrandom(&(0x7f0000000000)=""/40, 0x28, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e23, 0x5, @ipv4={[], [], @multicast1}}}, 0x5, 0x0, 0xa9b}, &(0x7f0000001800)=0x98) 03:35:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0x4c, 0x0, &(0x7f0000000440)}) 03:35:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x123, &(0x7f0000000200)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xffffff7d, &(0x7f0000000040)=""/183, 0x0, 0x20000000000}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite\x00') bind$vsock_dgram(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 03:35:35 executing program 5: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='n\a\x00\x00\x00a6\x00\x00') socket$inet6(0xa, 0x1000000000003, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000480), 0x109, 0x10400005) [ 381.165278] binder: 18389:18390 transaction failed 29189/-22, size 0-0 line 2855 03:35:35 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) fchmod(0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r1 = getpgrp(0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0x3, 0x5, 0x3, 0xffffffffffff7fff, 0x6, r1}) syslog(0xb, 0x0, 0xfffffffffffffd97) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)) 03:35:35 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6302}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) [ 381.221308] binder: 18401:18403 BC_FREE_BUFFER u0000000000000000 no match [ 381.240416] binder: undelivered TRANSACTION_ERROR: 29189 03:35:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x716, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:35:35 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x40) syz_mount_image$ext4(&(0x7f0000000040)="0000000080", &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x100020, &(0x7f0000000180)={[{@journal_async_commit='journal_async_commit'}]}) [ 381.314318] binder: 18415:18416 unknown command 1074553602 [ 381.332965] binder: 18415:18416 ioctl c0306201 20000480 returned -22 [ 381.418138] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 381.426873] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode [ 381.455695] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 381.464441] EXT4-fs (sda1): can't mount with journal_async_commit in data=ordered mode 03:35:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0xfffffc1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto(r1, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') 03:35:35 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x400c6307}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:35 executing program 5: syz_emit_ethernet(0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000065dd60d8652b00142b00fe8000000000000000000000000000aafe8000000000000000000000000000aaff000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50016e9090780000"], &(0x7f0000000040)={0x0, 0x20000000000, [0x0, 0x0, 0x727]}) 03:35:35 executing program 6: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r0, 0x409, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 03:35:35 executing program 3: sched_setaffinity(0x0, 0xac05a2b3902e047b, &(0x7f00000000c0)=0x800000d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000240)={@loopback, @loopback, @remote}, &(0x7f0000000280)=0xc) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}, [0x0, 0x0, 0x2000000]}, 0x10) r3 = accept(r1, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x8000}, {0xa, 0x4e20, 0x3, @empty, 0x100}, 0x40, [0xff, 0xffffffff, 0x8, 0x7260, 0xfff, 0x10000, 0x7, 0x80000001]}, 0x5c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000a40)) getuid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e00)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000f00)) getuid() getegid() sendmsg$netlink(r3, &(0x7f0000000f80)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000ec0)=[{&(0x7f0000000e40)={0x10, 0x1d, 0x0, 0x8}, 0x10}], 0x1, &(0x7f0000000f40)}, 0x4) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7fc5, 0x0) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000300)=0xffff) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr=0xffffff7f00000000}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)="7565616dd6638a6aea25f24800", 0xfffffffffffffe79) sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 381.626181] binder_thread_write: 10 callbacks suppressed [ 381.626196] binder: 18438:18441 Acquire 1 refcount change on invalid ref 0 ret -22 [ 381.678944] binder_thread_write: 10 callbacks suppressed [ 381.678958] binder: 18438:18445 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 381.729016] binder: 18438:18441 unknown command 1074553607 [ 381.736410] binder: 18438:18441 ioctl c0306201 20000480 returned -22 03:35:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r0, &(0x7f0000000040)=""/51, 0x33, 0x56) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/147, 0x20000}, 0x18) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0xffffffffffffffa2, &(0x7f00000000c0), 0x282, &(0x7f0000000000)=[@rights={0x18, 0x1, 0x1, [r3, r2]}], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{&(0x7f0000002a40)=@nfc_llcp, 0x80, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=""/44, 0x2c}}], 0x1, 0x0, &(0x7f0000002cc0)={0x0, 0x1c9c380}) 03:35:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in6=@loopback, 0x4e24, 0xffffffffffffffff, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x5e, 0x0, r1}, {0x4, 0x9, 0x4, 0x7f, 0x8, 0x6, 0x8001, 0x3}, {0x4, 0xffffffff, 0x7f, 0x3}, 0x6, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@loopback, 0x4d4, 0x3e}, 0xa, @in, 0x3506, 0x3, 0x0, 0x7, 0x100000001, 0x2, 0xa8}}, 0xe8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x3) 03:35:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x208000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000647181aa01514acddda30d6570d420f8ea8880ed887275751e33064101895f10638771d1f2143ff3d02761c06645fd06afd79637e19fbb2806167ed41e1dbe2bf9aae395917b461919f560320ae3be079d7fc283b8d743087702dc00000000000000282c3bde00000000fcebf0c7ef9dccc5e0b20a24f12a700000c69d8b7c8dc7806f1c4fe8b5ff1e6936e440cc4caefb626a5d38db0a3e6fa3a79f21fdb9fc64503c033fbe"], &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) 03:35:36 executing program 0: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done={0x40046304}, @free_buffer], 0x0, 0x0, &(0x7f0000000440)}) 03:35:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="82"}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000380)=[@dead_binder_done, @free_buffer], 0xfffffdfd, 0x0, &(0x7f0000000440)}) [ 382.106466] binder: 18462:18463 Acquire 1 refcount change on invalid ref 0 ret -22 [ 382.121181] kasan: CONFIG_KASAN_INLINE enabled [ 382.125840] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 382.133334] general protection fault: 0000 [#1] SMP KASAN [ 382.138892] CPU: 0 PID: 18461 Comm: syz-executor5 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 382.147398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.156768] RIP: 0010:ubifs_mount+0x1a0/0x66f0 [ 382.161353] Code: 49 89 c7 48 89 c6 e8 3f 09 0f ff 49 81 ff 00 f0 ff ff 0f 86 91 03 00 00 e8 fd 07 0f ff 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 1e 19 00 00 44 0f b6 2b bf [ 382.180250] RSP: 0018:ffff88018e0cf660 EFLAGS: 00010246 [ 382.185609] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90004889000 [ 382.192881] RDX: 0000000000000000 RSI: ffffffff826dce73 RDI: 0000000000000007 [ 382.200156] RBP: ffff88018e0cfb88 R08: ffff8801b433c500 R09: ffffed003b6046de [ 382.207422] R10: ffffed003b6046de R11: ffff8801db0236f3 R12: ffff88018e0cfb60 [ 382.214686] R13: dffffc0000000000 R14: ffff8801baeeeb48 R15: ffffffffffffffea [ 382.221951] FS: 00007f72a0a6d700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 382.230168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.236042] CR2: 0000000020fdb000 CR3: 00000001b524c000 CR4: 00000000001406f0 [ 382.243302] Call Trace: [ 382.245891] ? __kernel_text_address+0xd/0x40 [ 382.250396] ? unwind_get_return_address+0x61/0xa0 [ 382.255324] ? __save_stack_trace+0x8d/0xf0 [ 382.259648] ? ubifs_iget+0x1bf0/0x1bf0 [ 382.263632] ? save_stack+0x43/0xd0 [ 382.267254] ? kasan_kmalloc+0xc4/0xe0 [ 382.271138] ? __kmalloc_track_caller+0x14a/0x720 [ 382.275974] ? krealloc+0x65/0xb0 [ 382.279424] ? apparmor_fs_context_parse_param+0x1dd/0x490 [ 382.285048] ? security_fs_context_parse_param+0x54/0xb0 [ 382.290494] ? vfs_parse_fs_param+0x127/0x2c0 [ 382.294988] ? vfs_parse_fs_string+0x1d5/0x2b0 [ 382.299565] ? do_mount+0x658/0x1e30 [ 382.303274] ? ksys_mount+0x12d/0x140 [ 382.307073] ? __x64_sys_mount+0xbe/0x150 [ 382.311244] ? do_syscall_64+0x1b9/0x820 [ 382.315306] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.320668] ? find_held_lock+0x36/0x1c0 [ 382.324734] ? __kmalloc_track_caller+0x26e/0x720 [ 382.329582] ? kasan_check_read+0x11/0x20 [ 382.333729] ? rcu_is_watching+0x8c/0x150 [ 382.337883] ? trace_hardirqs_on+0xbd/0x2c0 [ 382.342216] ? rcu_pm_notify+0xc0/0xc0 [ 382.346102] ? kasan_check_read+0x11/0x20 [ 382.350262] ? rcu_is_watching+0x8c/0x150 [ 382.354421] ? rcu_pm_notify+0xc0/0xc0 [ 382.358338] ? krealloc+0x7a/0xb0 [ 382.361812] ? rcu_read_lock_sched_held+0x108/0x120 [ 382.366862] ? kfree+0x1d7/0x210 [ 382.370232] ? kasan_check_read+0x11/0x20 [ 382.374398] ? rcu_is_watching+0x8c/0x150 [ 382.378551] ? rcu_pm_notify+0xc0/0xc0 [ 382.382435] ? vfs_parse_fs_string+0x1f8/0x2b0 [ 382.387027] ? rcu_read_lock_sched_held+0x108/0x120 [ 382.392035] ? kfree+0x1d7/0x210 [ 382.395402] ? ubifs_iget+0x1bf0/0x1bf0 [ 382.399383] legacy_get_tree+0x131/0x460 [ 382.403466] vfs_get_tree+0x1cb/0x5c0 [ 382.407279] do_mount+0x6f9/0x1e30 [ 382.410816] ? lock_release+0x9f0/0x9f0 [ 382.414815] ? copy_mount_string+0x40/0x40 [ 382.419065] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 382.424622] ? _copy_from_user+0xdf/0x150 [ 382.428769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 382.434311] ? copy_mount_options+0x285/0x380 [ 382.438802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 382.444340] ksys_mount+0x12d/0x140 [ 382.447977] __x64_sys_mount+0xbe/0x150 [ 382.451949] do_syscall_64+0x1b9/0x820 [ 382.455843] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 382.461207] ? syscall_return_slowpath+0x5e0/0x5e0 [ 382.466130] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 382.471143] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 382.476152] ? recalc_sigpending_tsk+0x180/0x180 [ 382.480905] ? kasan_check_write+0x14/0x20 [ 382.485136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.489982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.495167] RIP: 0033:0x457099 [ 382.498357] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.517251] RSP: 002b:00007f72a0a6cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 382.524968] RAX: ffffffffffffffda RBX: 00007f72a0a6d6d4 RCX: 0000000000457099 [ 382.532233] RDX: 0000000020fdb000 RSI: 0000000020000380 RDI: 0000000020000140 [ 382.539499] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 382.546773] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 382.554036] R13: 00000000004d3210 R14: 00000000004c81c6 R15: 0000000000000000 [ 382.561301] Modules linked in: [ 382.564500] Dumping ftrace buffer: [ 382.568035] (ftrace buffer empty) [ 382.572035] ---[ end trace 5216b6f72996f8b6 ]--- [ 382.576833] RIP: 0010:ubifs_mount+0x1a0/0x66f0 [ 382.581447] Code: 49 89 c7 48 89 c6 e8 3f 09 0f ff 49 81 ff 00 f0 ff ff 0f 86 91 03 00 00 e8 fd 07 0f ff 48 89 d8 48 89 da 48 c1 e8 03 83 e2 07 <42> 0f b6 04 28 38 d0 7f 08 84 c0 0f 85 1e 19 00 00 44 0f b6 2b bf [ 382.600400] RSP: 0018:ffff88018e0cf660 EFLAGS: 00010246 03:35:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f0000000640), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="dbc38fb1cc2f8852fb1767cf54c9177bb9bc639a8386756b3dfa0ed04d3d40c83289726ce0ca780e65ca3dbb169424e949b05810302d4262e31e7c70042155b0982c02ddd5c439684a86249db62db2bc9425f57388b96a4720217b425fe5f9b3171a0023445bea8c4be8f143875196", 0x6f}, {&(0x7f0000000100)="5b2b36b5ae67d617ed4aa075c59f5925b21e156671377958bcc24c25373556f3d655e2ac88570ee086693db2f18e", 0x2e}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000340)="af39826b41718cfbcc8175", 0xb}, {&(0x7f0000000380)="364b9d30754f2d92c1", 0x9}], 0x5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @ioapic={0xd000, 0x7fffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:36 executing program 6: readv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/36, 0x24}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0xff) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x1, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000440)={@local, 0x1d, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) r5 = dup(r2) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000002c0), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x0, @loopback, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x101442, 0x10) fcntl$addseals(r0, 0x409, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x7fff) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) [ 382.605856] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90004889000 [ 382.613193] RDX: 0000000000000000 RSI: ffffffff826dce73 RDI: 0000000000000007 [ 382.620493] RBP: ffff88018e0cfb88 R08: ffff8801b433c500 R09: ffffed003b6046de [ 382.627806] R10: ffffed003b6046de R11: ffff8801db0236f3 R12: ffff88018e0cfb60 [ 382.635130] R13: dffffc0000000000 R14: ffff8801baeeeb48 R15: ffffffffffffffea [ 382.642212] binder: 18462:18463 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 382.642919] FS: 00007f72a0a6d700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 382.658242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.664159] CR2: 0000000020fdb000 CR3: 00000001b524c000 CR4: 00000000001426f0 [ 382.667680] binder: 18466:18476 BC_FREE_BUFFER u0000000000000000 no match [ 382.671460] Kernel panic - not syncing: Fatal exception [ 382.678660] Dumping ftrace buffer: [ 382.678666] (ftrace buffer empty) [ 382.678669] Kernel Offset: disabled [ 382.694808] Rebooting in 86400 seconds..