0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 523.751441][ T26] audit: type=1804 audit(2000000246.086:11857): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir124039892/syzkaller.TiLzZ4/495/bus" dev="sda1" ino=16618 res=1 [ 523.840287][ T26] audit: type=1804 audit(2000000246.096:11858): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir124039892/syzkaller.TiLzZ4/495/bus" dev="sda1" ino=16618 res=1 03:37:26 executing program 2 (fault-call:5 fault-nth:1): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x18, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0xffffff1c}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0) 03:37:26 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = msgget$private(0x0, 0x2) msgsnd(r1, &(0x7f0000000000)={0x1, "830ea4bc1b82126bac60a60b372b2b3b55b9c19b6c9ddeb7"}, 0x20, 0x800) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 523.991043][ T26] audit: type=1800 audit(2000000246.096:11859): pid=26006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16618 res=0 [ 524.009502][T26082] binder: 26063:26082 unknown command 0 03:37:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4, 0x109000) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000140), &(0x7f0000000280)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6, 0x0, 0x6, 0x2, "d86bfefc69a14c5c4bc8993acd963758f3e94bf5d328ee999564bc6700a10f1546c692ae50cf288c6179a19ee57029c96ed9db1862a54880dd24eecaddb77795e8713b06cf0bfd989651e2a5a6010846"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x10000001, 0x0, "ac3c2024bfbf99ec50d31d9c7ee754aeb2440318837e4f76c50ef886f1433f0b335dc81634a3ee5d9ac38627d70118205d1dad05781e68ac8411859d5c0cb6e50bb5b89b3ee8356fa5015ef3e9615edd"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e48182246961bd40144a8269f0ee8dd9525d4425e2c4707a00f8dd47a5200b884282e4f90fe8cc7a3eff599b13d518d10"}, 0xd8) 03:37:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000002e008100e00f80ecdb4cb904021965000b007c05e87c55a11200e173000000000a000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x10001) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{0x20, '/dev/vcs#\x00'}, {0x20, '/dev/vcs#\x00'}, {0x20, '/dev/vcs#\x00'}, {0x20, 'cgroup.events\x00'}, {}, {0x20, '/dev/vcs#\x00'}, {0x20, '/dev/vcs#\x00'}, {0x20, 'eth0ppp1\x87vmnet1])%$'}, {0x20, 'mime_typeppp1eth1security@md5sum\'self.'}, {0x20, '#! '}], 0xa, "f80d865e72d1a658f99e86358b745ba5b925406dd588bd3a76b2eb55b757ea08870a673106f8649d00f2ecbbde273ef5de5d2b0d16bf684f4ae71a496dcc31a1d6b4eb8b6f4539e92395e331c73fa3f15d2dc5ecd22d93a4f4c101cc09525035ae362b7aae0d46759327f833a45ed4dc9964ec0214a44eed8f9847b8d53f6ff88fabab8968668521d61a1298116692"}, 0x120) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x63, 0x401, 0x7, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) 03:37:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)="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", 0x1000) r1 = socket$nl_crypto(0x10, 0x3, 0x15) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x8}) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 524.084926][T26141] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 524.101468][ T26] audit: type=1804 audit(2000000246.226:11860): pid=26026 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir124039892/syzkaller.TiLzZ4/495/bus" dev="sda1" ino=16618 res=1 [ 524.106750][T26082] binder: 26063:26082 ioctl c0306201 20000140 returned -22 03:37:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x3, {0xa, 0x4e21, 0x702, @dev={0xfe, 0x80, [], 0x1e}}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) gettid() r3 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 03:37:26 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e23, @loopback}}) setsockopt(r0, 0x0, 0x80, 0x0, 0x0) 03:37:26 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000440)={0x10, 0x2a, &(0x7f00000003c0)="55e330b2150bac3e73fd164102ee54fb92258ce772fa09ba539c273f35dab64a864bd6f3a64588f89992ae7e98e263080e6ca2cfdf0c574d0d4d9433dda084710984dd4d8a8afd506165d7bcd4f36abf98827d", {0x8000, 0x1, 0x38415262, 0xf, 0x7f, 0x8, 0xf}}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/216, &(0x7f0000000100)=0xd8) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x8000020000000006, @vbi={0x7, 0x6, 0x959, 0x72734757, [0x3a, 0x3], [0xb45f, 0x20], 0x1}}) fcntl$setpipe(r0, 0x407, 0x4000036926d4c) 03:37:26 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:37:26 executing program 5: r0 = syz_open_dev$radio(0xfffffffffffffffe, 0x2, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200000, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x80000001}) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000180)={0x990000, 0x8, 0x80000001, [], &(0x7f0000000040)={0x9a090c, 0x0, [], @p_u16=&(0x7f0000000000)=0x37b3}}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x3f, 0x0, 0x1f, 0x9, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={r3, 0x24}, &(0x7f0000000380)=0x8) setitimer(0x1, &(0x7f0000000280)={{0x0, 0x2710}}, 0x0) 03:37:26 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1a8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:26 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x0, r1/1000+30000}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x5}, 0x14) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)) r2 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000280)=""/97) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80, 0x4) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffdf4, 0x0, 0x0, 0x2400000000000900) 03:37:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000004003) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000008000002560b700fff9e0abda5c946fb921754f48aeaa04ff260b152595394c45345e60d897e10664ae6696bcfbb6e4259be4a31408ab170004000000000000d6ef9acae965b66a55c09d25ea6771d26aa2e3b280f15eefa9a3c5a7724986f38787cdf0449296c8329db6566a30f04d598c17b251abd23c9e85"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x487}]}) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x5, 0x20401) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x400080) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 03:37:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x2, 0x400) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x3, 0x0, 0x3f, 0x800}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r2, @loopback, @local}, 0xc) 03:37:27 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x2, r0, &(0x7f0000000140)={0x5}) [ 524.764225][T26315] binder: 26276:26315 unknown command 0 [ 524.802344][T26315] binder: 26276:26315 ioctl c0306201 20000140 returned -22 03:37:27 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x800) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000200)={0x7, {0x7, 0xfffffffffffffffc, 0x7, 0x8}}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000180)={0x6, "15c2a55b62f0f9245599d54db10bb8f968c65be588978410e1b57bc5984dbbe9", 0x1, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) sendfile(r2, r2, &(0x7f0000000000), 0xb0e) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 525.264535][T26267] device team0 entered promiscuous mode [ 525.270177][T26267] device team_slave_0 entered promiscuous mode [ 525.303533][T26267] device team_slave_1 entered promiscuous mode [ 525.324929][T26267] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.389652][T26405] device team0 left promiscuous mode [ 525.401102][T26405] device team_slave_0 left promiscuous mode [ 525.419314][T26405] device team_slave_1 left promiscuous mode [ 525.523274][T26404] device team0 entered promiscuous mode [ 525.528988][T26404] device team_slave_0 entered promiscuous mode [ 525.563251][T26404] device team_slave_1 entered promiscuous mode 03:37:28 executing program 3: bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x458, 0x118, 0x230, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000180), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x80, 0x1, 0x1}}}, {{@arp={@local, @multicast1, 0xff, 0xff, @mac=@local, {[0xff, 0xff, 0xff, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff]}, 0x100000000, 0x1d6, 0xffff, 0x64, 0x100000001, 0x5, 'ip6gretap0\x00', 'irlan0\x00', {}, {0xff}}, 0xf0, 0x118}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x522}}}, {{@arp={@remote, @dev, 0xffffff00, 0xffffff00, @mac=@broadcast, {[0x0, 0xff, 0x0, 0xff]}, @mac=@local, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x3, 0x1, 0x5, 0xffffffffffffffe1, 0xb3d, 0x7, 'ipddp0\x00', 'bpq0\x00', {}, {0xff}, 0x0, 0x252}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x6, 0x4, 0x3f, 'queue1\x00', 0x6}) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x90030000000000, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 03:37:28 executing program 1: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x57}) gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 03:37:28 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x2}) 03:37:28 executing program 0: r0 = socket(0x18, 0x2, 0x0) write(r0, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200003050013800100", 0x22) 03:37:28 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 03:37:28 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1a8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 525.584318][T26404] 8021q: adding VLAN 0 to HW filter on device team0 03:37:28 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x3}) 03:37:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x100) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x200002, 0x0) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @remote, @rose}, &(0x7f00000001c0)=0x1c, 0x80800) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={r2, r3, 0x5, 0xb6, &(0x7f0000000200)="b9ef5b5f1894db2decb22ef71c3be1fee478bc5996e24dcbed50ad878a97dc51b8784b10351a98952bd487abbbd6dedc86052e95fa08edcf47ccaf3cdb53137ca498983271f3bafe402c5b4fb0f52100bcdf63f3d06536de3f2835260e4455a83b1887a6826be974899020c0ade401c7fcb2af790882c6de2523c12ee1e747bfd771470fccf9a95e1d77bc1f86b948ab47e1595678c2437d9b3d91e2f933e698a53320f35abf9c9b80750c3335c4c4b65e534646b127", 0xffffffff, 0x4, 0x4, 0x0, 0x0, 0x2, 0x0, 'syz1\x00'}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r4, 0x4038ae7a, 0x0) 03:37:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3ff, 0x800) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="200000003d0000007c3aa098794c87eb6d1c00df1281270215ae830d2916291d4b75947c44ca4e07502d78fcec7c590dd2e25b01bf8470d0a40cab4080858b1965d9ee6cfa4ea52e8b5c5311803eeb286b25d54c165c540f0bb94e1410e759c36571bbdf7cccc1c105c79a316c1ad70de3cb628b80e0b275f1afae759997b15df04eab41f363c92c07b5a7d40535c77b2567e1e468aa0fa452a5907b66d79ecb24bb9713040df0303123431fc5c905fef57fc4c8dc78a244362072e3e862f5bd8ee63222b0344df4dc1db2f1d2"]}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 03:37:28 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000340)={0x0, 0x8}, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000002c0)={0x7, 0x40}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000001c0)=[{r2, 0x7ffc}, {r2, 0x1000}, {r2, 0x43}, {r2}, {r2, 0x420}], 0x5, &(0x7f0000000200), &(0x7f0000000240)={0x9}, 0x8) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x2) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000080)=""/193, &(0x7f0000000180)=0xc1) tee(r2, r2, 0x6, 0x1) [ 525.784778][T26415] binder: 26414:26415 unknown command 0 [ 525.878586][T26431] binder: BINDER_SET_CONTEXT_MGR already set 03:37:28 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x4}) [ 525.945848][T26431] binder: 26414:26431 ioctl 40046207 0 returned -16 [ 525.970228][T26415] binder: 26414:26415 ioctl c0306201 20000140 returned -22 03:37:28 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) fsync(r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x20, 0x10001, 0x200, 0x1, 0x10000, 0xfffffffffffffffa, 0x100000000, 0x3f, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r2, 0x9}, &(0x7f0000000240)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 03:37:28 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000000080)) 03:37:28 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x104, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x20000044) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240)=r0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)="45432bf3d1e6b96ebaf1d9fb44e9b930396c4e80482004ea9bb3380685f3c130dc3c7219976b27f58fe23bbe8b6384a08616c6bef9a72d4cdac7789907452747c069900b83ec735fa78657deb610b40d7aebdc800c5debb6343f7d026e2c20b30fa30bfbba8c3c7ca079cbec722832321349204a1398c5b9adb72ad752f2a1d3ad5ffad276865c37ac7f72180a2cbd3a1b0a038e463be416f45526d215fe97da11967a9107057e24e491ecb9f49146d574a17aeeb68d706978049a5fc6e0b616dc68a4c0fdd7d9ce727b1212b73d2f258f28bdadb5215b4953266b1821614bb336bd9c25c4157111da60529c", 0xec}, {&(0x7f0000000380)="a95a33466ca8ef9eaf328a12cbc163204b8a2688948dd0e9a6ac0a06886be845752726410f6b8d3f4f5108bcc64cf27044c716be06f993313a05334964da0d9f7c06bb18f81ec50022fd7cb1828a3aa05ff49a926b5792da9e3f94c6b8c66295d83de16a4ceae7df43c5de649706eb36c251d094189993036e221db407938eeccd97106b07ae6a0644", 0x89}, {&(0x7f0000000440)="f110335714195a09f8bc5aa892b25716484e0e12288cf60b41b3cfdcd5faeffc0e559c0fb76e01a2a9c2672f3fd690f0a7482232cc9ed54cd8e44e4b2f4b612d743269e358e89df1abe55ff942c4b1258210e665e3d44bad", 0x58}], 0x3) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) sendmmsg$alg(r0, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)="f42b5a3f862a88eb0e86dca4c7db968cff2a26f91f56d187d7b8e7424890c5fc4a49db79212c123c253c78fe6841a6", 0x2f}], 0x1, 0x0, 0x0, 0x20000044}, {0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)="c7b89c3101435a7a4250178241d889a7acf57cc664ae6d18a0fa3fd2bbb2624430d03807f4e4aa0876db4d80061f4eda1b68d53b32a4559a359fdaa980c01b702fa051dc399d7d9f225a2339fa54bec909092a0273d65f95263a25e35494d4dd2adf18029fe9a783592bf11d8e7655d3921c018f2d262f845c51ceb31e09a989a24a82ae06ad1d637f5393", 0x8b}, {&(0x7f0000000640)="d54170a9d1076521caeba9164d9f9c649bf6a208e80544ab19a6f9ef887874b1b91342ce1d231f25c5d201edfd5faef4d81dab124b32e3edead63c0bb0a1d49f52d46679bb2f35734f3fd073e37d7c555c504641c94c1a70939ffdbab597678ecec4aaed51c2d324", 0x68}, {&(0x7f00000006c0)="333fca7a5561072726ee5c941f6a99c6e6800c66f8b7af4863dd6047735535db94eda4e1ca82e3dbf26124b5025ea0a3b2c60036dcfeec6bb865c5d8dd8a56127d63b9684c9576015d7741c872f4a6a2f166269cf004e386eda64a706ad783d26bbefe4799d1c584220248c874f95d12d8bdaf1df4f3c978bc4a70947988e7171fe4b780234e93b5fc69ec760d6af562c1e8d49e55ccfb5a37631b420a1b4080335b26ecc0356c52dbb17f716b66c95201075ed3f479b450ab01a460ed3dcbfd1037d78687d946094e10d1f3fcfbbfc2fefb52fbbdab461f4ebb0d99122cc0672cb3f8c3066cf1aab351a07d80a29aa0fee715e6", 0xf4}, {&(0x7f00000007c0)="ee38edafac13b25850233cc57ecd71a30f57861950f9a6923349b575687df66fc412cef73076064f7752bb88852ac8b6d97093d18ba1b2db5f637ffc2bbe6e49be727f61", 0x44}, {&(0x7f0000000840)="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", 0xfb}], 0x5, 0x0, 0x0, 0x4884}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)="88be9ad2e27bf938ac0ca22c87e2c835cef388d426014be0c2ef34df56e97224a605645bcda7d8568f995e0ce2c4c42e7982661be300c0aec18ecfca59b41d701c249e6956d6314c1f52e155616da5dcfe769c1cdf95957c261f08376c4500c773cb010d85724a91fb630759989e4bea41f6830690437ca959a2b4ef4c700e6179c5a5994f2f1465c02702", 0x8b}, {&(0x7f0000000a80)="4a61dfd9421a16ee88b6dba6aee99c6f0f68ccf7544c6218e318f965506f28a0a185f4bc40cdd6f7f6de6f21774896069bb74cfb2c222811be4db94c7178f336a6fc4e7a9d1f9891b8bc7fb02237517fea0382fe6ea33ad68ea67b82a3211586baf13d1cdec412dab46e0e1fb89694c9a9", 0x71}], 0x2, 0x0, 0x0, 0x4000044}], 0x3, 0x10) prctl$PR_SET_FPEXC(0xc, 0x0) read$FUSE(r0, &(0x7f0000000c00), 0x1000) r3 = syz_open_dev$dmmidi(&(0x7f0000001c00)='/dev/dmmidi#\x00', 0x3, 0x400) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001c40)={'team_slave_1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001c80)=0x0) fstat(r3, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000001d40)={0x2, 0x3, r4, 0x0, r5, 0x0, 0x0, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000001d80)={0x6004, 0x4000}) perf_event_open(&(0x7f0000001e00)={0x2, 0x70, 0x8, 0x8, 0x1, 0xfffffffffffffffc, 0x0, 0x8000, 0x858, 0x4, 0x0, 0x800, 0x0, 0x4, 0x57, 0xd4, 0x3cfd, 0x4, 0x3ff, 0x100, 0x0, 0x1, 0xfffffffffffffffe, 0x7, 0x2, 0x1000000000000000, 0x20, 0x88f, 0x4, 0x3, 0x5, 0x3, 0xe5, 0x7fffffff, 0x80000001, 0x7f, 0x4, 0x22, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001dc0), 0x1}, 0x20008, 0x3, 0x7, 0x4, 0x1, 0x8001, 0x7}, r4, 0xfca2, 0xffffffffffffffff, 0x1) r6 = add_key(&(0x7f0000001e80)='rxrpc_s\x00', &(0x7f0000001ec0)={'syz', 0x2}, &(0x7f0000001f00)="e61a71e29993b2f16f05674fac58d9f46723d33a4f394734e84913b15835a6b8f18eebf02fe60972c23b0d173392d80c5ffdebc3e8cdde66a1750d933f94a8848abb93a9800e7d421c970644f3beeb3e00b4e993e137f5dd3a0ba12d381bd55d3466248a95f9aae8ed0a1f9418e6634e99", 0x71, 0x0) r7 = add_key$user(&(0x7f0000002340)='user\x00', &(0x7f0000002380)={'syz', 0x2}, &(0x7f00000023c0)="507ebf9dec6aaa223a02ab3db2ac4d1a72c08f0bf7df93e0ff40546a008fcdfcb3c5036d1516cccecdcc9644897cc01b0e9f6783258d58fbf4b3bfb6c890a634e6a60e9d92d44537182187fe5a0cb5c1608f0941aa510b610ab845cf8fd84fc36fc00be785a59f0a0d5f9ea9571c70eea14d4dcaa277bf68520cab487880d6e18b908f23cde2ea93c3f1c99d5dca3dff808af639e585de", 0x97, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r6, &(0x7f00000022c0)=[{&(0x7f0000001f80)="0506e90ae90c192ecdae8c319c5fd171de16577a28b020c95b20767381e1bb9132c780584b694dc9ca2bc11fee0355da5d3a433a551f1d0a066131ddc9b4e7e01bb71d066a86daa76a962add128665d839d4bf30e64a68f0d3766069d442fbcc870e1099dca733b937d692c17a80ea3d9988bdd35d9aa00e9dfd6586530212001c653280798343e3d86b1ad5245d28906fef0a80cd55fd0077d326afd08697aef55c77addf29c6a862", 0xa9}, {&(0x7f0000002040)="febc64c4f10294da0578b8f812af9a30edc88921497f56c191658c94b0950214181cb613a890f7e3ef1767c76b83b05b585645b886e6b3bef181d59a15328ab59e2b0fe7b7f02e95901ec9176fa83545053d29cc1717a0da3cc5167656025b57292d437eb43a2b2557829c8f2f44c31fcde8246e94b1ecd492bd2172c7", 0x7d}, {&(0x7f00000020c0)="a9b4f7faaa7c5f4b68f659566e5a5b49c7d94953daeff6253036e0149c2bf219fc224ac529831a35635985b23da554198d0c1de629184524558482605688aa87d8f4fccf16395e2a6c0751c5e99f08156633a6d301e9db5af2f8fdc769ec209deb90fcb49868de7a3d4329c832010e921b44006887f6f3d3b3a1df8ce960253352d5b1a6f1924ba6a82db3", 0x8b}, {&(0x7f0000002180)="0bf4f6b1e54e57d33e7293cf933ba4646e060a9733188d1c73e7663f629791678e4e258a03d0848a298a96e0876d2ebb3009354dbd688cc036ec06256a1eaec68bbf5b571c9dd3a81f159f03e1042486dbc71d129c26b8db", 0x58}, {&(0x7f0000002200)="a2678b84ea42efffaeb8fe115ebb39a39a9f34957337820a0be9d958289323c96ff82d14f4b8f16107e95d1e351258f651e36376027242ad157378ee49911cd41d6cee6d46339dfa81cc4fcb138e03417c885361cad7f1785e7dfcfc81926ed4754ede80cdfb2c6994852e969692aa94bad01bf1aabef718bb0e030d45243079100303289ac9ea51d271176bb66f480018ea935e5cde2119811c393c4726da1d1b92b20349caf9764ea138b5012c274ddce6eaed911a8675", 0xb8}], 0x5, r7) ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000002480)=0x100000000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000024c0)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002500)={0x0, 0x8000, 0xffffffffffffffff}, &(0x7f0000002540)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002640)={r8, 0x8c, &(0x7f0000002580)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0xcd9, @mcast2, 0x2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}]}, &(0x7f0000002680)=0x10) setxattr$security_smack_transmute(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)='security.SMACK64TRANSMUTE\x00', &(0x7f0000002740)='TRUE', 0x4, 0x3) inotify_init1(0x80000) write$binfmt_script(r3, &(0x7f0000002780)={'#! ', './file0', [{}, {0x20, 'user\x00'}, {0x20, '\x91\'*(user\x7ftrusted'}, {0x20, ']]'}, {0x20, 'user\x00'}, {0x20, '/dev/dmmidi#\x00'}], 0xa, "baacc9beac65bd4ed84b83518742e790a19b44dafd3184203f72d44892e562b8ae47d8eb63ae298a2d4f2ad92bf210a4eecaaa3264c7e3f03ff1ad7efcb536db3b3673a1b44e03"}, 0x81) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000002840)={0x6278, "a8c31c3ee528a53af31a28d0b11a3257da13e5f3e98f8e80da2a7224142a5ffe", 0x1, 0x1}) unlinkat(r0, &(0x7f0000002880)='./file0\x00', 0x0) 03:37:28 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x5}) 03:37:28 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x5, 0x2, 0x0, 0x9, 0x0, 0x0, 0x20200, 0xe, 0x100000001, 0x60ef38b7, 0x7, 0x7fffffff, 0x4, 0x4, 0x80000001, 0x100000000, 0x9, 0x5a2, 0x5, 0x9, 0x81, 0x3, 0xffffffffffffffc1, 0x80000000, 0x9, 0x100000001, 0x2, 0x80000001, 0x80000001, 0xfffffffffffffffa, 0x40, 0x6, 0x20, 0xf6a, 0x2, 0x80000000, 0x0, 0x2, 0x6, @perf_config_ext={0x997}, 0x800, 0x1ff, 0x225cf910, 0x6, 0x8, 0x400, 0x3057}, 0x0, 0x8, r0, 0x1) munlockall() r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x10000, 0x3, 0x2, 0x0, 0x2, 0x0, 0x8, 0x6, 0x6, 0x5, 0x9, 0x3, 0x0, 0x1f, 0x0, 0x4, 0x80, 0x5, 0x1, 0x10001, 0xfffffffffffffff4, 0x40, 0x8c, 0x3ff, 0x2, 0x4, 0x4, 0x9, 0x5, 0x3f, 0x4f, 0x9, 0x38, 0x8, 0xab6, 0x0, 0xff, 0x1, @perf_config_ext={0x7ad, 0x4}, 0x80, 0x7fff, 0x3f, 0x6, 0x428c, 0x3f, 0x89be}, r1, 0x7, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='$!\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x40, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000000200)={0x18, 0x0, 0x6, {0x9}}, 0x18) 03:37:28 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 03:37:28 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x180, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:28 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x20000) accept$alg(r0, 0x0, 0x0) readahead(r0, 0xfffffffffffffeff, 0x100) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)=0x80) 03:37:29 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x6}) [ 526.498563][T26557] binder: 26556:26557 unknown command 0 [ 526.516651][T26557] binder: 26556:26557 ioctl c0306201 20000140 returned -22 03:37:29 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x3, 0x1}, {0xfffffffffffffeed, 0x2}]}, 0x14, 0x3) sendto$unix(r0, &(0x7f0000000000)="aed1ca674528377968b3c08c6384345c149baf9719447a9585ecb495969362c4e32ee2f8f2fcdec3ec463b39a336d72a84b08a006f472ee75859ce95d0c18cfaf49842994a99f75b93bfd2e770055d197f39b24211f8c8242d64a6132fe3dcbc67367245ead09c05bb0a0a78469f2a9072bde74e974b932d0710680df593b3d2fa8d57763d47fc0b0fbec55761a0b8bbf73e3247cf0beeaabeb8742ec93707ec51eb1a8d30b0f6d410bd19a07e3d3e4b7ad6d17aca1b0df923862cd4054fb46a", 0xc0, 0x8004, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xc7, @bcast, @bpq0='bpq0\x00', 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000002c0)={0xf, 0x3, 0x6, {0x101, 0x627, 0xffffffffffffffe1, 0xffffffffffffffe7}}) [ 526.581301][T26641] binder: BINDER_SET_CONTEXT_MGR already set 03:37:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) [ 526.661673][T26641] binder: 26556:26641 ioctl 40046207 0 returned -16 03:37:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x800]}) 03:37:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x100000101802) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'uueue0\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\x00\x00\x00\x00\x00\x00\xff\x7f\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @addr={0x0, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0x60) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x9, 0x103000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000180), &(0x7f0000000200)=0x14) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x8040, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x100, 0x4) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000000)={0x1, 0x1000003, @stop_pts=0x3}) dup2(r1, r0) 03:37:29 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x7}) 03:37:29 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r2 = memfd_create(&(0x7f0000000580)='/dev/binder#\x00', 0x4) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10002, 0xeffffdef) sysfs$3(0x3) close(r1) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x7ff, 0x7ff}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={r4, 0x2}, 0x8) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)) 03:37:29 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x180, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$KDSKBLED(r0, 0x4b65, 0x9) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 526.846986][ T7764] binder: release 26556:26557 transaction 566 out, still active [ 526.874117][ T7764] binder: unexpected work type, 4, not freed [ 526.908672][ T7764] binder: undelivered TRANSACTION_COMPLETE 03:37:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) 03:37:29 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x1a0}) 03:37:29 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0xc, @sdr={0x31435750, 0x8}}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x2, 0x8}) [ 527.042647][T26703] binder: 26702:26703 unknown command 0 [ 527.094847][T26818] binder: BINDER_SET_CONTEXT_MGR already set 03:37:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) [ 527.139499][T26703] binder: 26702:26703 ioctl c0306201 20000140 returned -22 [ 527.144961][T26818] binder: 26702:26818 ioctl 40046207 0 returned -16 03:37:29 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x40, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x4, 0x7, 0x8000, 0x6, 0x1}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x8}, &(0x7f0000000200)=0x8) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x0, @sliced={0x3, [0x7, 0x4, 0xffffffffffffff80, 0x1ff, 0x0, 0x3, 0x4, 0x400, 0xa, 0x7, 0x4, 0x9, 0x401, 0xdb38, 0x7, 0xe724, 0x2, 0x6, 0x9, 0x401, 0x5bbe75d9, 0x200, 0x5, 0x8f, 0xeeb, 0xeb8, 0x5, 0x40, 0x100000000, 0xd0c8, 0x8, 0x81, 0xe9, 0x6, 0x9a7a, 0xf, 0x796, 0x5, 0x8739, 0x200, 0x7, 0x5, 0x7, 0x8, 0x7fff, 0xfffffffffffffffb, 0x40, 0x101], 0xffffffffffffffff}}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x1f, 0x0, 0x10003, 0x9}) r4 = shmget$private(0x0, 0x1000, 0x300, &(0x7f0000ffc000/0x1000)=nil) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000003c0)={0x7, 0xb, 0x4, 0x80000, {}, {0x3, 0xf, 0xffffffffffffffe1, 0x8, 0x4, 0x7, "1b65eca4"}, 0x5, 0x3, @planes=&(0x7f0000000380)={0xf3e, 0x401, @userptr=0x6, 0x2}, 0x4}) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x1000) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={r3, 0x3}) 03:37:29 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x300}) [ 527.186160][T26824] binder: 26702:26824 Release 1 refcount change on invalid ref 1 ret -22 03:37:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8111000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20100) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000500)='ns/pid_for_children\x00') r3 = socket$packet(0x11, 0x0, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f69746d6f64653d3030303030303030303030303034303030302c7573657207e1643d0000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x3) syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)) syz_open_dev$vcsa(0x0, 0x7ff, 0x280801) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000003c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x10000000000000, 0xfffffffffffffdb3) 03:37:29 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x180, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 527.352532][ T7764] binder: release 26702:26824 transaction 569 out, still active 03:37:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @sliced={0x7, [0x4, 0x1000, 0x0, 0x5, 0x4, 0xfffffffffffffffc, 0x95, 0x8, 0x7f, 0x1f, 0x8, 0xfffffffffffffc00, 0x2cb25d52, 0x5, 0x100, 0x1, 0x1, 0x4, 0x200, 0x101, 0x1, 0x80000001, 0x236e, 0x3, 0x0, 0xffffffff, 0x43, 0x81, 0x401, 0x80000001, 0x9, 0x6, 0x101, 0xec91, 0x9, 0x1000, 0x8, 0x8, 0x0, 0x10000, 0x7fff, 0xee, 0x7fffffff, 0x80, 0x9, 0x9e30, 0x5, 0x38], 0xfffffffffffffff9}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) [ 527.477864][T26850] binder: 26849:26850 unknown command 0 [ 527.534223][T26858] binder: BINDER_SET_CONTEXT_MGR already set [ 527.543833][T26850] binder: 26849:26850 ioctl c0306201 20000140 returned -22 [ 527.603842][T26858] binder: 26849:26858 ioctl 40046207 0 returned -16 03:37:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x500}) 03:37:30 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xd4, 0x2000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x7ff, 0x0, 0x201c, 0x10000, 0x5, 0x8, 0x80}) r1 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 03:37:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000074b000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x100) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0xe1, [], 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000380)=""/225}, &(0x7f00000001c0)=0x78) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x3], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000180)="9bea77e53e5f") ioctl$KVM_RUN(r2, 0xae80, 0x0) getpid() perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x9f42, 0x3949, 0xff, 0x2, 0x0, 0x1ab, 0x10, 0x2, 0x7ff, 0x401, 0x4, 0x800, 0x8, 0xfff, 0x2, 0x5, 0x1, 0x7016, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x2, 0x8001, 0xfffffffffffffffe, 0x8, 0x7, 0x7fffffff, 0xe10, 0x81, 0x1ff, 0x101, 0x0, 0x1, 0x8001, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x2}, 0x20, 0x81, 0x7f, 0x8, 0x2, 0x1, 0xf58}, 0x0, 0x5, r3, 0xb) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r5, 0x0) 03:37:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "02000009000000000000c0000226cc573c080000113724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = gettid() r5 = dup3(r3, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000640)={[{0x4, 0x10001, 0x7ff, 0x7fffffff, 0x7, 0xfffffffffffffffa, 0xffffffffffff567d, 0x101, 0x6, 0x9, 0xd06, 0x80000001, 0x8}, {0x50, 0xaf, 0x81, 0x2, 0xff, 0x6, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x7c936d12}, {0xba1, 0x1, 0x4, 0x9, 0x1, 0x200, 0xf1, 0x83, 0xfad3, 0xfff, 0x100000000000000, 0x1d9, 0x5}], 0x8}) getpeername$netrom(r1, &(0x7f0000000180)={{0x3, @rose}, [@bcast, @netrom, @remote, @bcast, @bcast, @netrom, @null, @default]}, 0x0) tkill(r4, 0x401104000000016) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x81, 0x20, 0x7, 0x80000000}, &(0x7f0000000400)=0x18) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000080)={0x7fff, 0x4, 0x1, 0x10000, 0x5}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @remote}}, 0x0, 0xfffffffffffffffe, 0x100000000, 0x0, 0x68}, 0x0) write$UHID_DESTROY(r5, &(0x7f00000004c0), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000300)={0x3ff, 0x0, 0x5, 0xffffffffffff6438, r8}, &(0x7f0000000340)=0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r11 = fcntl$dupfd(r6, 0x0, r10) ioctl$KVM_GET_SUPPORTED_CPUID(r11, 0xc008ae05, &(0x7f0000000580)=""/180) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r11, 0x28, 0x6, &(0x7f00000000c0), 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x100, @local, 0x7}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x10001}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}], 0x64) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f00000003c0)={r9}) 03:37:30 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 527.845721][ T7764] binder: release 26849:26850 transaction 572 out, still active [ 527.866067][ T7764] binder: unexpected work type, 4, not freed [ 527.899434][ T7764] binder: undelivered TRANSACTION_COMPLETE 03:37:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000001c0)={0x2, 0x24, 0x4, 0x998f}, 0x6) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020800}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@upd={0x110, 0x12, 0x104, 0x70bd2a, 0x25dfdbfb, {{'lrw-camellia-aesni-avx2\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x53ac}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x80000001}, {0x8, 0x1, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x20048004}, 0x4804) 03:37:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x600}) 03:37:30 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000)=0x20000000, 0x3c) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x28102, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) recvfrom(r1, &(0x7f00000003c0)=""/173, 0xad, 0x10102, &(0x7f0000000540)=@hci={0x1f, r2, 0x3}, 0x80) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) syz_open_dev$video4linux(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000180)=0x1b, 0x4) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[]) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000005c0)=@srh={0x67, 0x8, 0x4, 0x4, 0x7fffffff, 0x50, 0x1, [@mcast1, @remote, @empty, @mcast2]}, 0x48) [ 528.015556][T26889] binder: 26887:26889 unknown command 0 03:37:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x700}) [ 528.072908][T26889] binder: 26887:26889 ioctl c0306201 20000140 returned -22 [ 528.154435][T26907] overlayfs: missing 'lowerdir' 03:37:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 03:37:30 executing program 3: socket$pppoe(0x18, 0x1, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000500)={'NETMAP\x00'}, &(0x7f0000000540)=0x1e) r0 = getpid() r1 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x1, 0x200) write$FUSE_STATFS(r1, &(0x7f0000000400)={0x60, 0x0, 0x8, {{0x1, 0x80000000, 0x1ff, 0x7, 0x8, 0x400, 0x5, 0x1}}}, 0x60) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x440001, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) syz_mount_image$btrfs(0x0, 0x0, 0x4, 0xffffffffffffffe1, 0x0, 0x220000, 0x0) syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000c40)="df8481a7b289330904e020bd3c90409e74ec10fbb525418617cf20f092d1687d9d4dd907d008acd357b230a7f586fee041dee0ae0e2c5d7b7f9fc90209d98578d809809c36dd5482d6bdcc8de06ea00cf043078b", 0x54, 0x1}], 0x0, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2fd4650000000000009113daffd7da45e7763c2a400ed6c1ec94e619238f2efd29273b9b0fce2dbeb34c3948e39295b055eeffffff7f4061cd506664b2eca94988dcbe"], 0x0, &(0x7f00000002c0)='gfs\t\x00\x00\x00a\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x48000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9abea03ef71344b294bf3e6dcf0823e2398182392e0dcc7d97e09edef61c00855c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a2480fffffff9193bde7e992f57af46c66e464617c08f2142109cc4965a2d8baa9f31a92c149e6cb208d567224e8c76d78eb40ade6fc806407265a87a46913f9b34419b4d28558920348dc892b6d53d571f4451be7843a989151fbfb5e660dfeec95a5cebc03ab3f76df7cbcb95e33481cb3f598ba99f6ac41655376cfc93320cd9662ff3827da4a48b02ef8c97f0e50021023e174d32364262590401306507b28031a562f4f3eeed455a55ae4927663980867131dfc5"]) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000480)) sendmsg$rds(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x40000}, 0x10) recvfrom$x25(0xffffffffffffffff, &(0x7f00000007c0)=""/212, 0xd4, 0x40, &(0x7f00000003c0)={0x9, @remote={[], 0x0}}, 0x12) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa00, 0x0) 03:37:30 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:30 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x3f00}) 03:37:30 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8000020000000006, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 528.524276][T27003] binder: 26939:27003 unknown command 0 [ 528.530235][T27003] binder: 26939:27003 ioctl c0306201 20000140 returned -22 [ 528.603162][ C1] net_ratelimit: 26 callbacks suppressed [ 528.603179][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.603542][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 528.608909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.626993][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 528.633632][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 528.639933][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 528.647062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 528.657561][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 528.664282][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 528.670353][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x80040, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffff9c, 0x0, 0x9, &(0x7f0000000040)='/md5sum#\x00'}, 0x30) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000003c0)=""/183) write(r0, &(0x7f00000002c0)="84aff77b5a6170f5b336ff3b16fcc3632c291071c17d57066ef9ba1b9d385db4795c9a061e5c40af45a6f0eb2d751736fd8b2fc04ca01e466d141fcc05285938bb8ac48e341efc0c3ff7d0654202bdf8225a3b9c4059d6cdf29bc8878559720909f90949e201eb8118710f6901fd48e195e5e0541f8c601c9ff745f32980a30ce14efe4b719be935722815510ac0a7211b6594fd9a9f53c8e3ad2203c112de7dedfbde5d6850287386b2c5fbe1399050d67ae3cba7fe67ff546949c3fbf1f00df540f56f511df0f9c7220af06c131b", 0xcf) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @rand_addr=0x200}, 0x7fffffff, r5}) r6 = getpid() tee(r3, r1, 0x8, 0x2) rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100)={0x26, 0x0, 0x300000000000000}) ptrace(0xffffffffffffffff, r6) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) setpriority(0x1, 0x0, 0x0) 03:37:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x4, 0x1) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000040)={{0x0}, &(0x7f0000000000), 0x11}, 0x20) r3 = memfd_create(&(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) io_setup(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r3, 0x409, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x13, r3, 0x0) getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000100)=""/147) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x40000000, 0x0, 0x0) fcntl$getown(r4, 0x9) r7 = syz_open_dev$mice(0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, &(0x7f00000002c0)={0x8928, r8, 0x10001, 0x1cee2f82}) 03:37:31 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="e3"], 0x1) write$binfmt_misc(r0, &(0x7f0000000440)={'syz1'}, 0x1200e) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000001c0)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2343, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500ffffff00000d3a000000000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x185) 03:37:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x4000}) 03:37:31 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) socketpair(0x9, 0x3, 0x91, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400040400000e823fe8f68c"], &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0xfffffffffffeffff, @rand_addr="ba8536886b9a6767b9f8915ba323d396", 0x7fff}}}, &(0x7f0000000200)=0x84) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$RTC_UIE_ON(r0, 0x7003) 03:37:31 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 529.016449][T27047] binder: 27045:27047 unknown command 0 [ 529.050131][T27058] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:37:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x1000000}) [ 529.067034][T27060] binder: BINDER_SET_CONTEXT_MGR already set [ 529.099135][T27047] binder: 27045:27047 ioctl c0306201 20000140 returned -22 [ 529.122077][T27058] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 03:37:31 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x6000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000440)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r2, 0x820, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe4b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, {0x8, 0x100000000, 0x4, 0x6, 0xbe91, 0xffffffffffffff80}}, 0xa) r4 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000), 0x1) ioctl(r4, 0x81204101, &(0x7f0000000180)) [ 529.178472][T27060] binder: 27045:27060 ioctl 40046207 0 returned -16 [ 529.199773][T27139] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 03:37:31 executing program 3: gettid() socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/ptmx\x00', 0x8000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/uinput\x00', 0x802, 0x0) ioctl(r1, 0x100000, &(0x7f0000000880)="94e73c65202de79fb4687f2841704e619c84976f29d6e87c1cdac6f8127c32850f3139f3225be6146ea756c7e1837807c56e63712f9faffb85bad1e6a7ede7cac1b460ad12170154bb777daab6619672b50359d64da22ff183499916c39412ec297785cf1646df8de6ac58a6ffceceb1949b08d703233a82f1e41d7cba16062f03754c14d174db43e1c9cb4cfc2055f4e0cec670e46305403804a37df7e3a0835c1b090870087fcc7406ba6d") r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000500)={0x7ffffffc, 0xfffffffffffeffff, 0x7, 0x80000000}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x8000000000000002) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x180) fchown(r3, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x6, 0x14cbddd4, 0x0, 0x0, 0x0, 0x3}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[]}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ftruncate(r2, 0x208200) clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)) futex(&(0x7f0000000080)=0x1, 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000280)=0x1, 0xfffffffffffffffd) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{0xffffffffffffffff, 0x10001, 0x101}, 'syz0\x00\x00\x00\x00\x00\x00\x01\x80\x00\x02\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00'}) 03:37:31 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x2000000}) [ 529.324144][T27139] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 529.380444][T27052] cgroup: fork rejected by pids controller in /syz0 03:37:31 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 529.433376][ T7764] binder: release 27045:27119 transaction 575 out, still active 03:37:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x3000000}) [ 529.532097][T27180] input: syz1 as /devices/virtual/input/input23 [ 529.680692][T27219] binder: 27217:27219 unknown command 0 03:37:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000280)={0x5775}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff00000008000000070800000001003339bd820500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000200)={0x7545, 0x0, 0x301f, 0x5, 0xfffffffffffffffe, 0x101, 0x2, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:37:32 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0xa, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x3, 0x2, 0x3f, 0x0, "52179c39e5055e9dbf5b23e3b9f5cae5803fcb020beefd5c6e79c08e219bb500768de1198416b6e75d1a38c8764529c116e9fa0c0d34ea823695c079ebdc49"}, 0xffffffffffffff90) close(r0) [ 529.734232][T27277] binder: BINDER_SET_CONTEXT_MGR already set [ 529.740320][T27277] binder: 27217:27277 ioctl 40046207 0 returned -16 [ 529.743885][T27219] binder: 27217:27219 ioctl c0306201 20000140 returned -22 03:37:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x4000000}) 03:37:32 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1bc}, 0x8) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], []]}, 0x478) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x80}, 0x1c) 03:37:32 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffd45}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0207000010000000010000002d0000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000206c067662c34128e0000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0xffffffff00000700) 03:37:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x5000000}) 03:37:32 executing program 5: r0 = timerfd_create(0x0, 0x80800) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/78, 0x4e}], 0x1) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x4) accept$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) mkdir(&(0x7f0000000780)='./control\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0x8001, 0x1, {0x1, 0x1, 0x0, 0x0, 0xfffffffffffffffe}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f6be6caa24eb) socket$inet(0x2, 0x3, 0x6279) bind$unix(r4, &(0x7f0000000280)=@file={0x0, './control\x00'}, 0x6e) mkdir(&(0x7f0000000940)='./control/file0\x00', 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000300)={'hwsim0\x00', 0xbf1e, 0x3}) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000000821abf29538b9598b91b9583314b2bd58a0301ebc45d8964508211251770d7b50c55bf07bba", @ANYRES16=r5, @ANYBLOB="000025bd7000fcdbdf250f0000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40090) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x7fe, 0x4) sendto$inet(r1, &(0x7f0000000800)='I', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007280)=[{{&(0x7f0000002200)=@in={0x2, 0x0, @dev}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12000, 0x0) [ 530.118483][T27412] binder: 27411:27412 unknown command 0 [ 530.183824][T27412] binder: 27411:27412 ioctl c0306201 20000140 returned -22 03:37:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x401, 0x200) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="a4", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) 03:37:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x2, 0x84) ioctl$void(r1, 0x5450) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x3, 0x627, 0x1, 0x1f, 0x3, [{0x6, 0x7, 0x4, 0x0, 0x0, 0x402}, {0x8e25, 0x9, 0x100000000, 0x0, 0x0, 0x4}, {0x3ddb, 0x77, 0x4}]}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000053c0)=0x24a6, 0x4) socketpair(0x19, 0x0, 0xc21, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@remote={[], 0x2}, 0xf, 'syz_tun\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 03:37:32 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x6000000}) 03:37:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0xffffffd8) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x37, 0x20000) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = dup2(r0, r0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x100}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="65580dfc75c4129141049e3863b849825cef0b7c74c491758b0a31d1ae3810fd0df613a0", 0x24}], 0x1, 0x0, 0x22}}], 0x1, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000240)={0x1f, {0xf8f0, 0x8001, 0x5, 0xffffffff80000001, 0x8001, 0x4}, 0x40}, 0xa) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0xfffffe9f) 03:37:32 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2, 0x1, 0x28, &(0x7f0000ffd000/0x1000)=nil, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r1}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x800000007fe, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = dup(r2) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 03:37:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x81a0ae8c, &(0x7f0000000200)) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000080)={0x0, 0x3, 0x7ff}) [ 530.546520][T27543] binder: 27542:27543 unknown command 0 03:37:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180), 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000340)='pagemap\x00') clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x48000, 0x0) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x36) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000002c0)={@ipv4, 0x0, 0x0, 0x0, 0x5}, 0x20) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0x7fffffff, 0x8, 0xfffffffffffffff8, 0x8, 0x100000000, 0x7fff}, 0x614}, 0xa) getsockopt$inet6_dccp_buf(r4, 0x21, 0x80, &(0x7f0000000100)=""/87, &(0x7f00000001c0)=0x57) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x202002, 0x100) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000380)=[0x7b, 0x4]) faccessat(r5, &(0x7f0000000240)='./file0\x00', 0x2, 0x600) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 530.592138][T27573] binder: BINDER_SET_CONTEXT_MGR already set 03:37:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x7000000}) [ 530.656459][T27543] binder: 27542:27543 ioctl c0306201 20000140 returned -22 [ 530.661804][T27573] binder: 27542:27573 ioctl 40046207 0 returned -16 03:37:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = shmget$private(0x0, 0x3000, 0x54000020, &(0x7f0000ffa000/0x3000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r3 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000080)=0xe8) getgroups(0x3, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee01, 0xee01]) sendmmsg(r0, &(0x7f000000da80)=[{{&(0x7f0000000400)=@sco={0x1f, {0xfffffffffffffff8, 0x0, 0x0, 0x10001, 0x5, 0x5}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000480)="a6c0c24f7abfc124ac2a6e42a046ee173b6f6883b7343b8fad2a987af1be72e58e72e03bd10ce4b3fafbda9ddcf4e25ea7668b03dd3cfa5116caf19c369f8c59dae866f674840f793a4f362f54338dec00e06fa8b26897d963e550e870febe2dce443bcca49ebddad87725b083c9b2a7d33b9fe7b1924b11c72beeeda0a66d37879fbfa2d90bf0fc9c6bcfb92a0c8ecb8793eed0065bff9dd9d6e33158e26b2c0febbe79", 0xa4}, {&(0x7f0000000540)="c0d5d2fbee80c20b4dd52dde9b5df9ffdf28b92f272806e0086b937eac46b10f9a2a347f3a2ed8edee8bb1da9e4ff6456c8038982d3ebd6280120624ea14321849d1c9a7996ffa0ee017bd4187bfb60fe3e337f02eaa32c4694e07135c9567eef7148667e9a9f76560dd94dbab5b75fa33001dacce419368de7da7a9d2425831f3eecb3611fc78a5434e64a8c723dc679c79b59b3a170e2e6654a55b7c62e8e34d5d4fdc1943d88854f9cf2689783f5b6cf5e127f49812fdf34b898f5a013f293f5a6cc7a559584450782335f491cb379c157f0e266a61cd0c51881a906f68bfdf913c4c3c6f39d93382187f4718b3f1", 0xf0}, {&(0x7f0000000640)="9dff86052ef24c3467f9ff8f9670670f80e60f4c205e9261ac918f500068", 0x1e}, {&(0x7f0000000680)="00a536a539f77bea019552d0", 0xc}, {&(0x7f00000006c0)="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", 0x1000}], 0x5, &(0x7f0000001740)=[{0xf8, 0x13f, 0x5, "816db531ea22077512f0e1e1b8ff6dbf943edcb1431cb77478f14df715ad1c196dfafbe4db77e7864a6bf0f58ed1e7e339e86d1c0d081389f7804f56c9fa96fcaad9baab979d03fc06fb92c829946f652b40e9858be2d2625573b4ad73950e2434b751b844f8fd64125f1f395a82068a4a1db48214a0df71d75cebc54395ffb32ce5cb843bcbe64bc825fec17717293812b1f8e3ac496248d9b38c79c7fbd511c2afd621a5f9ce0b617dd645e0f16838a0f5ecb97067eca4efc9abaa0b49744427f75a406e559cf61c09859a4ee483ba8ffd9c1e93d632aab6fcb31f7cbdc5175ef213"}, {0x90, 0x11e, 0x1, "aee37f99bb3cea9f67a782e4db7fe1c7bf7879e1148f417c29830340219ad5cc00bb9f5b0203e942dcc643a6508393a0f6d00480cd2d3cc3f0e1c3169f1fa7b4f55db04e44a9884d036f4e0b327e81c8725510362ad1bd8deda5c3aafc5fc5da4898ed5b818bdba2bc4500b940235c5a9ec435dcbc5606687a1b95f1f5"}], 0x188}, 0x9}, {{&(0x7f0000001900)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)="91e6b73a855638848d26125757af2d9595b3d7bb8e93b7f6eb237a64c2726cafec96d51e2273b34866a0f932ac3c5d34ec1771b8440c8285c908a1d573d1fa4d01a704c6503c14942e3c8d567821a5f621cc7600da7ce97e8c1906159b7f72613616e0ee032487d3baad855d14e5d5a798b74e67aaa933f85863b847449a627aefef962e6320baf1335aa6164a746a2b2fc63bd1e3d0c23ec9e546adcd742f219ad2c6d40aea6d41a74a4e7926572870178e8efe89429578fd20ee0dbc138427de4d4753a944216567e0bd3de3c5f0345b2b0f7e9fe0eeab0bba", 0xda}], 0x1, &(0x7f0000001ac0)=[{0x100, 0x0, 0x148, "929e27b9b9aee3f0997a7678f874cb7f59c812aa9e120452e3e8c94158a932ce240d20287ca8f9147954d4478d6ac17b0d756821524629406e6e83522c96b3fce6b5428e57e1d2da2c7f5aa90445159eda55a6a5424a8168a36929fc3c09e6972827da2ff6d784971e5c86dbf11b866c8b2753990d2158230697fb3ba5633546b118c88cb2a9aa74e70ec39b4c87cfac6d39fe2510bbe66a488e700da3773e59d63afe2836039a1ae5dc509fca0d5fe0fc05512294e8af5226207c40386db85ad26be1fbb1f7e9b0986ee568e11d17f8a3fd6ef5e31c40ce09a1bb75fdaa30177dbd2f055e7e01d5c2cce10ee62e"}, {0xe8, 0x112, 0x8001, "a4f1922f216bd48fbe44f1bf6fe74303e759cbdb67cbddb4d545773c4c4ed9c19dfb43a53537bb601cdeb1c945c6f9af93370eebe0f6353d721952a6fe706b698a8afe194af8ae20d1206580182072d85bc904dd08387042e66f83b1b33c709f625c17ff0bad90b96f469c9027346e4e094aeba8bfc204c2c2d29c45d0686b4e59e1dd1375a9ac7ee27f02c6a2b60cfbc2268ef29c4e59c016db3af8619540490530364e95ed70a6a0e63b8244a7fedb00d27c90284146faacadcf228304421eab2d8cb35f3c9b6e527e73c78b0a7bc926fbf8"}], 0x1e8}, 0x2}, {{&(0x7f0000001cc0)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000003000)=[{&(0x7f0000001d40)="f50394d0c501c967d86df06cf02f01c9d7621b7325ad16838ed67e2fa588c1556deb501b3c8cb820e009b90ad7f243381d0e152c2dfc9ca0ad63dc68bf263dd91d3358a96ed9f236f1241341023d7b2f5047d7f37b56de43da599c7be82a6aedc556b2b2f0f6ba7fc45f6970a234468cdef6cb0e6aa0283194a4d5ea15da558cca8a0758cc19e4af95791757184aa294da8ee612e3eb4f453ee4e2bf23a16f47d5f1b722e704d248", 0xa8}, {&(0x7f0000001e00)="7a7e155224a598340f03a4321ccb3cc2c0a4af357c6433c7c64d45288603ac4a6805fc0e", 0x24}, {&(0x7f0000001e40)="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", 0x1000}, {&(0x7f0000002e40)="0af53e1c9c70258967f26d7eb1ac7381ef80caaee3ace519ae584495ddd72445f5b39eea0618ec16a65cbfc944cdf1bf1c99a17f9aeee88b98fdfd22779d5fabb91a68b3cadadc5c76d6bdd1e3aa2df744212cf0ce7c358a789cc222e79567fd4f0140fb6a3378b6a310cf84651ca4aa3ced8fff319e96252a82dead8a0587e558faa93b42a63619d449769305a747ae1e3b1f75551406934d65d89737cfb2a1a99b554423b9a35c10e89e8507eb877d1ab8e833f11fa0a0a48733b27ba85a2dbd80ae36c3d52b5b21387a9453bf6d1dfb2d9196568940151326dfdcb87ab5", 0xdf}, {&(0x7f0000002f40)="e5ea48cfad3422f5498510862dc78a92c8147ee95506806de86cd140f84a9bc7a5c13f59ca7b2efd8cea7639131208bf1eac988def1bb6cf237e472d3acc9642f44b0a16b9ff6d532fea78da14aa559c1fb4bd2c91f92a2603d37c6dfd311bfeaa1cb8e41c0f306062547025e429e267dc4cb30e18b1a960df49d7a93a591e5b520a5c761f60805f80505762878db3fde89fee65c457a86cd78021a4891d7ce54793b135771e2e55736ff5fbb151a7758ce22d7e4e28af62636f", 0xba}], 0x5}, 0x7e22}, {{&(0x7f0000003080)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000003100)="2b8d915a05bb469d311b3bc0d5aae80a471831854450402c042e3e89402a006f7d4ab97df7d76aebcb6afa073f4104925c33e865c24a6a874b5ff33bf2d74196fb37637e368a8f3a392f697a4860a51aba4ae84260cb16b417649cc2f5d31e49791f9a1ea4a7aed3a3d312ebae506b05f93e1618ff730695d6cdb4c38fcb2391a7e1ba61cbd51d57d38b91bc52dab487a6ae77d5b94a4ad57f39f104ee1e218379bdd99880a317df91f54b2a29dae80a35b74190ceb8c4f55d287ba87d4152e8eeb8db7b6ab468351c4d1363", 0xcc}, {&(0x7f0000003200)="65e1819ac10f1c2b78ea0d54a66a6c0f2957bd09dac5fe6d34461ad086f1", 0x1e}, {&(0x7f0000003240)="433aa3ae40d1034e500607b6637a8e233dd466437d3567a71d929c6e8e8b80d3fec924b684879af42836a32018cf53244ced4f4b5a8dc6d332ab76eda87c4975c591504dcb5cb002239a1d9bb0da9748b515d64576abe8ef8e36e67056abbf75881bd70323bebe42b6e2899737c80fdcde8f7543649846ab07d7d2b9be2264b4a00260af31ca868a8b1e89b3af6935554ec9ec4b3af4bc8ba55cfa7c4e229438109036c1e238bd89291383", 0xab}, {&(0x7f0000003300)="7f75c6ff79f304b6d6344bb94d030dae3dcd1b06adf44f50c7", 0x19}, {&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000004340)="cfb525d7bcf7e6ce32eca8cbf5545d65e8e271295b6bbf88f13ddbf1413903594b85ca094a8305a621fb567af6489a710018284bc8b86a144842e21de9e66d3b5970a56b7141e9d9bcf99e2c7ee0065eef15838032cab91b1906d6f21e2ad51e0de62309a8e58f7880755dfbe4028316a9cf1b6d260ae0678723953ee6d96fb9cd2b80f85690a6cf89896425e004b092de953c55968ac05e49cc1d00269f9f36d0a0aad6d2c44d5d2ff9f07892f3ebc2", 0xb0}, {&(0x7f0000004400)="4665fcc00bebe050c8a681a1a3412c82e0bdb23d0856f5a9dd781a3ed177aad668f79e0a31564771567619d08f0e37623696da203d70156fcc64e196c7921bf151d82f42fe39d202e2fc1a40a830f9e3438ddd22835c309a1d10fedd11754f420a91a70cef577f7dd9763866caa5bc", 0x6f}, {&(0x7f0000004480)="febabb8a95a728f3d25349a9738883cd525c0485185dd544036dac5dc60369cbd9c2d9abea3343ed3be7455e98599c101d26e997ffadc87cdf21dfeda5606ab34fffb3afcb77be2aec7989409311b57772e275b7dd14319571ce954c31fce184b4fe9f3ff28e8b034e7612fa6045e2cd7c8c8dcc3fbfe14c177b2cd514a38fa1236e6ee666502a9e82379c0582255149a16f42da6adcc9ad7e7a1db21a37ce667c37429fbbc98a95311854a582c21cd00069dea5b420423a8414af13fc92778a125bf49a1cfd5693cc558c9f0ca819f72f", 0xd1}, {&(0x7f0000004580)="2c23cb7d885d2651905fdfd51fe81907aa6105638fc09a1cb90ccc89172227319d412f5cda04126670558dc118dc8aebba183153", 0x34}], 0x9, &(0x7f0000004680)=[{0x108, 0x118, 0x2, "8d71f21d3bb1a134ea492d55ced0029d9bbaa51ab5feef4db85b07b45443b413996e957eb2ecb7fa846f1593f6ec59d640caa31dda4409c15ecfbcd672d7f1f08bbdb9f72e45c50f0a9d5c387c1904700d570a792fe2cead757dc599efc846e2220f7872708ad083a0ccb723b75649876b6c3dc152756b425894d65a5b3f8875bc586e5473a04482298bce37d81af0b83866c0cb309423edcd875dd847e4be6534f9af6405eae57f267b19ad76d0f36809d90147ea16f2444f5129014a71a4c1b81d23f53302262d49e27bdd458dfa9024a4b5bf694b058fc0d6c4db962bd3f958720787043302c79f9aca7fc71f781dda7aba4a9bab"}, {0x60, 0x10a, 0x12e, "24bed6a58fb9d7224e3d9abf6659d6d3b40344bc253c225d98cd09d5a07eb7c05b5d2fe931fce9e5d6d89fe4adb67e945cc461063d8f01bc9fe544d8531a41dc83a5e9c6cd08a1ba902e"}, {0x80, 0x1, 0xb6fa, "af94819e1dcee39c0ee7db4094b1df489f5bc874301565fdb35ab6e968dc3cdcd54aa1ed483433e91de3326211a2c34725590eef54ed7b825bcefde0d894de02401a4ed1cdcc69fb329ac5e155eaae0c12d6e723b0f3c0fcfedb17e545c408489539049d3227ea2618c2"}, {0xd0, 0x0, 0x2, "570a11e2bca62dcf08a8529b2c1d4c8867646ded52333986fd1fc78f3d4112d8ca8ec2e208399f58d9848abb6acae9a6c42d3d1db53e5e4abe774fb5635f86c1e44fd0b3a45b9fb05de34ea8b007ede571c7e231d75e31da55d41b05114245b1d5b336a6e14780f579e8f5fe850007fe093d26dc1258986f2bd25cca5119992ad1fff1856d70a3f2d26c071436a1e53925eef88ad1ec3dedabda82c5e43980971f3ad774fe510cd629f8f0b9939de20fdb0e9faae4b0a011b1"}], 0x2b8}, 0x7ff}, {{&(0x7f0000004940)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80, &(0x7f0000007e00)=[{&(0x7f00000049c0)="75f0177f591ebedf25d7e32b14687356d3af47fbda1cc946c06b336d88ab9b85127b2c00eb838b089f65ac798e2e59459cbf394e8df82e1463803730467252313421d304373d409fcb2eb982c85d74caa725678525d13efe8871460d2384d8ffffa368e19bdc0ece073e649f55518f0ec979b6aed02b829c6df3a9d85dc5dda7c6c985f694e776966c98f040aa376a15abe0e1a86d19ab2d263e2de67a83bc1983bf7d4c1f7f1be4b8e027ae04132b69aaa8f61d63cdfd2e1080cf912f79976126df3685df80f98b48cf5d85ef81a9d116a5227c07896cbfb88f3459ae3bbf5af4d99e6a7682f488c51d3e", 0xeb}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="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", 0x1000}, {&(0x7f0000006ac0)="5cf00a4f92c03f7711ccb5e35674a3ebfea02394daf0fd505febac5d3cefd29fe32a20d57965a0b3bef9ce985e0334b7a91ab577eee38b31b1d416fdbc285521fab4220d40658a0dba827a80199c1b39dce47aad4122662bb54232fbb311a6f34e7a4063dce29f806aad4921378d4f2f2c1869f6b45627477e09ceb057d70fe975c73450216bf5a2f74d407542beb86b45db39fe5243f8521beffd0fb0b7e364fb303c912936398b25911190448bd1fde01904324f999a3c154760c8e7fe3b0ff10f17058a45c992c4c612c7cabe8b0a91f788a52fe45d19acffb663da3a5ac76b329bed", 0xe4}, {&(0x7f0000006bc0)="99c7a75a28e57db26d83806fa7d459f01b848c4f8f8358844f536f", 0x1b}, {&(0x7f0000006c00)="1315f0464b731ef2e06679be50e4c5e6186bf8b3036a1938d23d41718b99b208184f9746b9ca524c1c82a0ba1190fbdfacbbf00578bd8ad600ae32156a5a2a2e4b987d337c727ceac84842d44b4c50dfa11498b07086ed53245d67547fb7493f278a2cfc6acbb51ddcc97cfb442a852d76a5daa551e5b090e5ad2813c4", 0x7d}, {&(0x7f0000006c80)="537dbd83572b1df5ecc2f9fe04b7a73f5ce8fc04bcd4a14efb48a8bd469cf9ef2887d24d34440bb3501b5d7543f034526af8c1789a78a181637bc0d7e979628fcc5ae8cad774805ed20bec999c4ea54c3a8fa0b2e55073917c8628bc18a95cbbb2b7824bee796c8282b0a4613df27266deab641d", 0x74}, {&(0x7f0000006d00)="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", 0x1000}, {&(0x7f0000007d00)="dcb08ae4316baf86c0e948fef529aca7ef396b725e084f8e1fc7377ecc3cd815e2673da61edd6a4170e128231f7804a6140c8759383699c2630b5b4e3d5f61158dae1c2f32c8bf6d32adc3853a3168e1c0a45a90377bb215dc07a6bdcfe265085dc78cf135e4774576697b5a335ca5021aba3cfe169b5c800dcec438c548faf9bc4ce2c21d58cd5da39ce4645f395bef27ec00fd0e6ea200f2e28ef6fd89ce8112b2c71d0ea7c2bb385a91b5232b8877", 0xb0}, {&(0x7f0000007dc0)="1c1eb0c96884db", 0x7}], 0xa, &(0x7f0000007ec0)=[{0x110, 0x0, 0x101, "c9e9d5e6bdea162dcb2771754a571cd0de559a4f053344659125b6340cc3bb241921ba42ee515327e608bdb1ab88c9a6dc659490d3eae9f0fa4e21e987f33aaa5d79880e82e1edec7870957f947888ea6241cffcc6b806bc4638c1d7a8e7631fb0af19c208d85ea53d56d010fd01bc48ae8a3e1e53d35e932b63a1f98e48e818581e2be19c472f50bd6fc4fe8001f0cce01e2412a7738806e784057ff81e3f1efad31430556ce8940a9bbb673e8b043f7231f0dea6819b577417edb5e30d33b3c462caeeef3cfddf97c8611f1eb578d67a8007c4766da86c82e82e8332a842f58f0c0538ecb020deb33c5a2ccc01f31532fbcfacc8e386415a"}, {0xc8, 0x0, 0x2, "ca9913cb54b2e763f07a06a9a482068ac0c4cdb4bd1f94634f5cf55916c57a7dd0e4e6b5df45f9c3e345abbdf588f66c1f5c96e61b9e0e8256b0685d2c0c5cd85e3602d747e7cc8a3cf7db28938a95638ed2b44f3c50830e2ca8e4a74367e4e83b7675789d3429535c1eaec1f5918044f86f010b950e0b38b1f0d597dce86696575b9dee8786c95208150d518bf2234901a0b095f80c014853f66a3087b0b6281d1a3c541a783f53f7648848ad5fe53251e16d2e"}, {0x1010, 0x13f, 0x3, "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"}, {0x1010, 0x0, 0x5, "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"}], 0x21f8}, 0xffff}, {{&(0x7f000000a0c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x4, 0x2, 0x0, 0x4}}, 0x80, &(0x7f000000b2c0)=[{&(0x7f000000a140)="be46d2d8c7f060493c1c9a1fc454d749045c93fff2d6729b1d0e3dce77bc148bcd11349eba03f8576f9ebeafa9b374f0d70633d50f909b6adf2b17788b65a7e0ee06df7909247a0e17ef35", 0x4b}, {&(0x7f000000a1c0)="6a93bacc067c66dd4c4dc34125a3629972fe64bdf0dc6dbbced181bf6b96d671de47f63711c3e389320453d36ff5680ee8a008bcedae515360ddaaf7e695615a8e09e7d9c531e4dd4c053ea863e3723a24d23448d0bbe9d7214a26592fc5fa7e89da766a52bf2be442acf50b663fcf98d511740edb698eef590c753d2cab0de300fed794d7d569f5cf10ff94cc5b9531a4635bcf73598ff475734be7c2943641a6167a65d6b85152afdf5be4584d736a82e5d42f0528084c5566b41aab469b0097729abf9ba982408d57343c967e1a49d770cd7cc65fa76e5f34d63e377ca63860f4123647e24c47b689316f81fddc5c43c15569ce24b8cc1fcc417dd94a11115887c39f48461425146c63a7c345ebec66857987ca865b4a07719d9208897e73e17cb3bd34583329c9bb7b8e2e786b62a24f97ac8d8251f93d63a94693cc1503bde19187a511f4003e6f3db4ae295cffaef77b70aec0d90bfb91daa44f137ad796483fc69025e1a858a9f0828e2b88ce4d2d9a8f7af2c6922d22cb576179af5e48d552bcc6acf3893103d4a48577939b2caf98e087efdcf0cfbe61860d46a325ccd2f0fa0bd5f54eed61301b3611f76ebaca8e807084cdbb3b7141ef267b88e831fabcfd640313ad4fcf03082c1468fec998c5d92c7efcb79311cd21ab95f47f504791f81443a5a63842ef2df5f9ac19daded2849f2f994b42cc7e7fd3fb98fa31977358605b777d279c63d5d360e9f95d16cd95771037756e5189fdc68799c3356be10c87bc5ccee5247fda60804693feae8de85cef5c2b8139593a3ed82cdf527a55ca819d12ed641d8ec1be1e31bce3ace87100ae356f0f565e73b354ecc79268c482ed149d2558bed20047b2acecd5fa0530a3fde0b079da695b18659c67164465ab535e7bf89780f53a4dca8797fe5091406a17ff5466dcfbbb39e7d222a414885d116bcc28f50e66c46a7f80c8f7011bc1b6f5ad169813ba5fe0318f81493135e03f9c680f67317ca72ef5145df9a6089766f2f36cbac50d2fb339f869fda12c9daf9673cbc893a59a7d40c799e2ab170552a3381a198429b2c22b3b522f5444a83cf081482b9eb1d7cc47661ae005c7798169a7cce4dbb60f1c6f61816bf7d6683ffa51c5cca38d1f7ce0d1713403e7a86b2e2bbc03bb62b65706b8a68710e5d5cba93712b4b3a8db371b356fa0a8e324ef3a6932baa69b670cd0308944a64b31b715d44adb72fd21b89f41534c0cf08e08485ea496f551db89c6258e6989b83a89d627aa6bf56998d483c73fb7adf0f22da558b95c40c7890663cd447990d736515f183ec3a490a9e596e6801a2085361dea76c8bad0b2b6d7e457171037c8ace6979d06c08996498b6900ddaee3c0b0d3052e95313288de21dd545c324b63cf44597c24708f6a92a747d424189681b38c8b864389291ab3e02066946cd2a623da47f1267b4a9f60c3b99af51dbdd4b52c09abbdba6c8ed752552f97159c022b7d9417f79ce7e4e324846e2b1931d102e73cb2e4d69ac539b5705f21b9c5fbfcec11d463fff2e957b0031f93845a95840465f47adf33327cd6d01566071400447f67b790cf1e7b6ec8f5c98da0113cc341ef8a429b6470c4a8516276bf2e18774b651744c916d0b15cd059243cf672152ae501a8e3c42fa87000621aba0c7872904092bcd7ea0286a8381fb1f06102d8e586ce2795211744fed25d78e9dea2724bbb0fcf878dd1fa6884d12c1216686ba9c74717e02ae4aeae27d01721138e140e4ffec516276dd6a8a87553acc48ccee743ade3006b4ba37a7a6a7938a1f3921f58b47c51f0ee843261e85d9588945d18875e8a3a36aa7f92533ae426529e1451951913ee3714bccc67b2283e1e34691e7001d1bca917981d1cee6bcd46ce80985a087a787c34427a7c0a42cdd0ca4e9f242beee728a4ab83eb564fe8c902d27586ae2019900bfec33cebf56bce8e82ad27339b6c862e97de2a763585767a7cbe93b457e62884eca47ac3967aa7d684a576221aff2bcc27b81476e13422cc3dbe61f8b65b8b9f67c3a57003c29d3067acf9734d6372520f56d8c263573c93b9eeb9d0aa9a9242cfe33f25aa84d96cabbbaa60a6c5d8695bc08d123ab5ca50f141d171b30c4ac2b932766787c41106bcb966085a06ddb1743975edefe484fbdd2d008270889115303a60fb849abed7117d96216e4d04a6c5698a79f9955d347af4b58d1f13d08035e99231e9c7e703721a802a4b457715359a21c3e574a1ee79c39b957160263cbfe0f24006014efa5a0c1f9e92a4922f1562e010771573f3a595914aa739878968651ee1730dbc7e2fdb2143688da7675d53f2d400926efa0b16c41fd0835169521c4c569066577861b970788af1ab623a5d049b7d5c76a3c2957ad9210ce9837d2bd8a8fb3bcaa7d1a3b3dcd7ea8d077637d80b7817c3e2b0ce648a436bdee01a042066627594ffd5a878fc6c0f0a57eb2145b6e5d89d51b810d2ee29bc9589c52b1ab14f3128df7ad7427954773cf232ba959021943d8496fd4c23df45096359ac5926de51e65de163fc2817929fd5130298d9e4623d3023cd8c66a8fb1eff0f4a3ab68b0ffdc8de413ccd6e49f87f2e5cb9a952fd56fb11c118464172b24dbede0f7470a9006fd6bc717e96dcaccab6394a6c79a7f5e119b3c19cf082921662774b3ea6ffa9d00c2df41c84dee3071bbba00208c6abd1cfc5f535329fa16334c4061a121fc7d7197c1796dc7a9be9866e0ab723d635d811bcc1ebf00726eddcb76747694e27c442e7c169c14ab1950769812790c43e9c1d5751d3f568f58ccab223ce7746a54590d80200f6c99976be457b55ecd8f011bd685dcfe39593f6fb65e5dc308caf22f72e32ecee5588bd42daa1fbe671fd669ddccff9d4df17a3b5d82a9853bfc4a53090709986519718ba326ebd7e1ae4a04b9a34a6c2aad46fb85328425ebecfe8eccd2d332b806579c09c5c756c5560ef0aafb2efd9b80bb1b1a4c4416e640312b578ca734c1e24268734cbff58f4a5dd9dd63ee20628f1dc051735ce06377f065eb0d430e9f4295880ecf045d3033323c5c2bb132f555e18f0aeec89caefc91eeb4ff0407aa9b5d7fe5588eb8fb40d409bb41289f703b65ac979af11b972d08fe4305a538f82373b50bcc8df5cdc41cc59d43269a348d31afb254af5344d426e773f9bb9619ccf53dfbd872461e641b15c55f7d3834833ec920b9b0bbc435151ca2ee0e8c18ef7ce5300016238a62f72b8720754f9d8d806e81b829d37b019ce0951b8a6e362e78ddb8ee4a2b016a17573941ab3056532b11dda98d032131ab949c497a1b6cc01c091fe090e1afc0f87f9bebc57efc10a2aa5da4eaba69435dbc64d28066715aa3e6c4635e5d5ace89a10019ba9b856827dd3e05baa503f52864199fe5674a6fd05df9df119304468a3d4eb167c2c08f438a2baa37b55d1cc1165028f2a5d28d48c75a9583f8621ebdbdf049631b32df773b50ecaf8949023e3fd0c33a865a3cd6d9414e529b9ae53ea43a6cd4ad6229899b29cfa6ede05ad4efa4ef0b647864fefd59b2852bbe01e12336d74cd5902000418e5d89a4329be5a2e74ebd34d1f31b95b9dc3bfe2f11b620e8b19d0efe77cd385bb476ab15f6a72597adbc99eab6de06f6a421261764c36265a24ae0fd8eeb13fff5c5ce9565c314d7694117d9fdbf1f7982f84a92224d821a6937a3649c2fd2577da3a9aca1e07b52cababad787f4d0446d6351da4fad3b89546fde67eb95f1697df88a49a51182a809b21fb4f6e3caf419dd9c534df9e217640c0004816b65808df4fd8002c5471011e42fd9182b4d5fe300fd0b5c1d6c017f268e269da853139ebc6a48a33a153a978e34fd7547ea7810d23ed396dc1ba3cee3ad0577fd385c9e2eb6039b5b29b17d6b63f007b1986a3e1ce7211297210b662200ca59e3f9ec225f24285ff0a6223adee770edaff5aa0d1674e5169590f40fde3d6047afb330aae7c31b381009369dea9522623cc904e9aa447f32cc4468be37e1272c56805b95f775fa3e4c476c113864bde2cce6ec723be422a07b987444a1859b08b6efc93a4ecc8fb74ee06028e55092d1816fd27d913e0c93cd779bd80a483857e686887e30de537730324713c295fcd0b95edfa398f9f460fc5ad4434a1862e018b164812cfecdfee2862b817f68d0108a7b46116fa4ce88726132d590d0307bb278e24aad6a406918723e91e597e8da746cc671fc1728d2543a3ef533139d255275e022b5d623fc0af5ab99262e1ce5c5f7176e31330c9dc899eb19402bf33381dd3291e36a03f238e749fe0bf48e03214e9f602ac132d61de0ff854601c6e828f0d249865f77235676642e96386a4710f0f1833672b859ec4a660b4b5ccebc0d6688bbc79a9f441271236422a0561629b032d0c1b587eb51731ea8f6d894be344b4476166e70184362e721897378b6ae60bbf5286dde35e82791fd27e3c85019ed245928b734b3c965155871e4ff065edd2aa994583326e995e491f4b024e7f4b944a5623e5fc775d3b4155b2406220f82446cdbcf211b710cef6334d4050fe2e1e8f9bb0c56aef3d52bed806868354c06e6459c87b9fd9491d6ae605d838edbeddabf0c35cc3a650c43e114f81a70e0569fbdcf09242dde1269b7a92abf784b46750c5bb135c1e4d8bbdf4919341e70e1c0338efec6116e3a66608c3282366644ed5bda73747cfb48887dba43770ed2a111a48859f6533efa3547db9ba0677f7d9f20494a0e13839db7d17f3b5470446794a592f8ad26651dd74564ed0a4a1005d29204ea15788173bded9067c634a3de485aeafb7505a94762c55ef9cb1869df1b93c843a5ee4f1ec58c925a4605291ec6cead97e9f0f822134d4999114586ba73222f8e868f6e45a71cf6a2a2e1cee12b708994dedb6fea28559ae62ccd01d8cc83295b866ffbe125d4b3c7b5966fc56f8a27c7a014268fad2625b8c04ebbc4752723fffeea2feba599446d3e3cedab9173b8f0a6c895394f9e0977d8233254d7ccbc9d0806a409a3d920793b49e39167e4b11a49b83317be5cbf7994e697633c7daddf57ee939cdc5c08750d06a33cb6d972f345c8b72a4dbb814768c984b2d3c78aac560158ea935b75e881765e96dbc06345e7d6bd6eb6f7fd727ee65d86f9780fa6eae61dbf1be349f2f02b88bf660d5347c02369710903ef575fff358627deba621ecb8c1d65f90dc930ec096b525216809d8228b52a00e95106536ba1ca9e593cdbfc722b9645fd9fbf3af5c99b34e7b769e8028ceeadf58b60e73d135731def9ad224e471ba1d9139ccb3dbdddf4f107916e979dee4db88c27cf73942e88316c7b69793bd81f1b24cf2f2be67e097f6716d870047daa59695522f62250f3b218c82c9c495eaab21fa9d7b576b1b39beda87913936ce8bd35792e3bdc9b22e117c93d8d5ef54eb517aee0fd7da8c8f567ccfc706a4b4ca98bf3d8e48debb31f3f3daac50b1b52a39bc859101470a2d0beca3413b2923c862550dcbcd3a337819917ccbf793df0112190efd81dca8866d5c85920842f9815dc296660660b3070c7c4bb7be1feb34766662290473aa038a0c55dc5b1553194ae20b059989b9bac2494112fe086993c3dd15abaf0476d970663411a4970fb32f7d9cf40d85b902efd2ffb6bb06a7f05bbc004b5756e423d540f5669a11c7a9b942c06aa4951963896e5e08d5d2a70a80e8140de3a62cc101b5d639b9c8911a82c7a55d9af08ad9805e6851e2721744d0c5b241411a2ea9880f", 0x1000}, {&(0x7f000000b1c0)="4aef990eedcaba07209eb0f125da46a396810a062cbd8e39b66c2ea912bffbd2a852af785666ab56294dcc8f441fcd826038fb9e7c8d18475f1a4b3b5f7c2d414a914da8bcefaadf7e13d4fd8c57e3dc79bc2a5c17f447e24b85441cb414ad46dc5fd79b6182853049b785", 0x6b}, {&(0x7f000000b240)="be5fcd0381d12d2dc93174f7e33b6807bd5b9ad8ffab02feae5741eb55c8eb21e38591ccb2a26248f472568fed1840b418fd6d8741bab242ee1b478570481ec8100262cbaf", 0x45}], 0x4, &(0x7f000000b300)=[{0x60, 0x6, 0x20, "459d655aaf58aed5418a45c2f9b63dfaa1a33dc703571fcab7816d6291e95a75e03d1be51ece298d8bc08fc17df9f21e276b16767601f74e3f05501ede9020cc5270fbde388377b5381e44"}, {0xf8, 0x117, 0x4, "6fae2a070e5324887109cc8323f6d1223982f560aa53b9549a04fc6a48241336c1433dfccc20145d06cf90f0abf03d579a3bd7bd2841c22cf6b24746384716fab7d1ae851d9019aa048f81eefab110947a97c1af8dea9c9ac8b05289705a5fbdd80d024bb34c6313989b410ebc75a8eda5ebd71515586f11c512bb3094fff6616ef7416b2d5d0da8592f07af2d162ea5cea87e940bacacdd6f9a5ac9afc4cac4cef2cccdb1d053fce4287278983c899e766769caaac7b6b280bc03c784b3cb58d8cc979a9e54cc9114ec8648cc9ce0d9847acbaf748ff2c409a41a3091ced39f66fc26c4d222"}, {0x40, 0x116, 0xfffffffffffffff7, "d84fd59997c7bdae2cfb2a90d95bd90d5f39c2cd38bacf22c29445463cb14af81d880fe425cb92f1f2e190079cfde4"}, {0x30, 0x84, 0x9, "cba1c8e2159d1041a1a54eaf932ca2d6944232ec0a6b01234a1a3e948c"}, {0xb8, 0x119, 0x7fff, "f689cbc1269bb50bbb3f7d34677cc224a981ab5f93ef4a4006b835c684ac896752211835ac9b0e3617cf2604d4c238e04a544357a2005e6dceabda737d09356c84994f09d6c9d3b546fbf61062b4eaeb5d934251880bb40afcdc4ee00d824a4add118c109e567db5569f42cab18182b1d0718706618eb22bbe0176dcf4b7aea1b7b97e24e69843b64ecf3d3ff270c79cba80c772fd7a05c4565d1fac155910ae1befd5d5855bb1b4"}, {0xf8, 0x197, 0x9, "dd642309db54d8651be61ed058f000c8da5d0ce9c5ec6510f433b75bae726a5a0609add710afba9428bd74fcb5c58c8342b5859342a3bf3054a3615f7f366e7ce59c9db4cdc6a9a2428a457f7d4130baf53299e041b99826d663d5b005ddef4998a5828fde364e56a1ffb88454d464b42df347ab4edc48fd45efc6641e412d93b26a9f27c2bf645b6ffe0f9e7396068399b3a5b307f2f16d35dbe4f2a22968b3db5854a441ad07a4dc4bac9bea7ddfec50bb06946d36ae9de68f4c95905eef2436f1bfc31214eab7566c5ac7e6caf61726a06d5b53006c3d63aff00de4168ccd3fc84b657c"}, {0x60, 0x10c, 0x1f, "6c145f8e0521e971e44bdc7bccbf28d16984242d215b64f4694a0899cca99d4e659968eb8d8f20313de77db96eacbc92dcc6e455b662cc3f946eff67d03d642e63aa24de68de835afa25e438cfd755"}], 0x3d8}, 0xfff}, {{&(0x7f000000b700)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x4, 0x1, 0x1}}, 0x80, &(0x7f000000b7c0)=[{&(0x7f000000b780)="4abfe87431f2e50e86916cb2cdd4593588ffe259afcad05c93482adc0823b8499d53b8", 0x23}], 0x1, &(0x7f000000b800)=[{0xa8, 0x10f, 0x101, "217615836600f52d464a10ce3791c2bec933ba5b264ee16dadc60a8a336c098eea16e9acef37b7ae0b3d6df775946f1936c67e7573d033895ceded55a0f50f465c8c4820cfad76d97318b57f0377113cdce62f6bbb2e29ee07dd5d7e4f1edbc36feb0de6761b1a7a21d20b2b00905869616983d8dfdf9f3638939355d69214b492f6553d0631297f2f423ade33280081fd15f4dc"}], 0xa8}, 0x3f}, {{0x0, 0x0, &(0x7f000000ca00)=[{&(0x7f000000b8c0)="1352ba0e0e50a55c98d1feaa9b5c9ca4edb7c3baeb9a20416f421354489601bb1a8b98ea7d292a2ed12a4409c58961a813da7afc09aedaed49ab3c3264a8dd018c336246886fe610a2214ab9f6d23dcda803510c5aa213c66c0dc218eae37e95714c6d3009ef8ed84badace9aaeb76f3ca6fccb6831e854a01abfe3ec17e3c119b1131ff4bedb200afdb5abdf4d294cb4d4f7259aaffd52b4511c006ab1b47760c2734b35158c2d6b2c5a1c9aef49950f46330256c7b4861575204053b", 0xbd}, {&(0x7f000000b980)="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", 0x1000}, {&(0x7f000000c980)="a2ef21698edf965ed6eb69d37eb81478cd39f56f79ff58e5684b723284ef2860fcf6cf9ad01c8993924d28f49100e189bd9141fa8e77560ef2ffc05b522b81c991ae9258515eb9c2052c3db1d35cd0fe4fb5349ecac0d3df701cb85ff51c90c6", 0x60}], 0x3, &(0x7f000000ca40)=[{0x1010, 0x10b, 0x3, "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"}], 0x1010}}], 0x8, 0x4004004) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) r7 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x5, r2, r3, r4, r5, 0x4, 0x854}, 0x10001, 0x1850dbb2, 0x9, 0x8, r6, r7, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x25, 0x2}}) close(0xffffffffffffffff) 03:37:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040), 0x10) 03:37:33 executing program 1: fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='TRUE', 0x4, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440), 0x4) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) getuid() syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000300)='./file0\x00', 0xfeb, 0x2, &(0x7f0000001800)=[{&(0x7f0000000800)}, {0x0, 0x0, 0x5}], 0x8000, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x24435) 03:37:33 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x101800, 0x2) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x9, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}}, r3}}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x101000, 0x0) 03:37:33 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x3f000000}) [ 530.888999][ T7764] binder: release 27542:27543 transaction 578 out, still active [ 530.900317][ T7764] binder: unexpected work type, 4, not freed [ 530.915891][ T7764] binder: undelivered TRANSACTION_COMPLETE 03:37:33 executing program 0: syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="cefaad1bb83c000000dc1b64", 0xc}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x3) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd34d}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 03:37:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0x47, &(0x7f0000000080)=""/71, 0x41f00, 0x1, [], r5, 0xf}, 0x48) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) 03:37:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) read$alg(r0, 0x0, 0x0) 03:37:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0, [{}]}, 0xfffffd73) [ 531.102050][T27749] binder: 27710:27749 unknown command 0 03:37:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x40000000}) 03:37:33 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000340)) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x100, 0x9e0b}, 0x8) r3 = syz_open_pts(r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x14) 03:37:33 executing program 3: readv(0xffffffffffffffff, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1e4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 531.187957][T27749] binder: 27710:27749 ioctl c0306201 20000140 returned -22 [ 531.207231][T27811] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing 03:37:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x788, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='aead\x00') recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x2c, 0x2000000000, &(0x7f0000008000)={0x0, 0x989680}) [ 531.256649][T27811] BFS-fs: bfs_fill_super(): Last block not available on loop0: 3280365 03:37:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0xa0010000}) 03:37:33 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:33 executing program 3: syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffe) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0x35e) 03:37:34 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x1a0ffffffff}) [ 531.638590][T27927] binder: 27842:27927 unknown command 0 [ 531.669644][T27927] binder: 27842:27927 ioctl c0306201 20000140 returned -22 [ 531.950992][T27811] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 531.975542][T27811] BFS-fs: bfs_fill_super(): Last block not available on loop0: 3280365 03:37:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2272, &(0x7f0000000240)={0x100000000000000, 0x0, 0x0, 0x2, @buffer={0xee, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}) 03:37:34 executing program 1: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x7ffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0x24002) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x0, 0x5, 0x61, 0x8000, 0x81}) ioctl$KDSKBLED(r0, 0x4b65, 0x69e) 03:37:34 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="ea08", 0x2}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000580)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 03:37:34 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x100000000000000}) 03:37:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x800000004) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x484802, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340794b80040d8c560a067fffffff81004e220000000058000b4824ca944f647fffffff0028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000d0900fcff0000040e05a5", 0x58}], 0x1) 03:37:34 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x200000000000000}) 03:37:34 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x8000000000000000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) clone(0x800004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) [ 532.218838][T27972] binder: 27967:27972 unknown command 0 03:37:34 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x20200, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000440)=""/4096) connect$inet(r1, 0x0, 0x8e) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0), 0x4) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1e) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={[], [], @remote}, 0x1c000000000}}, [0x71a, 0x4, 0x0, 0x0, 0x9, 0x7, 0x6, 0x1a4f, 0x0, 0x6, 0x0, 0xca, 0x0, 0xff, 0x6]}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) listen(r1, 0x2004) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000000)={0x3ff800000000000}) bind$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x201, 0x9, 0x73, 0x0, 0xfffffffffffffbff, @remote}, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001440)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x800, 0x101000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 532.275636][T27972] binder: 27967:27972 ioctl c0306201 20000140 returned -22 [ 532.281780][T28032] binder: BINDER_SET_CONTEXT_MGR already set 03:37:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget(0xffffffffffffffff, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) 03:37:34 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x300000000000000}) 03:37:34 executing program 1: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x3144, 0x10000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000340)={0x18, 0x4d966e1c, 0x4, 0x38, 0x4, 0x4, 0x1, 0x3, 0x1f, 0x7, 0x7, 0x8c5}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x8800, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="2c12024000000000fe8000000000000000000000000000aaff020000000000000000000000000001ff010000000000000000000000000001fe8800000000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001fe88000000000000000000000000000100000000000000000000000000000001"], 0x98) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x9, 0x0, 0xaa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000380)) ptrace$cont(0x20, r0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10840, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x0, 0x30}, &(0x7f00000001c0)=0xc) [ 532.403102][T28032] binder: 27967:28032 ioctl 40046207 0 returned -16 03:37:35 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258"}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 532.588640][ T2988] binder: release 27967:28091 transaction 581 out, still active 03:37:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000440)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x39, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x301e00) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1a4c) 03:37:35 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x400000000000000}) [ 532.913306][T28114] binder: 28112:28114 unknown command 0 [ 532.947647][T28114] binder: 28112:28114 ioctl c0306201 20000140 returned -22 03:37:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4000, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000002c0)=0x91) [ 533.057410][T28118] binder: BINDER_SET_CONTEXT_MGR already set [ 533.135316][T28118] binder: 28112:28118 ioctl 40046207 0 returned -16 03:37:35 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258"}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:35 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) madvise(&(0x7f0000836000/0x400000)=nil, 0x400000, 0x2) r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2f, &(0x7f0000000000), 0x20a154cc) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 03:37:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x408000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000040)) 03:37:35 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgrp(0x0) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0x1ff, 0x6}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) rt_tgsigqueueinfo(r3, r4, 0xb, &(0x7f00000001c0)={0x0, 0x0, 0x1}) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000000c0)) dup(r1) read(r5, &(0x7f0000481000)=""/128, 0x80) [ 533.407786][T28232] binder: 28231:28232 unknown command 0 [ 533.463276][T28243] binder: BINDER_SET_CONTEXT_MGR already set [ 533.526681][T28232] binder: 28231:28232 ioctl c0306201 20000140 returned -22 [ 533.562605][T28292] binder: 28231:28292 BC_INCREFS_DONE u0000000000000000 no match [ 533.570454][T28243] binder: 28231:28243 ioctl 40046207 0 returned -16 03:37:36 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4001, 0x8) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000140)={"8b3e9ace16a1ae23fb4e22a2906c233a60448c599c7f5338d05d5f84c44bb79f3d211cd33e1dfd573c036fa3c96d4fec4f66d3dea995ee58ac7fdbe5c41eb56a10fe9a6996afbb3b45b45d1bb35e929cc1c4251c56526adbe49dac478e74877db71e761d259d83ddef681b95752774e6feced4f03e94d073ab86077439589564104e0dde8b4a4f125a9cd4642536c0d819119e4a748636eaf784b4d2b13eeec6bc2ae0d086fe343500d38b86b711864cb5d30ec2f3a1d21da69d4cea2ad7abc990f4336df8d464c5106f6c074d2ec372aca9d62e055e09b4b373c319984224ec35d1e40f8bf03ee82a65e58b1a6d357add7c67d4707e82cb5d2273ddf46bc24681e6a5a32b19f88c8f504b6940bd6d3bcee506c92158d448ad4e3ba09c1b77f6b30407f877effcf9a32ad6c87a84a00bdd79141be3322bb61cfd8b606431b5e9b507c98f2b4447f819c075920d943d4c9a31c1fe222fd7fe8f7aa3ca72a9ea1124b7d1b8ddffc988b8d93e1be819b7c4703c551949d03b8f89cff4678733ce452c4e9004101e10ec2c19d0f498bd5439dd2319e5bdd80c00ab68e28436c2ee3578661d7525a53d2fa1f33d4583b54608b7e9be77f297e69f181997ec86eaaa5d0ec0d0459a3c9b2b38e196c8650b95199d96dca94589bbc4751ae245d5cd572c05dd67f69f49067fe2e0538be660525d69bbe19b8d5b07835b7dd01b7443a7f3889add2b34a13031b69ac7ef0c8fbc158b1f831c54b8129531d0952b6860d8c27a49f31991a377bb776a2d0ed77a81aee9f6698b307b0442fb69b130489e4fc8f42c6c5fdf67d7e7655e987120e0d627ed6f7a727208334ba80392f96d3bffc98a3500d8a0d153d34db11d343696e44a56b1116e3730389ae5185e02679fb8f5e58c10933647287793f873bdd4d7201dabff2d3a99ff77bd6b07ff94134d276537788daf95791451b4088396e3c95eaff99d8374c78f8021cc4e3acbba0a32fe272e07e4147575d50833ae0c14fad1a82be3b10fd96bb047b23f56cf20fa70a668ab7568f4959b16614a7f077b95a5713ea428dc7dd633fe0397b304c9d5270e884a8b679ac1910756e703872cfa8f5cc6975cd1cc07bfd7cf0284f2c6b7584d09be8c7bf1b97e23059ed7e2592bd3856b5177f9789a582a2f3b83c550fc67b67fcd06f57b6f642fa8e1f4cb9e7e192d445b01dcde62323509d93b8cdde226580d9212a68b6a94c29bf36dd2b7db77cdae91fe2231741900228952ba50ad8c974f5da9885d342adbc4bbe0d88607ab956ef9a8f3c562fd45751e59d7ef8ac0d525758f587fe1f7917de1990d28519ac296f976b0df6d77a3cb58d2f63fcedb8367cb566174911838fb0b6922e472cea33b7c4750b55005fea5fc9a3640e240fdf7bce7c22eea57dd618234ee8c75334dc9819132410095467e44ceb5c969cb1d"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c8821ee62fbcded236dd6536f3436484380315", 0x13, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r3) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2401, 0x3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x57, "9e1d97dcf70e6833f8b965cae9fd5bd0f5e3e668d205ad7df33de7e3adafb158d862d34717427e1a3b0b82c66a26a259d0726069935183f2bfad78fd680f4571a1c72287367e0f93e8cfd1c8471b9af7b27791af665e9e"}, &(0x7f00000005c0)=0x5f) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={r5, @in={{0x2, 0x4e23, @rand_addr=0x1}}, 0x4c05, 0x80}, 0x90) 03:37:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x500000000000000}) 03:37:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x102a3, &(0x7f0000000000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0xffffca88}}}}}, 0x0) 03:37:36 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x2, 0xfffffffffffffdcb, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000000)=r1, 0xffffffffffffffaa) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000200)="f4001100052b2c25e994efd18498d66205baa68754a300546303a60cbc1200000002000000000000", 0x28}], 0x1}, 0x0) 03:37:36 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x1b8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff6e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258"}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:36 executing program 1: geteuid() r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) symlink(0x0, &(0x7f0000000140)='.//ile0\x00') syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000640)={0xbc, 0x0, 0x100, 0x0, 0x0, [], [], [], 0x0, 0x2}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x56, 0xeec, 0x5, {0x2, 0x76}, {0x7f, 0x4}, @ramp={0x3ff, 0x8, {0x35a, 0x9a94, 0x100000001, 0x3}}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x18, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8}}}, 0x24}}, 0x0) getcwd(&(0x7f00000001c0)=""/96, 0x60) sendfile(r2, r3, 0x0, 0x10000) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x3}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom, @default, @rose, @rose, @netrom]}, 0x48) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f00000008c0)={0x4, 0x70, 0x80000001, 0x6, 0x1, 0x7, 0x0, 0x0, 0x40, 0x1, 0xf1, 0x100000001, 0x8, 0x0, 0x3, 0x7, 0x200, 0x2, 0x100000001, 0xffffffffffff643f, 0x8, 0x6, 0x4, 0x8, 0x100, 0xffffffff, 0x7fff, 0x1, 0x6, 0x5, 0xfff, 0x7, 0x800, 0x7ff, 0xf90, 0x100, 0x2, 0x1ff, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000002c0), 0xd}, 0x20110, 0xfffffffffffffff9, 0x6, 0xf, 0x5, 0x7, 0x80000000}, r4, 0x7, r2, 0x1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x0) [ 533.738977][T28362] net_ratelimit: 28 callbacks suppressed [ 533.739012][T28362] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x3 [ 533.741539][ T2988] binder: release 28231:28246 transaction 584 out, still active [ 533.793829][T28364] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x3 03:37:36 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200401, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x2, 0x3, 0xdbb7, 0x7, 0x3ff, 0x100000000}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/11, 0x2}], 0x10000000000000f5) 03:37:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x600000000000000}) [ 533.861367][ T26] audit: type=1800 audit(2000000256.286:11861): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16881 res=0 03:37:36 executing program 5: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400)='/dev/udmabuf\x00', 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x5, @pix={0x20, 0xe13c, 0x7f5e5f4f, 0x5, 0x81, 0x2, 0xf, 0xffffffff, 0x0, 0x7, 0x1, 0x1}}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0x81000000, &(0x7f00000000c0)="3c1817a006bd4e9a68cded90cce1e522e4c2b88af90b7bcbb1b780493ab642ff2a204404a6785308b23bf3de7642d1ab81cec9f63ecb41c71e7f7a1c99fdca048dc22fa04a205964149fb25e18a0392b92daca274199d8", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)="cbe1dae349d6f4720ab22d485f0be773c73f7d5e01140db405c94a1655f9e4a9aa782720f20a62a6a2be9be104e14c942cd791edfc6531b77da0ebabb39407107e79f13107a432709fc894d4f47359f0fcd2e14e369abd4adbb66f94e1830e7b27583588e2b0332cb1b37b8726fac33341ed7400625fd935c86e922d46df1270993cbb1685cca53fe4c2ce73775b98062473f20fc45a424f004920b5a80f8c513538441d4ff659e870f93c35b32be46ec321abdb51523fd21ca478f15763") keyctl$set_reqkey_keyring(0xe, 0x7) tkill(r1, 0x20) wait4(0x0, 0x0, 0x0, 0x0) 03:37:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000001c0)={0x80000000, "9d67b3304b0f7d98ddc798f618ba6f0d6000ebfd25f681c1a5a7c3e46017483c", 0x1, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000080)={0x4, 0x2, 0x8, 'queue1\x00', 0x100}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, 0x0, 0xffd0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x4}]}) [ 534.000801][ T26] audit: type=1804 audit(2000000256.316:11862): pid=28368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir174992461/syzkaller.DObiFc/561/file0" dev="sda1" ino=16881 res=1 03:37:36 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x40801, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) io_submit(r1, 0x12b, &(0x7f00000001c0)=[&(0x7f0000000140)={0x405000, 0x0, 0xf, 0x8, 0x0, r0, &(0x7f0000000100), 0x14d, 0x0, 0x0, 0x0, r2}]) [ 534.083845][T28376] binder: 28365:28376 unknown command 0 [ 534.098468][T28376] binder: 28365:28376 ioctl c0306201 20000140 returned -22 [ 534.155061][T28458] binder: BINDER_SET_CONTEXT_MGR already set 03:37:36 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x700000000000000}) 03:37:36 executing program 1: io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r0, 0x80000000, 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x77359400}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000080)='8securitvtrusted\x00', 0x3) ftruncate(r2, 0x94d) fcntl$addseals(r2, 0x409, 0x6) ioctl$TCSETA(r2, 0x4030582a, &(0x7f0000760000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000d8}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x7, 0x7, 0x81, 0x9, 0x81}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={r3, 0x1000}, &(0x7f0000000300)=0x8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x20040, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000200)={0x5, 0x6, 0x80000001, 0x3, 'syz0\x00', 0x3}) 03:37:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x21) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000140)=[0x287]) pipe2$9p(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)) [ 534.377778][T28458] binder: 28365:28458 ioctl 40046207 0 returned -16 03:37:37 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) dup2(r0, r1) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x280800, 0x0) socket(0x0, 0x0, 0x0) 03:37:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bond\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000300000000000019078ac2314bbac1414000500907800000000450000000000000000000000ac1014aaac141400b0c4ed767c1dd2be87903f4db1e21afec80355e28a48a6b0ff2a639fa2383824f3533d3de662eb53c38efe74e70170030da120ddc105646a137801"], 0x0) 03:37:37 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:37 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x3f00000000000000}) 03:37:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000840), 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) getpid() acct(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080), 0x10) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @multicast1}, &(0x7f0000000280)=0xc) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x80070008, {}, {0x1, 0x1, 0x6, 0x1000, 0x200, 0x7fff, 'H2fM'}, 0xf8, 0x1, @userptr=0x7, 0x4}) accept(r0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 534.719143][ T7707] binder: release 28365:28487 transaction 587 out, still active [ 534.843128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 534.848998][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 534.883504][T28623] binder: 28622:28623 unknown command 0 03:37:37 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0x4000000000000000}) [ 534.935481][T28638] binder: BINDER_SET_CONTEXT_MGR already set [ 534.981368][T28623] binder: 28622:28623 ioctl c0306201 20000140 returned -22 [ 535.003180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 535.003467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 535.008983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 535.009079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 535.015237][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 535.020528][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 535.060147][T28699] binder: 28622:28699 BC_INCREFS_DONE u0000000000000000 no match [ 535.109698][T28743] binder: 28622:28743 Release 1 refcount change on invalid ref 1 ret -22 [ 535.154484][T28747] binder: 28622:28747 BC_ACQUIRE_DONE u0000000000000000 no match [ 535.211597][T28638] binder: 28622:28638 ioctl 40046207 0 returned -16 03:37:37 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000080)='./file1\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) 03:37:37 executing program 5: r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) getpeername(r0, &(0x7f0000000200)=@isdn, &(0x7f00000001c0)=0x346) listen(r1, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x24, 0x0, 0x0) 03:37:37 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x2b, &(0x7f0000000000)={0x0, 0x0, 0x7}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000200)={0x1000, 0xfff, 0x2}, 0xc) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80, 0x0) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f00000000c0)) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8020400}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000110010042bbd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 03:37:37 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0xffffffff00000000}) 03:37:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) accept$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) epoll_create1(0x80000) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x4040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) 03:37:37 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 535.276571][ T7707] binder: release 28622:28662 transaction 590 out, still active 03:37:37 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xd2, 0x2, 0x100000001, "29a8af58002743d6a1ce7d3fcf801354", "2518e0c040b88a0f3bb9e24805c57b6fe4c938266da9689c85eee72ec152eb958283cf1754b37e525b4c5697b3787be064749c662c06cbc9320b3ed35247e1cbf1582f7b8adac15388fb2cc7a20a48bb7a8b7351654bd474eb3935d25b86ae60b496f6567308c8aa6cf77c6b2a44bd96675cff8f1f446b494ef6efbee4849cabdfe434b4e774af07b48a39eefc564d747fd11bf29374abfa845690bc3787be51dd6f4730da8e69207e4c5663a12efcd7fcbaf36abaa8d23bf580287e2c"}, 0xd2, 0x1) [ 535.407206][T28760] binder: 28752:28760 unknown command 0 03:37:37 executing program 3: r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x601) bind$alg(0xffffffffffffffff, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @null}, [@remote, @remote, @default, @null, @null, @remote, @bcast, @netrom]}, &(0x7f0000000100)=0x48, 0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000012c0)={'veth1_to_bond\x00', {0x2, 0x0, @local}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0xffff, 0xfffffffffffffffb, 0xffffffff, 0x9}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) 03:37:37 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5, 0xffffffffa0010000}) [ 535.457664][T28770] binder: BINDER_SET_CONTEXT_MGR already set [ 535.461891][T28760] binder: 28752:28760 ioctl c0306201 20000140 returned -22 03:37:37 executing program 5: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x80000000, 0x80000001, 0xfffffffffffffffe) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='::,.\nnxllb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000002c0), 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2000, 0x0) [ 535.583248][T28770] binder: 28752:28770 ioctl 40046207 0 returned -16 03:37:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x501002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2c00000000000000, 0x10000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x30, r3, 0x601, 0x0, 0x0, {{}, 0x0, 0xffff800b, 0x0, {0x14}}}, 0x30}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000140)={@multicast1, @broadcast}, 0x8) 03:37:38 executing program 2: r0 = epoll_create1(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x434082, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000280)={0x8, 0x4}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x4, 0xffffffffffff7c29}, &(0x7f0000000180)=0x8) r4 = epoll_create1(0x0) close(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:38 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:38 executing program 1: socketpair(0x4, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) r2 = getpid() getpriority(0x1, r2) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x49, 0x3a1400) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000100)=""/155) [ 535.752375][ T7764] binder: release 28752:28760 transaction 593 out, still active [ 535.761739][ T7764] binder: unexpected work type, 4, not freed [ 535.762946][T28786] libceph: resolve '. [ 535.762946][T28786] nxllb' (ret=-3): failed [ 535.767948][T28845] libceph: resolve '. [ 535.767948][T28845] nxllb' (ret=-3): failed [ 535.848565][ T7764] binder: undelivered TRANSACTION_COMPLETE 03:37:38 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x84) [ 535.940510][T28786] libceph: parse_ips bad ip '::,. [ 535.940510][T28786] nxllb' [ 535.987410][T28901] binder: 28900:28901 unknown command 0 [ 536.024245][T28845] libceph: parse_ips bad ip '::,. [ 536.024245][T28845] nxllb' 03:37:38 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 03:37:38 executing program 5: set_mempolicy(0x8002, &(0x7f00000000c0)=0x6c554819, 0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/203, 0xcb}], 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) [ 536.032221][T28991] binder: BINDER_SET_CONTEXT_MGR already set 03:37:38 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) keyctl$session_to_parent(0x12) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x400800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="7f00000040f73de66ed70b07a503cd821e55886f46e6b83a6b0dd19c8f46b6ce216208e6630aeb05c5baee5cc3bfcb68e6c8f9a4eccbcb870b31b04f7d7114ec2b8c6eb584cc033f4f095a82733ae07c03663c969236dbfb24af7c5bb8be621340e830f0b13df421545f05692ef14aa2e213169d000000000000000000000000000000"], &(0x7f0000000180)=0x87) [ 536.110157][T28901] binder: 28900:28901 ioctl c0306201 20000140 returned -22 [ 536.151663][T28991] binder: 28900:28991 ioctl 40046207 0 returned -16 03:37:38 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000fe3)="441f0801000000009727c1c6fe36cef3e26def23000200000011000013", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0xd07071bb1d9a7eee) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000090}, 0x40000) 03:37:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f00000000c0)="ff0204010000000100c6fecad43c5ca8c900000000000f1bf57228c6e0b7eac946e49480508ec1514ee629cb9c0fa01470d4a9ebbfa279c3e546cebe41e61f9c8469b4a6988b85f371cb28e832a7d2bd31d089e0e6feb843", 0x58) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400002, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000080)={0x44a, 0xffff}) 03:37:38 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xd1, 0x10400) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 536.193562][T29022] binder: 28900:29022 Release 1 refcount change on invalid ref 1 ret -22 03:37:38 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="7525820aedb8", @remote, [{[{0x9100, 0x6, 0x3, 0x3}], {0x8100, 0xdc4478e, 0x7fffffff}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 03:37:38 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000480)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x3, "c0e702"}, 0x4) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.system.Security\x00') 03:37:38 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:38 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xdc, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0xffffa) sendmmsg$alg(r1, &(0x7f0000006dc0)=[{0x1000000f0ffffff, 0xffffff7f00000000, &(0x7f0000000080)=[{&(0x7f0000000140), 0xfec0}], 0x1}], 0x492492492492670, 0x0) 03:37:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x7ffff000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 536.408610][ T7764] binder: release 28900:29022 transaction 596 out, still active 03:37:38 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x400, 0x5, 0xfffffffffffff801, 0x2, 0x8, 0x9}) connect$inet(r0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$xdp(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='J', 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000a00)="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", 0x480, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) 03:37:39 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x240003, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sync_file_range(r0, 0x3f0000, 0x100000000, 0x3) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/37, 0x25}, {&(0x7f0000001700)=""/96, 0x60}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/30, 0x1e}], 0x4}, 0x80000001}], 0x1, 0xb, &(0x7f0000001240)={r2, r3+10000000}) r4 = accept(r1, &(0x7f0000000400)=@ipx, &(0x7f0000000040)=0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000001640)={'TPROXY\x00'}, &(0x7f0000000500)=0x1e) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000001ac0)={{0x3b, @empty, 0x4e23, 0x2, 'wrr\x00', 0x20, 0x7, 0x54}, {@broadcast, 0x4e20, 0x10003, 0x9, 0x401, 0x4}}, 0x44) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f00000010c0)='./file0\x00', &(0x7f00000011c0)=@known='system.advise\x00', &(0x7f0000001280)=""/85, 0x55) pread64(r5, &(0x7f0000000080)=""/4096, 0xfe80, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001900)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000001b80)={r7, r8}) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0x0, r5, 0x0, 0x16, &(0x7f0000001600)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r9, 0x50, &(0x7f0000001a00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001100)={r11, r9, 0x0, 0x16, &(0x7f0000001980)='/proc/capi/capi20ncci\x00', r12}, 0xab) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r9, 0x50, &(0x7f0000001480)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={r13, r14, 0x0, 0xffffffffffffff5e, &(0x7f0000001440)='GPLtrusted%\x00', r15}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000013c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @rand_addr="4729a6d0f8f2f53397d6002878d18b85", 0x1}, {0xa, 0x4e20, 0x4, @mcast2, 0xffffffff80000000}, r10, 0x800}}, 0x48) ioctl$VIDIOC_G_MODULATOR(r9, 0xc0445636, &(0x7f0000002300)={0xffff, "b72afbc07915be1656788473b66ee259715ffaa3fa914b04e86484a4e91066b8", 0x400, 0x9, 0x10000000000009, 0x4, 0x5}) listen(r6, 0x6) gettid() getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7fff}, &(0x7f00000015c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000001d00)=ANY=[@ANYBLOB="2a0d4de97e8956dd82e38567e90400007ad28f097b5472ce39a75c8be8128ea1775e0e680d86599cd080f88142e1ae5e31ec3344df5d6fa7dddc9f7518774cda6e040064a156a74d7bca8b4cad7fbd6deaac28759d21515b36151600006067fa4db2af82bba8e5cf7e61d8020036529810d35cef439e00c5bcb92f2b11af30f973dd81eb685c1853bf9e633460b4560ee21924c5ff16a5c1104cc0cecf7ee28d61b4ce3263c36ececfdd33a4760300000000000000f549361188de5dd3c30118fe11fe9e8abb0200000000007c7a4f966c4ba0d4496daeadf6c61c4e79bc5ffdfd9bd18d25da0f3e51d102e2c777cd1e47d26d0e6f120ec06dc8bbbc99e8dc52942f3d39bf1d4392fd25b894bb00000000000000000000000000000000000000"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000001200)={0x1, 0x4, 0xfaab, 0x40000000009}, 0xfe0b) [ 536.560054][T29154] binder: 29151:29154 unknown command 0 [ 536.593223][T29154] binder: 29151:29154 ioctl c0306201 20000140 returned -22 03:37:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x4}) [ 536.611590][T29218] binder: BINDER_SET_CONTEXT_MGR already set [ 536.649121][T29218] binder: 29151:29218 ioctl 40046207 0 returned -16 03:37:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0xfdef) 03:37:39 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xdc, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 536.767113][T29266] device nr0 entered promiscuous mode 03:37:39 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x10001) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240c0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delrule={0x28, 0x21, 0x20c, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x34, 0x9, 0xfffffffffffffff7, 0x0, 0x0, 0x2}, [@FRA_DST={0x8, 0x1, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20004894) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0104307, &(0x7f0000000080)) 03:37:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)={0x80000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 536.939370][T29274] binder: 29273:29274 unknown command 0 [ 536.984684][T29322] binder: BINDER_SET_CONTEXT_MGR already set [ 537.005805][T29322] binder: 29273:29322 ioctl 40046207 0 returned -16 [ 537.013480][T29274] binder: 29273:29274 ioctl c0306201 20000140 returned -22 03:37:39 executing program 5: ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000040)={{0x89c7, 0xa0d, 0xfff, 0xc0f8, 0x3, 0x81}, 0xff7ffffffffffff9}) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) syz_read_part_table(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x85e, 0x9f3, 0x100000001}) 03:37:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000240)="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") syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2f, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 03:37:39 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x4) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80002002}) ioctl$sock_proto_private(r3, 0x89e8, &(0x7f0000000040)="c9380f770fcd4b9512d00cc82d3f4e697950ccd3b3725abf2600bdbef501315b0c69b64a973291a66ae67ff9e48d0fd68aa1cc7758c3ac9a5b39d68af8fb703fb4ddf15e1e3f01eff7f1af6845cdbd362710d00d4a33b81ad2617d09413685f72e4cc8b3849db0307f44db") 03:37:39 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xdc, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:39 executing program 0: r0 = socket$inet(0x2, 0x800000000000003, 0xf) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2c0, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000140)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x78) r2 = accept(r0, &(0x7f0000000180)=@nfc, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f00000012c0)=0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x5) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) 03:37:39 executing program 1: unshare(0x8020003) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) semget$private(0x0, 0x403, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x204004, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020400) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x2, 0xf, 0x4, 0x20000, {0x0, 0x2710}, {0x7, 0xc, 0x0, 0x800, 0xb0, 0x8, "7ac6eac3"}, 0x10000, 0x3, @planes=&(0x7f0000000040)={0x0, 0x663, @mem_offset=0xc6, 0x200}, 0x4}) 03:37:39 executing program 2: r0 = epoll_create1(0xfffffffffffffffc) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 537.479832][T29397] binder: 29396:29397 unknown command 0 03:37:39 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x3, 0x400) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x46900, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x0, 0x880) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) r3 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x1400000003, 0x400000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0xa, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000100)={0x0, "3070bb92482f8458e804b1fb0e8b355a73082aeaa7b72bcaa102910669637783"}) pipe(0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r6 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x61b) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x1ac) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) fcntl$setflags(r8, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) kcmp(r9, r9, 0x3, r0, r7) fchown(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) utime(&(0x7f0000000300)='./file0\x00', 0x0) tee(r8, r8, 0xffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180)='erofs\x00', &(0x7f0000000340)='./bus\x00', 0x0, 0x1, &(0x7f0000001680)=[{&(0x7f00000004c0)}], 0x0, 0x0) 03:37:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x20000, 0x0) accept$nfc_llcp(r3, &(0x7f00000002c0), &(0x7f0000000180)=0x60) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5"]) chdir(&(0x7f0000000280)='./file0\x00') lgetxattr(0x0, &(0x7f0000000b80)=@random={'system.', '\x00'}, 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1/file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000080)='J', 0x1, 0x4004084, 0x0, 0x0) [ 537.540540][T29411] binder: BINDER_SET_CONTEXT_MGR already set [ 537.562630][T29397] binder: 29396:29397 ioctl c0306201 20000140 returned -22 [ 537.600715][T29411] binder: 29396:29411 ioctl 40046207 0 returned -16 [ 537.613152][T29397] binder: 29396:29397 Release 1 refcount change on invalid ref 1 ret -22 03:37:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f0000000400)="03", 0x1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8800, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000440)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x401, 0xffffffff, 0x7ff, 0x8, 0x9eea, "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"}, 0x1118) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 03:37:40 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:40 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x181080, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x100000001, 0x80) getsockopt$inet6_udp_int(r3, 0x11, 0x6f, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x4c, r2, 0x8, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x0, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x13}}}}, 0x88) r5 = accept4(r1, 0x0, &(0x7f0000047ffc), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0xea010000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:37:40 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x9, 0x639, 0x5, 0x9]}) 03:37:40 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000280)={0x28, 0x0, 0x2711, @hyper}, 0x3b7, 0x80000) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000002c0)=0xcfd3) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xe43a}, &(0x7f0000000180)=0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x5}) [ 538.076350][ T7764] binder: release 29396:29434 transaction 599 out, still active [ 538.105374][T29536] binder: 29535:29536 unknown command 0 03:37:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10000, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={r3, 0x8, 0xfffffffffffffff7, 0x3}, 0x10) set_tid_address(&(0x7f0000000640)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0166db58d40000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a0000000000000000000000000000000000ffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000ed905be1a0e8e231f0ddee9c04415a000000000000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000a000000000000ddfe01000000000000000000000000000100000000000000fffffffffffffff600000000000000000000000000000000a9bf1993427961e329a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000002cdc73802634fbd90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x390) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x20800, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) [ 538.154622][T29542] binder: BINDER_SET_CONTEXT_MGR already set [ 538.188794][T29542] binder: 29535:29542 ioctl 40046207 0 returned -16 03:37:40 executing program 2: r0 = epoll_create1(0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r2 = epoll_create1(0x0) close(r0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "a35ecfc16631605c06ce5e160950f88081f3609e"}, 0x15, 0x3) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000180)={0x10000011}) [ 538.238418][T29549] binder: 29535:29549 Release 1 refcount change on invalid ref 1 ret -22 [ 538.248429][T29474] overlayfs: './file0' not a directory [ 538.278370][T29536] binder: 29535:29536 ioctl c0306201 20000140 returned -22 03:37:40 executing program 3: r0 = socket$inet(0xa, 0x7ff, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x10}, 0x34000}], 0x1}, 0x0) 03:37:40 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) r1 = socket(0x40000000015, 0x805, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 03:37:40 executing program 1: gettid() timer_create(0x0, &(0x7f0000044000), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) creat(0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) sched_setaffinity(0x0, 0xfffffff5, &(0x7f0000000540)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x0, 0x102) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) flistxattr(r0, &(0x7f0000000100)=""/30, 0x1e) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @empty}, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, 0x0) 03:37:40 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001400)=""/4096) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x13, 0x36, 0x16, 0x11, 0x8, 0x2, 0x1, 0xea}}) preadv(r1, &(0x7f00000017c0), 0x1c8, 0x0) 03:37:41 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) getresuid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_mount_image$f2fs(&(0x7f0000000700)='f2fs\x00', &(0x7f0000000780)='./file0\x00', 0xef5, 0x4, &(0x7f0000000a00)=[{&(0x7f00000007c0)="ea7ba74e7d5b370020dd15634ecab9a7fd25032ed9c0eda7d3f17ee3e3", 0x1d, 0x9}, {&(0x7f0000000940)="9a984191", 0x4, 0x1}, {&(0x7f0000000980)="b5952ec397994f166caf0acd8df2bbb86e675ff51821b73e315f4e7832b019459e7e087987af443417b881ec856693dfe5381ce29481a4c432ab9bc1", 0x3c, 0x400}, {&(0x7f00000009c0)="e4ce0993ea5d39cea296aefa272b59b87aea4920f8d222a81fa6913734b6c37a8835a89ac5a9bcbfa453", 0x2a, 0x23a4}], 0x0, &(0x7f0000000a80)={[{@alloc_mode_reuse='alloc_mode=reuse'}, {@two_active_logs='active_logs=2'}, {@discard='discard'}, {@lfs_mode='mode=lfs'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) r9 = getuid() r10 = geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="02000000010005000000000002000100", @ANYRES32=r4, @ANYBLOB="0a0000002d1d736b451000618a34aaca306d9eb5b484de8a29722b695a0057c665872afc5ae2794052371015cc5ba16d840c038bc5d2e2fdf5e1a58f71b69567231ac7ca2fc459561890ab44c59ed26dec67de7288d996f895a7c2c6e3ad6f9ee39c8ce2e5ec200ccbb9f6437085494baa6d4cf6deaa74e3203f3743753977f8c37554e782f74824a5e7d8c8bf229f14b3cb4fb99c2e285028aaa7d23ad8f07a3c297ff5b626965247973666bf473934db58b7bdb24591bab4e38c7307c07b3d662b537d6a4b4918120f68aa9b00000000000000000000", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="02000100", @ANYRES32=r11, @ANYBLOB="040000000000000008000500", @ANYRES32=r12, @ANYBLOB="10000300000000002000070000000000"], 0x6c, 0x3) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000740)={0xd2c5a62, 0x7, 0xffffffffffff5fe6, 0x4, 0xa, 0x1, 0x3, 0xcdf, 0x3, 0x10000, 0x3, 0x18}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:41 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 538.580776][ T7764] binder: release 29535:29549 transaction 602 out, still active 03:37:41 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000008c0)) getpeername$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x30, 0x6, 0x0, 0x80000001, 0x0, 0x9913, 0xffff}, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r1, 0x0) fanotify_init(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x5, 0x6, &(0x7f0000000680)=[{&(0x7f0000000340)="407718f591123e11c14f1bc2ef5c70772fd61b13a960d9e186d69224c071dfe2a522ea30887b7b441126b205e94d55167feefc9295ba32d65818fa07411b8036e9f761357f012ddcabfb981a73212412b289f0225a58d32c0730ca0cf04c245fa23874295e0a3bab0d972bf07b1f7883de5f1f9a28b947ef0788a628800b40725381eb87999ac1e161929793", 0x8c}, {&(0x7f0000000400)="0dc4225073f3145d050655406db4b376126d09b29ca0431c5bd561692ff2b777d8718944eec1ef80d933f29689b56ec50b7f8321ea2fef26116e1044e71d1fbbbee4dd3aada7f39ed00ff97d4e0334bfd455bb120ee97f6ac3e7f49285961b3a1e37c90e91935367bdbd2c82698411749da1d2cc0db0d4e5808ec54ceb8ee5d46735fdc2a18ca6837eccd2c5e89ab33d2401128f5e238bb4a1e920d083fd426aa94816cd0ea4b7f39bb4d4", 0xab, 0x9}, {&(0x7f0000000280)="68a23d3aa0ac435d9d692f427617afb46a3f6c8434a51748d048d36c032f0682ae856a17dd4b65c03ae1ebbebd19b181304dc6bd804d3c73bd54f0055f4bc7a6ff823b9b1498e0ef5a194a47865c", 0x4e, 0x6666efe7}, {&(0x7f00000004c0), 0x0, 0x9}, {&(0x7f0000000500)="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", 0xfe, 0x81}, {&(0x7f0000000600)="d4f2a78782e276c0a0d28801ebbe661c7b2a46a605ee955749b938d7c5f7edcc72b4c0a07b6ef3ef53ba9b79ce5a096e02a7c30980ac6394f233bfab78c221bed33df6a25e58d07607d29db0", 0x4c, 0x1}], 0x10, &(0x7f0000000880)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}], [{@uid_gt={'uid>', r3}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1b7, 0x7e6069cb}, &(0x7f0000000100)={0x0, 0x989680}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac9b}], 0x1, 0x0) [ 538.735664][T29731] binder: 29729:29731 unknown command 0 [ 538.758565][T29750] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0xc32e95b5) [ 538.797301][T29784] binder: BINDER_SET_CONTEXT_MGR already set [ 538.811555][T29784] binder: 29729:29784 ioctl 40046207 0 returned -16 [ 538.820313][T29784] binder: 29729:29784 Release 1 refcount change on invalid ref 1 ret -22 [ 538.828574][T29750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 538.833494][T29731] binder: 29729:29731 ioctl c0306201 20000140 returned -22 [ 538.868318][T29750] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 538.912435][T29750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 539.003136][ C1] net_ratelimit: 16 callbacks suppressed [ 539.003145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.014657][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:41 executing program 1: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) signalfd(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="f06863cd4f6acafa8fc1f8ac46e4171a890f5802330056d0416f46779cc0cec07374c0baacd2f542845c1ded331056c76918bc8d26d5cca33f93a3598f33d8d07fc57266a66cdd35f7a6fdde"], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 03:37:41 executing program 0: r0 = dup(0xffffffffffffffff) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x20) r1 = msgget$private(0x0, 0x2e6) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/169}, 0xb1, 0x2, 0x1800) ioctl$TIOCCBRK(r0, 0x2000747a) getsockname(r0, &(0x7f0000000180)=@un=@abs, &(0x7f00000001c0)=0x8) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000200)={0xa06, 0xff, 0x7f, 0x100000001}) setitimer(0x0, &(0x7f0000000240)={{0x3021, 0x1}, {0x1, 0x8}}, &(0x7f0000000280)) msgsnd(r1, &(0x7f00000002c0)={0x849c56df6410f8b3, "eb874426202c30a91dee22e637f6b6a1c2de13dd573a20d386280a68b645ee73b90a608089ea11de1ffd4246a90fc3c479e4"}, 0x3a, 0x800) truncate(&(0x7f0000000300)='./file0\x00', 0x7fff) fcntl$getown(r0, 0x5) geteuid() getgroups(0x4, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) msgsnd(r1, &(0x7f00000006c0)={0x2, "984f04ea637ccb283c89cf1a0229e7f8b6484c8dd8a72b7b486176188ad0bde137cac2f8fdf27f789cae0fd37f962acd7fbd9130483d86549287ff884bcac0ef6137f8b46e7d0662d6d51fda49802f88d3a0f55567c5d0987d3245c71095cb67d3e298a1496b6905a6d77c5b7e06fe5239e11cc17af987cdea4bcfec8a27e5f5d53885a0616e340fd8c7cff606b0cd54d84b091a597166d177bfff6bfdc21f8f63525a970a40f7ddcd0fe498c792e3d1ed34c7c7eb49cc466c17ebe92f8d985336679724ad703a7e21b4619f533c5e1c30d2bc3f9c6f660d924040fc04ebd729d4ee7a8fcd116e74aca0"}, 0xf2, 0x800) msgctl$IPC_RMID(r1, 0x0) msgrcv(r1, &(0x7f00000005c0)={0x0, ""/206}, 0xd6, 0x3, 0x1000) 03:37:41 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4000000004002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80044100, &(0x7f0000001f64)) socket$inet_dccp(0x2, 0x6, 0x0) [ 539.059788][T29786] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0xc32e95b5) [ 539.079332][T29786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 03:37:41 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 539.105822][ T7707] binder: release 29729:29784 transaction 605 out, still active [ 539.153745][T29786] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 539.163131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 539.163166][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 539.168968][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 539.174678][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 539.186194][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 539.192003][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 539.197909][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 539.203721][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 539.227556][T29786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:37:41 executing program 2: r0 = epoll_create1(0x7fffc) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000040)=0xb1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000000)={0x62, 0x28, &(0x7f0000000180)="6daa1bf80ffa6a809347ba591519afabb92b3b765cf2ce1fda6581af64562d720d80496ec9875a64c98a3f59290174d398fada4b16793a3b2ba7703c4cf2896719787da4b88a4bd20493163a7f2398eb3e45ab58317f4c1c49bfe9f776e361a7325412b19a890e4992dfb60168049301d8536ced2f76401fbac2a379b31e6ec93dc435f48e45c801529489b1766cf938b4002d6c0f19903fb7ec77c5eed6234e4f50cc9fe1cd0b466387c0d96860037a158fa059a6e7ca227479ebcf1fed74601129906df3542a59288f5ddfdc79768834f73ded1fb49f19698b74ed3868fe4165508bc56ff2", {0x65, 0x9, 0x3432564e, 0x4, 0x8, 0x8, 0x1, 0x9}}) 03:37:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xa8, 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x80000000, &(0x7f00000001c0)=0x2) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000000)={0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000240)={0x2, 0xb1, "2d363698231f64cfec1572e9fdd3b8b500b9d1862026edaedfb7692bd8a805cdd3b2ac7526b64f5367dcf2fee77dbe4240375716b0f3c4862087911686d25830d9c776ab685fd995d47d60357a499bb02d4e6d5225052880fd611c5d7cd5198c840fc24b66ece54966f2990323362245aea8e0c129677326ab120286059477476560d5e58fe98f82ddad9226981f3000eee3b7789ee683366231a2b676443868a42626616f1362439b41ab2be40c8e6b72"}) sendfile(r0, r2, 0x0, 0x102000002) [ 539.311443][T29904] binder: 29902:29904 unknown command 0 [ 539.337489][T29904] binder: 29902:29904 ioctl c0306201 20000140 returned -22 03:37:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x3b, 0x0, "42f05ec13b2727b0554f2215445cd433826970f16b0b11e31882500b33dc5eb2491815508f6a2349ba4231dc8e2b0ea72cf2f8"}, 0x0, 0x0) r1 = dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6174000001000000009fcc99a44932deb62ed56310e909f6563039e4c40000000000800000000048e0210000000000000000000000180317df3ba26e6a52483915720c5d5596f28438a291a4dde6850854a087b8"], 0x1) wait4(0x0, 0x0, 0x0, 0x0) 03:37:41 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x3) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 539.399360][T30013] binder: BINDER_SET_CONTEXT_MGR already set [ 539.486139][T30013] binder: 29902:30013 ioctl 40046207 0 returned -16 03:37:42 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x90000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xffffffffffff12b7, 0x2, 0x3, 0x4, 0x4, 0x9}, 0x20) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x6}) 03:37:42 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) 03:37:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 539.668721][ T7707] binder: release 29902:29904 transaction 608 out, still active [ 539.693167][ T7707] binder: unexpected work type, 4, not freed [ 539.699516][ T7707] binder: undelivered TRANSACTION_COMPLETE 03:37:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) read(r0, &(0x7f0000000340)=""/143, 0x200003cf) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfffffffffffffee3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 03:37:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x3}) [ 539.856890][T30138] binder: 30137:30138 unknown command 0 [ 539.862857][T30138] binder: 30137:30138 ioctl c0306201 20000140 returned -22 03:37:42 executing program 5: 03:37:42 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgsnd(r0, &(0x7f0000000e80)=ANY=[], 0x0, 0x0) msgsnd(r0, &(0x7f0000000440)=ANY=[], 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 03:37:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:42 executing program 0: 03:37:42 executing program 1: mkdir(0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:37:42 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:42 executing program 5: 03:37:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x40, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:42 executing program 3: 03:37:42 executing program 5: 03:37:42 executing program 3: [ 540.467012][T30272] binder: 30271:30272 unknown command 0 03:37:42 executing program 3: 03:37:43 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x22002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x2000}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x1e}, 0x7}}, 0x9, 0x6}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4, 0xca}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$TCXONC(r3, 0x540a, 0x7f) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:43 executing program 5: [ 540.550826][T30272] binder: 30271:30272 ioctl c0306201 20000140 returned -22 [ 540.554745][T30332] binder: BINDER_SET_CONTEXT_MGR already set 03:37:43 executing program 0: 03:37:43 executing program 3: 03:37:43 executing program 1: [ 540.663678][T30332] binder: 30271:30332 ioctl 40046207 0 returned -16 03:37:43 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:43 executing program 5: 03:37:43 executing program 2: r0 = epoll_create1(0x80004) r1 = epoll_create1(0x0) close(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 03:37:43 executing program 0: r0 = socket(0x2, 0x8001, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="56f1984ac5", 0x5}], 0x1, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="4402", 0x2}], 0x1, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) 03:37:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 03:37:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @raw_data="a1c102e507500ee696b4183c3490b1f33ec4bea2e407fcc576170d89e2808d8663375910f4a3ff9f5f60051ebba549f33133ebb878a57afb499a0bcb3ef9f3088674edf521713eb97cce8f57adc7bb29851ca8793fc770e9a9b218ba73abae6f8eec7b575e8e43fd4539a3baab79239bdd3a37bdb277e8f6542751aa66aa000415620cbb95a0fb1693baf347d7abe8da0199756bc9070b51706e19dc22040458c982c0f2f4859b81cf6d008c2a1910769b3fbf018bd34b271ad4268daa46d5c5752e991272a0e206"}) 03:37:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 03:37:43 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x9, 0x9, 0x8, 0x0, r2, 0x6}, 0x2c) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2) close(r1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'irlan0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000540)=0xe8) recvmmsg(r2, &(0x7f0000002500)=[{{&(0x7f0000000700)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000000940)=""/100, 0x64}, {&(0x7f00000009c0)=""/126, 0x7e}, {&(0x7f0000000a40)=""/161, 0xa1}], 0x5, &(0x7f0000000b80)=""/73, 0x49}, 0x401}, {{&(0x7f0000000c00)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/42, 0x2a}, 0xd39d}, {{&(0x7f0000000d00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/103, 0x67}, {&(0x7f0000000e00)=""/6, 0x6}, {&(0x7f0000000e40)=""/189, 0xbd}, {&(0x7f0000000f00)=""/51, 0x33}, {&(0x7f0000000f40)=""/84, 0x54}], 0x5}, 0x1}, {{&(0x7f0000001040)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000010c0)=""/79, 0x4f}, {&(0x7f0000001140)=""/41, 0x29}, {&(0x7f0000001180)=""/20, 0x14}, {&(0x7f00000011c0)=""/99, 0x63}, {&(0x7f0000001240)=""/23, 0x17}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x7}, 0x9}, {{&(0x7f0000002340)=@isdn, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=""/221, 0xdd}, 0x1f}], 0x5, 0x100, &(0x7f0000002640)={0x0, 0x1c9c380}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002680)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f00000026c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002700)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002a00)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@empty}}, &(0x7f0000002b00)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000002fc0)={@rand_addr, 0x0}, &(0x7f0000003000)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003040)={'veth1_to_bond\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000030c0)={@initdev, 0x0}, &(0x7f0000003100)=0x14) getsockname$packet(r1, &(0x7f0000003140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003180)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000031c0)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000032c0)=0xe8) getpeername$packet(r2, &(0x7f0000003300)={0x11, 0x0, 0x0}, &(0x7f0000003340)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000033c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000034c0)=0xe8) getsockname$packet(r2, &(0x7f0000003500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003540)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000003c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000003c00)={&(0x7f0000003580)={0x644, r4, 0x208, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x1a4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2c00}}}]}}, {{0x8, 0x1, r10}, {0x180, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x80000001, 0x2, 0xffffffffffff8001, 0x20000000}, {0x800, 0x1, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x11af}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x1e4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xbea}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r19}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r20}}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x81}, 0x4) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) [ 540.969182][T30409] binder: 30408:30409 unknown command 0 [ 541.003899][T30409] binder: 30408:30409 ioctl c0306201 20000140 returned -22 03:37:43 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', 'u9\xb3X\xc1|\x04\x03{]\xa6\x86ldk\x00\xd0C\x96\x8e\x89\xfa\x8c\xbaG\xc8\x00\x00\x00\x00\x80\x00\x00\x01Z\xc8O\x9d\x9fd1C\xd5\xcb\xebr\xe1@gd\x1f\x06\xaa@\x06mJ\xdb\x1fpD\xe3\x05\xb4\xc0\np:96\x1e2\xe7\x1bJ\x12\xf7\xd8\r\x1f\'\xc5\xaa8Tx\x9a\x93<\x85\xed\xa6`Vi>\xa3h'}, 0x6) 03:37:43 executing program 0: socketpair$unix(0x1, 0x10000000000003, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffffffffff7f, 0x8000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001740)={0x53, 0xfffffffffffffffd, 0x9c, 0x1d1, @scatter={0x6, 0x0, &(0x7f00000014c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f00000013c0)=""/219, 0xdb}, {&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000240)=""/44, 0x2c}]}, &(0x7f0000001540)="ad205f6d20ba7bede25a1c419d0eaaf6591855209cbf1953eda348b7b04e24e2b10d3633ae69e47cb31086856455fd0ccafd7574fb7e41a1c9dbe307979f87bc9743cc0ae6a9919df3f22e25e3d9fce0b6172372f826cb19b6160cf87787e48bd0cc911ee6daa8dbd9f44a9dc2fb0082d59e696956d6a8f46179a09f7826078c0e243808ecace20d5794046e56eb1c9150934747b1b0e665c0d18fa2", &(0x7f0000001600)=""/253, 0x0, 0x10, 0xffffffffffffffff, &(0x7f0000001700)}) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0x2}], 0x10b, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) dup3(r1, r2, 0x0) [ 541.048337][T30424] binder: BINDER_SET_CONTEXT_MGR already set [ 541.071649][T30424] binder: 30408:30424 ioctl 40046207 0 returned -16 03:37:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002200815fe45ac187185095cf0600b0eba0b4d65cdbaa98cbb30007fff00000000000000051894d5d1dac", 0x2e}], 0x1}, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="e00000000b3a0be3e71d94f61b404925160f7b00d97a77659fd3795859704636b1ada637f3751c1cc5138bb1e9f96e253c9fde372426565d1505631f9f1787977ff6571334618ac7a4c500c73699efd6f5378e663bf8c81cf20b90dca27ae0b8ca03bd5075ef54a935e9f6c4cbcfd2008d910aa07c1cbe9db75a4265390902d500a9e5c03c3702e4976f248128f15660ce333d8992040c0229804f4bc9f2f9399e0b94dcf0f5df6ae1b121e02ef6c05cbf193baa0634864e6f655a159e4e3a7974d4aaa73c0cd6aae8865aaf87b9291b6d9b6174b5e54b2dff3fc45c9b3b03c825caf7bd"], &(0x7f0000000440)=0xe8) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000000)=0x3c00) 03:37:43 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:43 executing program 2: r0 = epoll_create1(0x0) close(0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000000)="4a8de540a48fa4213e4ff1330e4972a8dfbd5da10a477b22677fc37dc0cae0d96f215931fa37a3c6b3ca644b74f4a0785e27e76838429e5fd3480fc56b26cea80e52ee0bf66fa0400482ead5e70f576453fae76df7fd7e846a5a4b7f8bebdc00acc80bce9d20567ff712e3348260d5797200650a6c234b5b504a4801bcef98a0e9b9f971917c55342d4f03caf6d880b921b2895a002b6e44490796") epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x5}) 03:37:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000040)={0x100000001, 0x6, 0x8001, 0x402}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = shmget(0x0, 0x2000, 0x1, &(0x7f00000f7000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000001c0)={0x8, 0x8}) delete_module(&(0x7f00000000c0)='{.\\mime_type$\\\x00', 0x800) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x5927) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_NET={0x74, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x22e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffe1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4801) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000bb2000/0x1000)=nil, 0x1000) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x50dff7e, 0x9, 0x3}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) 03:37:43 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x13fffffe, 0xffff) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x22c82a8, 0x8000) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x100, 0x4) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r2 = socket$inet(0x2, 0xf, 0xd82a) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}}) 03:37:43 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x42) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, [0x3cb1, 0x3, 0x401, 0x7, 0x8001, 0x3, 0xffffffffffff8000, 0x5, 0x7, 0x8, 0x9, 0x100000001, 0x1, 0x7, 0x6]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={r2, 0x2, 0x0, 0x401, 0x65e4, 0xfff, 0xf13, 0x10001, {r3, @in6={{0xa, 0x4e22, 0x9, @local, 0x10001}}, 0x1fdc, 0xd3d, 0x1, 0x0, 0x800000000}}, &(0x7f0000000380)=0xb0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = dup3(r0, r4, 0x0) getsockname$ax25(r5, &(0x7f00000001c0)={{0x3, @null}, [@netrom, @rose, @default, @netrom, @remote, @netrom]}, &(0x7f0000000240)=0x48) 03:37:43 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = dup2(r0, r0) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10002008}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 541.444410][T30449] binder: 30446:30449 unknown command 0 [ 541.492013][T30533] binder: BINDER_SET_CONTEXT_MGR already set [ 541.505557][T30449] binder: 30446:30449 ioctl c0306201 20000140 returned -22 [ 541.579688][T30533] binder: 30446:30533 ioctl 40046207 0 returned -16 [ 541.586286][T30565] binder: 30446:30565 BC_INCREFS_DONE node 612 has no pending increfs request [ 541.586624][T30565] binder: 30446:30565 Release 1 refcount change on invalid ref 1 ret -22 [ 541.607562][T30565] binder: 30446:30565 BC_ACQUIRE_DONE node 612 has no pending acquire request [ 541.787033][ T7764] binder: release 30446:30449 transaction 611 out, still active [ 541.794841][ T7764] binder: unexpected work type, 4, not freed [ 541.804642][ T7764] binder: undelivered TRANSACTION_COMPLETE 03:37:44 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100), 0x8) listen(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 03:37:44 executing program 3: r0 = socket$inet(0x2, 0xf, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='vxcan1\x00', 0x10) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1]], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x80000000000001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 03:37:44 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xc9, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x103b0e93b836670f, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x14) futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, &(0x7f0000000080), 0x0) 03:37:44 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x4) 03:37:44 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:44 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:44 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 541.966579][T30581] binder: 30572:30581 unknown command 0 [ 541.995512][T30581] binder: 30572:30581 ioctl c0306201 20000140 returned -22 03:37:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x11180, 0x0, 0x0, 0xe4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000340)={0x6, @win={{0x8, 0x9, 0x9, 0x3f}, 0x4, 0x3, &(0x7f0000000200)={{0x9, 0x0, 0xf400000000000000, 0x9}, &(0x7f0000000140)={{0x4, 0x10000, 0x8001, 0x4}, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x8}}}}, 0x7, &(0x7f0000000240)="8d8020c248a4f9de70431f659b233cc9b0d510ddb691c8033b03398cf19c7b3671c391ef6382e9077b591072aa2396db9939076091ed8283f6ef7c9d8137b8b802089dedc08e85f1514d6ecb582bb69deccc3743c2f610e3d1c0c037edb16e0413d09c836ca97c3ee73aaacecbe2fdd9a4d209b18f6e22c4b77ab44d828fb327cc8175da9c5f4433a0b9a8f5fbd7cb09af3d5b20c27d6f167c2e35b49f3190c628797cab7ab76f374459ad4d5b7e8e2920c205de056d603a8d1dfb17aa5ef305baf1995d44c0f3715d853980b9f99db3044011ad96e224945e761115507783cc242503e9f7134501a819d0d290e840", 0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x1, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f00000005c0), 0x0}, 0x70a) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) 03:37:44 executing program 0: socket$nl_route(0x10, 0x3, 0x0) [ 542.032752][T30586] binder: BINDER_SET_CONTEXT_MGR already set 03:37:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x2) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x102420}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64002511ffffff7f000000000000000c0002000800080000000020"], 0x3}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) [ 542.086777][T30586] binder: 30572:30586 ioctl 40046207 0 returned -16 03:37:44 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='timers\x00') r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x2, 0x9, 0xac4, 0xffffffff, 0x0, 0x6, 0x3001, 0x4, 0xfffffffffffff801, 0x1, 0x80000000, 0x5, 0x3, 0x3, 0x6, 0x9, 0x6, 0x1f, 0x7f, 0x80000001, 0x3, 0xaa5, 0x909b, 0x1, 0x7fffffff, 0x4, 0x3, 0x4af, 0x792dafb0, 0x6, 0x1ff, 0x200, 0x9, 0x75d, 0x3f, 0x1f, 0x0, 0x4, 0x0, @perf_config_ext={0x10001}, 0x200, 0xffffffffffff213a, 0x6, 0x7, 0x8, 0xc94, 0x2}, r3, 0x2, 0xffffffffffffffff, 0x2) fallocate(r2, 0x8, 0x0, 0x8000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000180)={0x7, 0xfffffffeffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) 03:37:44 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:44 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) fchmod(r0, 0x40) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000000)={0x6, 0x8, "17d1faefd2b485ff"}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x2, 0x1, 0x800, 0x400, 0x5}, 0xc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 542.235473][ T7764] binder: release 30572:30591 transaction 614 out, still active 03:37:44 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000180)=""/7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') [ 542.453476][T30615] binder: 30609:30615 unknown command 0 [ 542.493673][T30622] binder: BINDER_SET_CONTEXT_MGR already set [ 542.534964][T30615] binder: 30609:30615 ioctl c0306201 20000140 returned -22 [ 542.553472][T30622] binder: 30609:30622 ioctl 40046207 0 returned -16 03:37:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) socket(0x400000000010, 0x3, 0x0) write(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0xec) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x10000) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000001c0)=0x54) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_ifreq(r3, 0x8923, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03Z\x00\x02\xe6\x03\xca\x00', @ifru_mtu=0x1}) 03:37:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000000)='cmdline\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x5, 0x2a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) 03:37:45 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000080)={0x6, 0xac5, &(0x7f00000004c0)="815abbe97f7a36bb8ac1abd532c4d9ab88665949cb567e9b67ee9c11c84e0718a5dc9c7929109e3c446b36b760dbccca204253a7c84fe4fa69e8cc47277eac7bcd1aa14c49086252159caf32f1ba0e440d43616bbfcf747bdc27b61f3081038db6533684e46212b622c523a50e9fc3c912df3d31a5b18e81b09a3d6ae9b86437753a614abc6ed6fb7cfa4783d6e6d628aa6bb7ae0ea3615fdf2f76442921a5b22d924a90c5ffcd29ce44b6b2f4d61c4e04b98d22666e97528dbb1b672be57b6e906c6441cf88cd61771a5a0b33c969781874095937032d96f66f9f2e330c482f07b748540d46a08cc8cc7208", &(0x7f0000000380)="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", 0x19c, 0x7528c6c2111cebe0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000280)={0x1, 0x7, "b3a02cfb9acc408f3c5fda1fb39e46f77d9319a1d37f897654cb2e159f09d440", 0x5, 0x1ff, 0x10001, 0x0, 0x20}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x6c, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xb650, 0x8, 0x4, 0x3]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x6c}}, 0x54) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000840)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) accept4(r2, &(0x7f0000000980)=@can={0x1d, 0x0}, &(0x7f0000000a00)=0x80, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000c00)=0xe8) getsockname$packet(r2, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'veth0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000e00)=0xe8) getsockname$packet(r2, &(0x7f0000000e40)={0x11, 0x0, 0x0}, &(0x7f0000000e80)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000001000)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001040)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000001140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001180)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000001280)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f00000012c0)={0x600, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1c0, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffda56}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r10}, {0x124, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1f4, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x3, 0x7fffffff, 0xfffffffffffffffa, 0x2}, {0x0, 0x100000000, 0x81, 0x33d}, {0x73eb, 0xfb0, 0x9, 0xffffffff}, {0x7, 0x0, 0x4, 0xfffffffffffffff9}, {0x7f, 0xfffffffffffffffc, 0x3ff}, {0x7, 0x5, 0x7a, 0x6}, {0x8, 0xcd, 0xbb4, 0x80000000}, {0x9, 0xfffffffffffffffa, 0x4, 0x8}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}]}, 0x600}, 0x1, 0x0, 0x0, 0x10}, 0x50) 03:37:45 executing program 0: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x1, 0xfffffffffffffd4e, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) recvfrom$unix(r1, &(0x7f0000000040)=""/37, 0x25, 0x21, 0x0, 0x0) connect$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e) lsetxattr$security_evm(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "5bcc9b352395132399a9d6e29847422c0412500f"}, 0x15, 0x3) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='9p\x00', 0x82, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@cache_mmap='cache=mmap'}, {@version_u='version=9p2000.u'}, {@cachetag={'cachetag'}}], [{@euid_gt={'euid>', r2}}, {@obj_user={'obj_user', 0x3d, '!'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'cpuset#eth0mime_typelo!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'iso9660\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 03:37:45 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='timers\x00') r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x2, 0x9, 0xac4, 0xffffffff, 0x0, 0x6, 0x3001, 0x4, 0xfffffffffffff801, 0x1, 0x80000000, 0x5, 0x3, 0x3, 0x6, 0x9, 0x6, 0x1f, 0x7f, 0x80000001, 0x3, 0xaa5, 0x909b, 0x1, 0x7fffffff, 0x4, 0x3, 0x4af, 0x792dafb0, 0x6, 0x1ff, 0x200, 0x9, 0x75d, 0x3f, 0x1f, 0x0, 0x4, 0x0, @perf_config_ext={0x10001}, 0x200, 0xffffffffffff213a, 0x6, 0x7, 0x8, 0xc94, 0x2}, r3, 0x2, 0xffffffffffffffff, 0x2) fallocate(r2, 0x8, 0x0, 0x8000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000180)={0x7, 0xfffffffeffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) 03:37:45 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x0, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 542.832675][T30735] binder: 30733:30735 unknown command 0 03:37:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x3f, 0x2, 0x800}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20800) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) getsockname$netlink(r3, &(0x7f00000000c0), &(0x7f0000000180)=0xc) 03:37:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) recvfrom(r4, &(0x7f0000000080)=""/127, 0x7f, 0x22, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x4068aea3, &(0x7f00000002c0)={"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"}) [ 542.885168][T30735] binder: 30733:30735 ioctl c0306201 20000140 returned -22 [ 542.901921][T30745] binder: BINDER_SET_CONTEXT_MGR already set 03:37:45 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:45 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='timers\x00') r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x40000) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x2, 0x9, 0xac4, 0xffffffff, 0x0, 0x6, 0x3001, 0x4, 0xfffffffffffff801, 0x1, 0x80000000, 0x5, 0x3, 0x3, 0x6, 0x9, 0x6, 0x1f, 0x7f, 0x80000001, 0x3, 0xaa5, 0x909b, 0x1, 0x7fffffff, 0x4, 0x3, 0x4af, 0x792dafb0, 0x6, 0x1ff, 0x200, 0x9, 0x75d, 0x3f, 0x1f, 0x0, 0x4, 0x0, @perf_config_ext={0x10001}, 0x200, 0xffffffffffff213a, 0x6, 0x7, 0x8, 0xc94, 0x2}, r3, 0x2, 0xffffffffffffffff, 0x2) fallocate(r2, 0x8, 0x0, 0x8000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000180)={0x7, 0xfffffffeffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) [ 542.932882][T30744] : renamed from eql [ 542.994349][T30745] binder: 30733:30745 ioctl 40046207 0 returned -16 03:37:45 executing program 3: r0 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000fc0)={0x2, &(0x7f00000009c0)=[{}, {}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000880)=0x3) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000080)=0xfffffffffffffec0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f0000000f80)) r8 = dup3(r5, r1, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r8, 0x40086432, &(0x7f0000000780)=0x80000000040006) getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000380)={@ipv4={[], [], @remote}, 0x2a, r9}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, &(0x7f0000002640)) r10 = dup2(r6, r4) sendmsg$netlink(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={0x18, 0x1, 0x1, [r10, r3]}], 0x18}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) fcntl$setown(r10, 0x8, r7) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r11, 0x3, 0x10}, &(0x7f0000000180)=0xc) 03:37:45 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x10000) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080)=0x2, 0x4) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80000, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000180)={0xffffffffffffff97, 0x7ba6fc2d, 0xffffffffffffffc1, 0x7, 0x4}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6008000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x102, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0xe5, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:45 executing program 0: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x1}, 0x18) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000180)) r1 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="c0a446c6d81d10ccc0b8c4f064c3444ad03b9c7d49c042054353648e8d948f5147cd193c1be641ae4d1bcd5b62aed56e93315640de70b0cdc0bffdc53f85493e51c0fd249e224b150dfaf8072789f35ee7373308b840fb6a6597127bb0a4f28da16766ef3dbc8104888c6689990be7b486a6c05d69f8c70000000000000000") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000002c0)) ioctl(r2, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000300)='./file0/../file0\x00', 0xe800, 0xaaaaaaaaaaaaab6, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x10) r3 = creat(&(0x7f0000000880)='./file0/f.le.\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getgroups(0x2, &(0x7f0000000480)=[0xee01, 0xee00]) mount$fuse(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000003c0)='fuse\x00', 0x1000020, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}], [{@audit='audit'}, {@obj_user={'obj_user', 0x3d, '-'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}]}}) mkdirat(r4, &(0x7f0000000740)='./file0\x00', 0x0) mkdirat(r4, &(0x7f0000000580)='.//ile0\x00', 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) renameat(r4, &(0x7f0000000240)='.//ile0\x00', r4, &(0x7f0000000140)='./file0/../file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8947, &(0x7f0000000100)={'ip_vti0\x00'}) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) write$P9_RREAD(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xd4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)='./file0/f.le.\x00', 0xe, 0x2) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000006c0)={0x5, 0x0, 0x4, 0x400000, {0x0, 0x7530}, {0x3, 0xa, 0x4, 0xfffffffffffffe00, 0x0, 0x80000001, "0f603f3e"}, 0xe4, 0x4, @fd=r3, 0x4}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000280)={0x0, 0x0, {0x3b00}}) 03:37:45 executing program 5: unlink(&(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002000815fe45ae1871850ff07000000000000000000230000000e9c00000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 03:37:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @multicast2}, 0x10) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) close(0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000000c0)=0x3) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0x3ff, 0x3}) syz_init_net_socket$ax25(0x3, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x5, 0xd63) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) accept(0xffffffffffffffff, 0x0, 0x0) 03:37:45 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x0, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 543.351265][ T7707] binder: release 30733:30735 transaction 617 out, still active [ 543.370594][ T7707] binder: unexpected work type, 4, not freed 03:37:45 executing program 3: ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)={0xfa, "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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0x10026) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}], 0x2}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) [ 543.403975][ T7707] binder: undelivered TRANSACTION_COMPLETE [ 543.458825][T30882] Unknown ioctl -1073191926 03:37:45 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:45 executing program 5: r0 = socket$inet6(0x10, 0x40000000000803, 0x3) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="550000001e007f5300fe01b2a4a20006000000a84308910000000800090009000c0000dc9b131338090000009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d40000000000000000004800009535", 0x55}], 0x1}, 0x0) [ 543.487437][T30885] binder: 30884:30885 unknown command 0 [ 543.487929][T30882] Unknown ioctl 1074835114 [ 543.535879][T30892] binder: BINDER_SET_CONTEXT_MGR already set [ 543.559882][T30885] binder: 30884:30885 ioctl c0306201 20000140 returned -22 03:37:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name, 0x10) r2 = socket(0x1b, 0x5, 0xd2d) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0xd04, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg(r2, &(0x7f0000316000)={&(0x7f00000001c0)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) [ 543.598780][T30892] binder: 30884:30892 ioctl 40046207 0 returned -16 [ 543.636467][T30899] binder: 30884:30899 Release 1 refcount change on invalid ref 1 ret -22 03:37:46 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)={0x5}) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) 03:37:46 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000480)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0/file0/file0\x00', 0x14, 0x2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280), 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESDEC=r1]], 0x8}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1b1, 0x400000000074) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) bind$x25(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)) rmdir(&(0x7f0000000000)='./file0/file0\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) readahead(r0, 0x7fff, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) 03:37:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in=@multicast2}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001008}, 0xc, &(0x7f0000000300)={&(0x7f0000003340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000010}, 0x5) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm_plock\x00', 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000005c0)=0x9, 0x4) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = dup3(r0, r0, 0x0) renameat(r2, &(0x7f0000000400)='./file0\x00', r3, &(0x7f00000004c0)='./file0\x00') capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000500)={'NETMAP\x00'}, &(0x7f0000000540)=0x1e) io_submit(0x0, 0x2, &(0x7f0000002280)=[&(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x3102, r4, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffff9c}]) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f00000003c0)=[0x40, 0x9]) syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x40000a, 0x20000) syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x6, 0x10000) 03:37:46 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x0, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 543.817122][ T7707] binder: release 30884:30899 transaction 620 out, still active [ 544.024616][T31029] binder: 31025:31029 unknown command 0 [ 544.054853][T31029] binder: 31025:31029 ioctl c0306201 20000140 returned -22 [ 544.143923][T31194] overlayfs: filesystem on './file0' not supported as upperdir 03:37:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) ioctl$void(r0, 0x5450) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$rose(r2, 0x104, 0x1, &(0x7f00000004c0)=0xfa, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40c080, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x8, @pix_mp={0x0, 0x4, 0x31324d59, 0x5, 0xc, [{0x1, 0x9}, {0xcdb}, {0x8, 0x20}, {0x7, 0x4}, {0x5, 0x1ff}, {0xbf99, 0x3}, {0xa27, 0x7fffffff}, {0x9}], 0x6, 0x1, 0x6, 0x3}}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x34010}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/112, 0x7fffef4a}, {&(0x7f0000000340)=""/249, 0x20000439}], 0x4}}], 0x1, 0x0, 0x0) 03:37:46 executing program 3: lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) mount$9p_virtio(&(0x7f0000000000)='&em0pvmnet0-\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=virtio,', {[{@noextend='noextend'}, {@access_any='access=any'}, {@cache_mmap='cache=mmap'}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@loose='loose'}, {@afid={'afid', 0x3d, 0x3}}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x1d}}, {@appraise_type='appraise_type=imasig'}, {@fsmagic={'fsmagic'}}, {@fowner_gt={'fowner>', r2}}, {@uid_lt={'uid<', r3}}]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x4000006}]}) 03:37:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x80, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/125) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0xc0045878, 0x0) 03:37:46 executing program 2: r0 = epoll_create1(0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x1, 0x7e5aa21f, 0x8, 0x9d3, 0x6, 0x3, 0x8, {0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0xfffffffffffff001}}, 0x4, 0x4, 0x0, 0x1f, 0x8}}, &(0x7f0000000400)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e21, 0xb607, @ipv4={[], [], @broadcast}, 0x7fffffff}}, 0x1000, 0xffffffffffffb8e2, 0x2, 0x4, 0x69}, 0x98) r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x210, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x200) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xffffffffffffff00, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6, 0x800}, 0x8) r7 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:46 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x104, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') restart_syscall() sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="31000008000000000000030000002dc612346af8f4aacb7bb254746d9a0d82f8c12c144e28d6cc6503ceb54553a8dc6aa6d0f6a51f36a8a35633c80870144166d363d859c2c7941c8b9ff6cc2ec65a4d5e0b978886db2585307faae59ba62fc3e3ea3028a6d3aeb95c2b65be88575de74573452097a5b7954b6f4d6f65"], 0x14}}, 0x0) 03:37:47 executing program 5: r0 = socket$inet(0x10, 0x3, 0x104) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="24000000200007041dfffd946f610500020000001f00000000000800080017000400ff7e", 0x24}], 0x1}, 0x0) 03:37:47 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x107601, 0x0) fcntl$addseals(r0, 0x409, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x1) 03:37:47 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:47 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x104, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:47 executing program 5: r0 = socket$inet(0x2, 0x5000000000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000a40000)={0x2, {{0x2, 0x1, @multicast2}}}, 0x88) close(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x50000, 0x0) write$nbd(r1, &(0x7f0000000180)={0x67446698, 0x0, 0x1, 0x3, 0x1, "768185eb56a99ba1fa24f6529a782fb3c4ae6b8d43735a3f77166cee3fe1c9c9d10c0a5b5ed6bc4b66b1f45d12c5a53062cfdd338613bcc8db288d07d3247be9e4f33e83de2d2fdacfbcf819243ab629f9007b547146a9761f33fbb06ce40bc4f941db88"}, 0x74) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000040)=0x8) 03:37:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'team_slave_1\x00'}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000900)={0x0, @empty, @multicast2}, &(0x7f0000000940)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000346fc8)=ANY=[], &(0x7f0000f6bffb)='GP\x18\x13', 0x0, 0xfb, &(0x7f0000000140)=""/251, 0x40f04, 0x0, [], r2}, 0x48) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000100)={0x4, 0x0, 0x100a, 0x9, 0x40, {0x8, 0x4}, 0x1}) [ 544.844236][T31368] binder: 31367:31368 unknown command 0 [ 544.861644][T31368] binder: 31367:31368 ioctl c0306201 20000140 returned -22 [ 545.243133][ C1] net_ratelimit: 26 callbacks suppressed [ 545.243143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.254677][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:47 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f9, &(0x7f0000000200)={'sit0\x00'}) 03:37:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x56b) r2 = accept$alg(r1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x80, 0x571f02) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x143, &(0x7f0000000080)=[@op={0x18, 0x117, 0x2}], 0x18}], 0x4924944, 0x0) 03:37:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4000400448ca, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vsock\x00', 0xc0c00, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001040)={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000010c0)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000002100)=0x1008) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000000)="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") ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000002140)={0x8, "3728da4bae9cf79ff354c3d9e84895b5ce29e43240bbfe544d34c39608088417", 0x1, 0x1}) 03:37:47 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x2}, {r1}, {r0, 0xc}], 0x3, &(0x7f0000000100)={r3, r4+30000000}, &(0x7f0000000180)={0x8}, 0x8) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 03:37:47 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x104, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000540)="0adc1f123c123f3188b070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1d) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x2}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x800000000001f, r1, 0x0, 0x0) [ 545.403175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 545.403222][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 545.409025][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 545.414847][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 545.426284][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 545.432154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 545.437964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 545.443852][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:37:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003a0081aee4050cecdb4cb9040a485e510befccdf7f3e9cf0758ef900e1cf3aebb1cb4c100c0003720000", 0x2e}], 0x1}, 0x0) recvmsg(r2, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x22) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl(r0, 0x81000008912, &(0x7f0000000040)="0adc1f123c40a41d88b070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x48000, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x0, 0x200) bind$rds(r6, &(0x7f0000000540)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x10000807}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f0000000280)={0x7a, "6a009af045f4e0f9589f69b28d7db5522b8e409326a46048019095bc731e15f3b15d58848812a2a43b2d99e872e14ec145057568c1dd8069ab4b86a98704f0b96c6a6a80897b4251e3c78b2237348ed32ed0c37cee34de64b79f0259aa8284a0fa9d346e8ea0bde0a45f19778acf68b33b1c717a723901d37135abbb0d7e6613"}) r8 = msgget(0x3, 0x200) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f00000004c0)=0x3) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000400)={{0x2e, @multicast1, 0x4e24, 0x4, 'none\x00', 0x8, 0x5, 0x2b}, {@local, 0x4e23, 0x12000, 0x29, 0x8, 0x4}}, 0x44) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x1) msgctl$IPC_STAT(r8, 0x2, &(0x7f0000000580)=""/124) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) sched_setattr(r9, &(0x7f00000003c0)={0x32, 0x3, 0x0, 0xa91, 0x4, 0x7fff, 0x26d, 0xff}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000340)=0x1) bind$rose(r7, &(0x7f0000000480)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) ioctl$TUNSETLINK(r5, 0x400454cd, 0x201) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000000c0)={'eql\x00%\x00\xa9[\b`\x00\x00\x00\x00\x00\x02', @ifru_mtu=0x1}) [ 545.558476][T31433] Unknown ioctl -1070311871 [ 545.601238][T31391] binder: 31388:31391 unknown command 0 [ 545.636370][T31391] binder: 31388:31391 ioctl c0306201 20000140 returned -22 [ 545.643911][T31507] binder: BINDER_SET_CONTEXT_MGR already set [ 545.643929][T31507] binder: 31388:31507 ioctl 40046207 0 returned -16 [ 545.645020][T31507] binder: 31388:31507 Release 1 refcount change on invalid ref 1 ret -22 03:37:48 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x30, @bcast, @netrom={'nr', 0x0}, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}) 03:37:48 executing program 0: clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x89, 0x0, 0x0, 0xfffffffffffffeff}, 0x1c) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x2000) ioctl$TCSBRKP(r3, 0x5425, 0x7d) fdatasync(r2) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000000c0)={0xff, 0x0, 0x10000, 0x1ff}) pread64(r4, &(0x7f00000001c0)=""/26, 0x1a, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, &(0x7f0000000100)={0x100000001, r5}) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0xb) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000240)={0x8000000, 0x4, 0x28}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x401, 0x0) 03:37:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x100000000, 0x8000) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000200)=ANY=[@ANYBLOB="0008000000c761beec0000000300000000000000ffffffff0000000003000000006a37000300000000000000050172000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a496000000000000080000000000000003010609000000000000000000000000000000000000000000000000000000000000000000000000010000000000000001000080000000000900000000000000ffa708e7000000000000000000000000000000000000000000000000000000000000000000000000"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x608700, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={r2, 0xd6, "72381cf2baab0151e14ef3d3cac898a9ff447a5c3f66d92fc3e06e4d960e5fde2900348cc027555b190f3096ef79b99284a00ea325c8faba27c47983d88411a0d3444875a97081c497084477f265a2ad6a6d14c503fe82baa6b15c0c992992fa0b7f6ac3a6f9b0479e3049b1b92e25a7fac339d988053f489a5a06c39dd482bf09ccfd6452e22363073099cd5c075d2121a454fa5af839c33c4c3c78bb344f2aa5b66bea5d523f49810260b9b62f09f10aef719e858df98081c5d46572211e84a078e8ef1321262e290fc9e80fd3"}, &(0x7f0000000140)=0xfffffffffffffcf4) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000100)={0x2c, 0x3, 0x0, {0x4, 0xb, 0x0, '/dev/loop#\x00'}}, 0x2c) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0x100) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) connect$bt_l2cap(r3, &(0x7f0000000000), 0xe) r4 = dup2(r3, r3) getpeername(r4, 0x0, &(0x7f0000000340)) 03:37:48 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x10c, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:48 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1e0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="070000000000000002004e237f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000700000002004e21ac14141d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061e290668820f5796477de375e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000500)={0x42f0f000, 0x0, "b5d58276f110fb4377dab9e1cda1878e8a96fd44e8854e2a80f025380fb35c43"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x4}, 0x8) [ 545.918483][ T7764] binder: release 31388:31507 transaction 623 out, still active 03:37:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400880, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000a40)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc1946485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ea4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff5301000000c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c30963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7a19fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0x7, 0x1f, 0x5d, &(0x7f0000000300)="8ed67f49e32b57e1f25d2f887b3d84b820a61c14a64ae73ee5ddba71bf5d8007b68581532b4dde5e2f0119bd0949af725bacde822d3faf43601870c7cf5e389f40b2ac618292fc5f0f4b188abe0b9062d5a0d13ec98c259d9c3bb8893a"}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmdt(r5) 03:37:48 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40003) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x4, 0xfffffffffffffff9, 0x0, 0xfdfdffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x100) 03:37:48 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bond_slave_1\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1b8, 0xffffffffffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x80}, 0x8) [ 546.066898][T31651] binder: 31647:31651 unknown command 0 [ 546.112382][T31651] binder: 31647:31651 ioctl c0306201 20000140 returned -22 [ 546.132830][T31711] binder: BINDER_SET_CONTEXT_MGR already set [ 546.191155][T31711] binder: 31647:31711 ioctl 40046207 0 returned -16 03:37:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x7}}, 0x5, 0x8, 0x9, 0x3, 0x40}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000380)={r3, 0x1f}, &(0x7f0000000900)=0x8) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r2, &(0x7f0000000200)={0x18, 0xd, 0x2, {{0x80, 0x0, 0x3}, 0x7}}, 0x18) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x100) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f0000000980)=0x400, 0x4) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x69, @remote, 0x4e24, 0x200000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6d6177676c6500000000000000000000002a00c887c3ef98f91534d2cae600000000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff000000001e0000000000002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda5784f6d0f424ca43a1d67ff800f3a59f24753be8dbff3fdfd1340a96d81f57929700000000"], 0x1) close(0xffffffffffffffff) dup3(r4, r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002100290f0002001000000000020000000000000000fda4549b8d3f1ee5f4b600", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) 03:37:48 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_create1(0x80000) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:48 executing program 1: symlink(0x0, &(0x7f0000000140)='./bus\x00') setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@broadcast, @loopback}, &(0x7f0000000380)=0x8) fchdir(r0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000003c0)="20d60bef4898686d679e3e516242ef5990") syncfs(r0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r1, r3, 0x0, 0x1000003) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000040)='msdos\x00'}, 0x30) ioprio_set$pid(0x1, r4, 0x9b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000cc0)="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", 0x256) sendfile(r5, r6, 0x0, 0x10000) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000700)=ANY=[@ANYBLOB="030094048cecfc6876adde2ad34c97bcaef75fb599a6aaa07b14adf177a27ec6f66ae6334353962e2c51da186d23bb6e4b76de2e7ed998e5f266b3ee57455dec49d57832d54b7a0fa6c52cce6790b8304ca53ae37f62c71ac66e39f453c32ae81e0860dfc11a6a36e8d56ec8afaa5bfe08dcf005ff86978f46e9302751a320ff9d4a401a2b98427e7f89af1d0669509f3681730745ba2d62a49ecf603f185c9bd8ac1abb5d7acf769b21f562"]) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000240)="0af51f023c12") syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) 03:37:48 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x10c, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 546.437967][ T26] audit: type=1800 audit(2000000268.866:11863): pid=31854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16833 res=0 [ 546.462732][T31856] bridge0: port 3(gretap0) entered blocking state 03:37:48 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000480)=ANY=[@ANYBLOB='0'], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) [ 546.489178][ T26] audit: type=1804 audit(2000000268.876:11864): pid=31854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir174992461/syzkaller.DObiFc/589/file0" dev="sda1" ino=16833 res=1 [ 546.492783][T31856] bridge0: port 3(gretap0) entered disabled state [ 546.537288][T31859] binder: 31851:31859 unknown command 0 03:37:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) fchdir(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000400)='overlay\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, 0x0) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000100)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000080)=0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:37:49 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff94, 0x20900) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 546.560797][T31859] binder: 31851:31859 ioctl c0306201 20000140 returned -22 [ 546.661337][T31856] device gretap0 entered promiscuous mode 03:37:49 executing program 5: getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2) fsetxattr$trusted_overlay_origin(r0, 0x0, &(0x7f0000000280)='y\x00', 0x2, 0x1) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x12, 0x10000000b000200}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x2) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000100)={@mcast2}, &(0x7f0000000180)=0x14) time(&(0x7f00000001c0)) sync() 03:37:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x440000, 0x0) sendmsg$rds(r0, 0x0, 0x0) recvfrom(r1, 0x0, 0x230, 0x0, 0x0, 0xd9) 03:37:49 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:49 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000500)='/dev/sg#\x00', 0xffffff7ffffffffb, 0x2020ff) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ipddp0\x00', 0x200}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x315, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x11) r4 = request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000480)='/dev/loop#\x00', 0xfffffffffffffff8) keyctl$set_timeout(0xf, r4, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x1) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(r1, 0x4c03, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) 03:37:49 executing program 3: r0 = memfd_create(&(0x7f0000002000)='/{\x06\x001ppp1%:em0\xf9', 0x0) timer_create(0x0, 0x0, &(0x7f00000005c0)) write$binfmt_elf64(r0, &(0x7f0000002040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40}, [{}]}, 0x78) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001000)={{}, {0x0, 0x989680}}, 0x0) 03:37:49 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x10c, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:49 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) write(r0, &(0x7f0000000000)="bfadc5", 0x3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:49 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000240)={{0x0, 0x1, 0x80, 0x46, '\x00', 0x1}, 0x0, 0x20000160, 0x9, r4, 0x7, 0x2, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x03\x00', &(0x7f0000000440)=['/proc/sys/net/ipv4/vs/snat_reroute\x00', ']\x00', '^lowlan0vboxnet0\x00', 'selinux@\x00', 'bdev\x00', '\x00', 'ip6gre0\x00'], 0x4d, [], [0x3, 0x800000000000, 0x3, 0x8000000000100]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x2004e21}, 0x10) getgid() r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, &(0x7f00000004c0)={@remote}, 0x0) dup2(r2, r0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @empty}, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') timerfd_create(0x7, 0x80080000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c) timer_create(0x4, &(0x7f0000000180), 0x0) fcntl$getown(r2, 0x9) rt_sigqueueinfo(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) socket$l2tp(0x18, 0x1, 0x1) 03:37:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) fallocate(r0, 0x20, 0xffff, 0x93ca) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="240000001e0007031dfffd946f610500070000000500000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 547.206968][T32041] binder: 32039:32041 unknown command 0 [ 547.252722][T32108] binder: BINDER_SET_CONTEXT_MGR already set 03:37:49 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) add_key$user(&(0x7f0000000640)='user\x00', 0x0, &(0x7f0000000940), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000009c0)=[@mss={0x2, 0x6}, @window={0x3, 0x1ff, 0x1}, @timestamp, @sack_perm, @window={0x3, 0x2, 0x800}, @window={0x3, 0x1, 0x7}], 0x6) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f0000000680)='trusted.overlay.opaque\x00', &(0x7f0000000800)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7, 0x60}}], 0x48, 0x7}, 0x0) setsockopt(r1, 0x6, 0x1, &(0x7f00000008c0)="5878a5efa0fceea020a445ae3a6938bb003dc14df5cd49a8025eab7320ec8b3ede6324a95ed865e6a458719c4c0a73922616e96eae9e0f21d9f2efd793068bc52edac10ae124a7b92ea7b4d9e86dce501bee6a1a7f1c9b53f90a491194a5439f0aa8a9659b41c5c8fa006b319af511b5e6346db51aae296f3613e91f3bf00212b7683d1d0025cb2cf070353ffcee9157c42774d97ea6e41c07b3672dbf266a795da8b0b18415559d42e39660ee1b778df48a53dd2d211d314850cd8340ef271118de70008d072fd3f40c1319de011ba8ad46bb82407aa689d516d8ff03461021afd0f76c699d", 0xe6) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000880)=0x4) [ 547.297095][T32041] binder: 32039:32041 ioctl c0306201 20000140 returned -22 [ 547.330516][T32108] binder: 32039:32108 ioctl 40046207 0 returned -16 03:37:49 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x555}, 0x4) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x80000010}) 03:37:49 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x800, 0x2, 0x5, 0x0, 0x0, [{r0, 0x0, 0x4}, {r0, 0x0, 0xffffffffffff540d}, {r0, 0x0, 0x3}, {r0, 0x0, 0x5}, {r0, 0x0, 0x100}]}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000940)=""/246) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$EVIOCGREP(r0, 0x40047452, 0x0) 03:37:50 executing program 5: socketpair$unix(0x1, 0x805, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x782c}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x16}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x20008080) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000000)={0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000140)="2b3dc5bb0faa06b690bf8465dd8feab10d6acb5dadd46d957fc53d46dd354414485690da80eac16c09128aeecd0e1a5ba912805fe818c3ff9cbc2e40934bf4e4af3f32cd0b8091579899a1bd7cd0b2c081b7bcfe204682e9a3a2a591560aa161af54821c10f5f16950956e6d609224527c04abd5a08c50bbcb10ae1c6d2302c7ee", 0x81, 0x5000000, 0x0, 0x0) 03:37:50 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/158) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0xfffffffffffffd3a}, {&(0x7f00000023c0)=""/125, 0x7d}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000002440)=""/228, 0xe4}], 0x4, 0x4bffffff) 03:37:50 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:50 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet(0x2, 0x6, 0x10000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', r2}) r3 = epoll_create1(0xfffffffffffffffc) close(r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000c85000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000004c0)=[@mss, @sack_perm, @mss, @window, @timestamp], 0x20000000000000a7) sendto$inet(r4, &(0x7f0000000200)="c29f", 0x2, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x101) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x4, 0x7ffffffc}, 0x14) shutdown(r4, 0x1) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, [], [{0xffffffffffffffff, 0x2, 0x5, 0xf75, 0xc7, 0x3}, {0x7, 0x8, 0x4, 0x0, 0xa52, 0x5}], [[]]}) 03:37:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x84002, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x200000000000805, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x100000000, 0x2) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0x1f, 0xffff, 0x90, 0xffffffffffffffff, 0x4, 0x8a47, 0x2, 0x10001}, &(0x7f00000000c0)={0x3, 0x6, 0x0, 0x1cae, 0x3ffc00000, 0xff, 0x8, 0x12}, &(0x7f0000000100)={0xf0, 0xfffffffffffeffff, 0x67b, 0x8, 0xfffffffffffff801, 0xfffffffffffffff9, 0x87, 0x3}, &(0x7f0000000200)={r6, r7/1000+30000}) dup3(r4, r2, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000300)=0x8) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000340)={0x0, 0x9, 0x9, 0x8025, 0x9, 0xb45, 0x76a, 0xff, 0x8, 0x7, 0xfffffffffffffffd, 0xfd}) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x67, 0x10000) 03:37:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001840)='/dev/sequencer2\x00', 0x40000, 0x0) pipe2(&(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000030c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001d80), 0x0, 0x100, &(0x7f0000001f00)={r3, r4+30000000}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001f40), &(0x7f0000003040)=0x60, 0x800) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r2, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(r6) close(r5) 03:37:50 executing program 3: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10080, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) rseq(&(0x7f0000000000), 0x20, 0xfffffffffffffffd, 0x0) 03:37:50 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/4096) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 547.960854][T32245] binder: 32244:32245 unknown command 0 [ 547.994843][T32245] binder: 32244:32245 ioctl c0306201 20000140 returned -22 03:37:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d9a34fff2d847238de8a96cedb1af0ab", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @multicast1}, &(0x7f0000000200)=0xc) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1d0c8d79b39a712b50a9ae01cb53729700000000000000000000000000000000"], 0x20) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/178, 0xb2}], 0x1}}], 0x1, 0x0, 0x0) 03:37:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r1, 0x5}, 0x8) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) 03:37:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x50000, 0x0) r1 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000880)={'syz', 0x1}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff8001, 0x40) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000680), 0x4) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r2, r2}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000200)={&(0x7f0000000100)={'poly1305-generic\x00'}}) fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000000)) sysinfo(&(0x7f00000007c0)=""/154) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x8056d5456aef16d2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) gettid() write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)=0x100, 0x12) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x8}) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000180)={'sy.'}, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 03:37:50 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) setns(r0, 0x34000000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xc000, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000009c0)=0x3f, 0x4) getsockopt$inet_int(r3, 0x10d, 0x2, &(0x7f0000000040), &(0x7f0000000000)=0x1c5) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0xa, 0x30, 0x8d5, 0xc}, &(0x7f0000000540)=0x18) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000001080000"]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={r4, @in6={{0xa, 0x0, 0x1, @loopback}}, 0x8, 0x2}, 0x90) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000001c0)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20000fff}) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0xc020660b, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x7fffffff, 0x0, 0x980000}) fcntl$getownex(r6, 0x10, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r2, 0x0, 0x10, &(0x7f0000000340)='/dev/input/mice\x00'}, 0x30) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f00000000c0)={0x1a, 0x1, 0x5, 0x5, 0xc93, 0x8, @link_local}, 0x10) sendmmsg(r7, &(0x7f0000001380), 0x3fffff1, 0x40) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) sendmsg$can_raw(r5, &(0x7f00000003c0)={&(0x7f0000000140), 0x10, &(0x7f0000000300)={&(0x7f0000000200)=@can={{0x0, 0x7, 0x3, 0x1a15}, 0x3, 0x2, 0x0, 0x0, "bbb4859652287b3f"}, 0x10}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000) 03:37:50 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x2, 0x73) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) bind(r1, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 03:37:50 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:50 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000280)={0x1, 0x6, 0x40, 0x3f}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) close(r1) fgetxattr(r1, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/169, 0xa9) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x5}) 03:37:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x10e755) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0xdc) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) tkill(r2, 0x1) fcntl$setstatus(r1, 0x4, 0x10000000042807) sendmmsg(r0, &(0x7f0000005100)=[{{&(0x7f00000000c0)=@vsock, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="9dcb35465da331ee15be4934e01bca733278eddc4423c3795eceff9c9d5d4db9fca6f8d2fa6c903ec5604ccb640117f2e1e2393144dab8ceab3998c12299a97711e5604fa1bba6e41a3bca67caceee78a8ab2a9824e72ac010f3071c6c7ce7ed5ff8ec14e43f636ebe4fb817eac847d7a20734ae8f2f767b5e9548b1dbda8a89d9d462dd221113ba2ced3a5d4571c435974758318025b2cfaa54ca081a74ff112a65c2560e39393e74afa819bc", 0xad}, {&(0x7f0000000040)="960bd35288475605fd9db2ea3817573f8ef21535", 0x14}, {&(0x7f0000000200)="48f919f487fa891df9ea4b0b378de8abb82ee2192d0b011203cf2fc7890881ba0f6c2398da568ccd493d7cf24ef0ffddbe2f290ecfcd3f6677d71724215f879a548e7873d44d2de2c9de4779fa006b686e8aa794d75f5c038e7225ad3686ac96d4703682f47173967c8015f3fa957a40c896c6651d74d98a4af147ed8d9674", 0x7f}, {&(0x7f00000002c0)="cf2c3886e41578d84dd4354edff50baeb47305c5946e6fcc2cc3956f14e6fe305b06114db3b6e12d77770598768568e565a702a96cfd06694ebc33d02613cad2d6adb6b73002470842f873d1691f853fe87c1d5f9e4a681cbd96e3d295f745a81ff94a2913c0bc5c5c13561e4a2801b8bd0a804324970e053d80b2db0bddbbb49e7d698856ab0c1e8237048e1c8724c6ce8fff8cc51948311ea923c40f8f4e4b01c2d3f0919be27c94b1f3d205eb10898d0433db292c", 0xb6}], 0x4, &(0x7f00000003c0)=[{0x90, 0x0, 0x1, "3e9a78f7ecb2c01b4eb3ffd96ea427adea1eac9c72e525ae9789c87e8b252dc4803368ca48edc5c9b3a50bbc27945a90e85b01f1cd5a442cdbf654b526016fafedc0f1d212126a0a0203fd68b62eb589bb421591b3430e9431d980ce0acaf8e853218f07a0e8ba0808b8328d44cc30f8a46f9b6db2882549727229"}, {0x70, 0x112, 0x7, "dfe9a280000e89f4be046a97d04f61a7132c69929a2e784e3ac1094f46eb4d17f3134656bbcafc560739af3c65c6100020b44870f79682b8e75070d5f4488afc3a1539ec0fe152873b51fc50584313e085e0815f5915a1d6b312002bd47151"}, {0x1010, 0x11f, 0x3, "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"}, {0xe8, 0x10d, 0x8, "b3aae01a473e7f7af39ecb79de82e0e9aaf9b0dc6f19cc6a68537886f26b554a4768ae159728fb7d9ebc9daaaa365cf09950c7cee95f62a40d6248af2e34c5e9feb4a1bfa035cd291e1068847db300dfb06ef9144914b2f29fe9a970686646d6ae3b8d5780908b14cbed93ef19b85ad04586846350e127662b429da8f60a97df182a2c113835af6da658adcb84d5aa1f3c967f868dea2c9e3869c2104cc07ee2e66b445dbb72cc4c7d975b2fb09ac6df3e7f6cdccc0fe0fa03b1cca4a5b6fbcc0914b36e08c3147bf6f7e0e956f3e982c0a40857"}, {0x78, 0x11d, 0x10001, "b001123d384a4aae21fbd6c2349eb3425860042cb01451654629d7807b6733e985e15ffb3a55a50c1d365142542c63fbce58244d1642c54618eb4f1c3a105ad44943006cb3b0ebf51088f707406344322f0bb36bbac30e32b78020cdd606a4136ea255a6"}, {0x20, 0x111, 0x0, "2cb520e126661534d1b72849da503d"}, {0x28, 0x29, 0x80000000, "245371a08a3b813083639a884a0b446b69daf8927550"}, {0x90, 0x107, 0x3, "f8af52be6c80a4aa0779c1edee98e25a565b87633c682233447e7cc03c2cd62e02bdf7d7425ef773d1f634c4d0b53aed8082b91d75890e99d2482d2ec78fc0a404ba5b62c7f508adc756ea2262b39189009aace0524460f1cab87ffdd015c0c3ddafa02bab432ad9b912dabc25f4250e71b50b0c87d51a5670e6dffe5c"}], 0x1348}, 0xd9ca}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001740)="28295e13ee16d70f112feef34748b1761382432caef5fc4bb9a017b5c3003c352071805a831ece61510759fd8adff337a494c880e461112e0420e30ad62b52d6bf65ec257b3304567ccfa215ba0cd06720a6e009d39c3107cbba39e72056f8556bd6569dad0b9c16bec7ead1a330461b8b9606e9c7e216131155820ea02f6b62085c4dbf43c6a8de8784567f584cc71af6ba18b6f3c3dbd83a641c18902c59c791722fcbbfd772255e1d180d32", 0xad}, {&(0x7f0000001800)="c44fe48028816f9b727846ce941e36990f562dba0242adb066faa70e33dad88f1fd1d05ae936cb1e828b7181f67151466a2a6f4d2986edfb60a98d2a961d17cd4d887271bd6aa066a6d366139ac34db3eedf56dc33458840392a5bcca77107a2713ca4550bcfff2d03fbb2ae97509f63db9d43e14c5949", 0x77}, {&(0x7f0000001880)="e27b65c4137a6e6abc2f7b7ff49195f0bb9b56eae41fe8b9e52ec60e3891a96c54cc8fb78a4e1114", 0x28}, {&(0x7f00000018c0)="b18547aaa9329de312311d7e626b2721beeb4d41dc150e31635664091bc14bad3502a457220b1c01afe4b1d54fa438a04803e4ea17f9967c4385114b782c374d87be9b", 0x43}, {&(0x7f0000001940)="8334782dee810cefe96d1b0cb629778ac234767f63b3c5ccc2e2e32ae4c5e8599a3eb664c3ff0f5b29ec915b682ee7c8ae6b0dc73041c137abb3b2946c1ce79e5215ad9bc67db7b42ab144be2f5bebaea5c574ee118296009d4fe77ec53ebfa101fb8c51db9e02c35ff14023bedc30e1ffe5e2f17b7a7d9ffbe0eda1ea082f320894fe5b2a0424cd2d55a57ce07f485ba3794fd0", 0x94}, {&(0x7f0000001a00)="5d06befbf9741edc52bb35789fcf9f6290cba0318a01186a0b110c3cc9e27bc13b5f12619167206cff12662965b2776f28f90f1ac19777989c7ae6948944a0c18f191d1d0aa5ed5992d80e6d9877d58975446a7c9653abb11f95fcf4e788459ecf8999b2760805cd21cfc1cf1a4477389ea76b52dd3a6a4ffe4e8f05e04d946215c3869f22d870625faa192dcbea39096279cd7efae9abb0bafcca84d2ef5905f8220c02a46cbdb1f569ded76fd08d8f817a725b901bf07366f79eddc79181966ea7ed8c1df89378033ed21f3c7f84b161c075c20cdce257cdd4012404162b8382ebe161dc953622ff761d1c7b01d2a8", 0xf0}, {&(0x7f0000001b00)="8d9e08e5b03d65e26d8d7afbd47fb76420c4fe6cf1c95215cb963ac8a23e878cacf65a1eac06e9d94c46ec5812d44e35419731d47f7ea5d459efb8c1d2", 0x3d}, {&(0x7f0000001b40)="9aa2ca917c39a7836dcbd6ee1cc433c90f48c492294733cb86f764e2e3a2dc726691a2ced0d5f79d22e807e192b8f1c35f0d2c44664c7580e014cf412bcc9697d1442074599ab1874b1e2b598231e159f09a88e49dece161c1225eb0ff8a378172ec64b48670910e7091d406fb5510aecf22520bb7cdbbacae35a73ffe3e996b0fe78e84b64772ad63e9bb49b9c7cf0230f73c0585f69b70cbcb489e707fdbc2f94247701e", 0xa5}, {&(0x7f0000001c00)="5182f045507343a4a0a7d2c43bf10b8b66e8032586ac6e7c3dc90a7dffd16b83e54cbdc30954eb54d2f9bbef840352137e330b32b0fe30fc22501fe91a978fc704dd18d1c83f8d6e0a71341abfad02762a28e4ee1b72c58e59ff7461b57f6487c6d5693561ce7e5c4785abf9c384cda5df97d0fbbc4a1ad845f0c80deecdc0839b232a553fea61d76bdab07f218c0a703cf18869725d58234e6026974f7859b24ac290907d8adff82938648c746c00dbedfe969b", 0xb4}, {&(0x7f0000001cc0)="fb1b8811208018d376ea05c3204019a7558c17d9bd465e7fffa6e7675e7c40bf8c4523ce032b4dc9b093377b450e87d74be117ec5ca5860942c7a760f3e76132", 0x40}], 0xa, &(0x7f0000001dc0)=[{0xf8, 0x13b, 0x2419, "d1b3aad0c954657f3bbcf9a7c940c29f8953827f38bb8f5d5541091ea9b97121a986bb7368af42f3b5da4c4484c647e5eeea2e567ca22fda0fb4a1a057ecbc1a1be398ed5969ae048361ca3289b5507be7548ce794af277a415467710653276bee3696602c9d8003c7a7126d030c0cfa4f6b5c3629673a335a93a47b73ae3b9d435db9d640e38c19d6ebcd93c7770ecec6f85c850a6557b628499a3dc1939abb7f35a615f44cb2a10284622eeb30799af3c9e0c61bf06ea7c4ecb260b4455043e01b3b68b3e3596d4fe8a7c21c8c0de62fe5aa923efca1e7adc9f9166d031e9a72673550a0"}, {0xa0, 0x10b, 0xe7, "018c46f7570e5460f301e224c8ba23bc684f0078e43547c3afc95e35ebb678674986391a61d7c4f75441b74eb87810e5f1950a4f3ae56ac505953f48b714c859b02e3c03e516122baffe94141386f63f22f36f24f1ec6dfb23ad25217c1ae5ff618c02d2250dba30f4c8b23d762d55f74dac907df21f150f7d66da14df8390f0756c3668cbb082cdc08ab0665958de"}, {0x80, 0x1ff, 0x9c, "d18bbc2c77506508e76932a7b40c2135828003e0b80a8880907f9b17650c034fec992fe0ea257a7c12880b37e530ad4877ff46ed8d6593c1cf0677c0a9fc7a8d8a400ced090829377f7d98a4289224f3f8e797ae07369cae38936f173b576f90527fc109b7ada952176c55f3f631f1"}, {0x1010, 0x10d, 0xfff, "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"}, {0x1010, 0x10b, 0x2, "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"}, {0xa8, 0x103, 0x0, "8fd11e9b864d1e7e39454d45a2b6500f747787ce5bc94923641bc73781e1e87bf7e9af59c8d80e730e0895b388234318323a57df1f78638ff6c158338e128a7af1cf60ddb44cada24ea97f5dfb266f7f7a101ec957126ef912818a14a798ae150059e44a4cc5a2c81bf626ba0f90bdc475d85906e7aa22449d289c7de93f5e11647f81c605bdfdcf7ca72b78728f6955c711"}, {0x20, 0x116, 0x1000, "2aaf61ebba87c4914f"}, {0x1010, 0x10d, 0x4e, "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"}], 0x3310}, 0x8}], 0x2, 0x4000) 03:37:50 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x9) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 548.477290][T32399] binder: 32398:32399 unknown command 0 03:37:50 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0xfffffffffffffffe) close(r1) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) flock(r1, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)='ns/cgroup\x00'}, 0x30) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') ioctl$FS_IOC_GETFLAGS(r2, 0xb701, 0x0) tee(r2, r2, 0x1000, 0x8) [ 548.524467][T32499] binder: BINDER_SET_CONTEXT_MGR already set [ 548.558986][T32399] binder: 32398:32399 ioctl c0306201 20000140 returned -22 [ 548.619895][T32499] binder: 32398:32499 ioctl 40046207 0 returned -16 03:37:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x5) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0xa00000, 0xff, 0x3, [], &(0x7f0000000000)={0x9909db, 0xba0d, [], @ptr}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000000000030000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d000058eae64f0e4922f5001b0000000000"], 0x30}}, 0x0) [ 548.867769][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:37:51 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:51 executing program 1: syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x100000001) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0xffffffffffffffff, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0xfffffffffffffd42) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$rose(r2, 0x104, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x6}, 0x0, &(0x7f0000000380)={0x1b9}, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0)=0x4, 0x4) syz_open_dev$sndseq(0x0, 0x0, 0x7e) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote, 0x3}}}, &(0x7f00000002c0)=0x84) [ 549.085175][T32722] device nr0 entered promiscuous mode [ 549.114657][T32720] binder: 32719:32720 unknown command 0 [ 549.145617][T32720] binder: 32719:32720 ioctl c0306201 20000140 returned -22 03:37:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x1ffffee1, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x57}}, &(0x7f0000000240)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W>\x86E\x10*\xe7{\x15\xba)%\xdc@\x8f*\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe70BL\x7f=\xc08\xc2\xb4\x85\xfc?8\xec\x93\a[M-\xcc\b\xad\xceP9\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\x1c\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\x87\xbd\xfe\x1b\x1b\xae\xe7\xe4\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x100000, 0x0, [], 0x0, 0x8}, 0x48) 03:37:51 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x5, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000500)=@can={0x1d, 0x0}, &(0x7f0000000580)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x248, r3, 0x200, 0x4, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x22c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xcec}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5d}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r8}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) close(r0) r9 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x7, 0x0, 0x3f}, &(0x7f0000000100)=0x98) ioctl$CAPI_GET_MANUFACTURER(r9, 0xc0044306, &(0x7f0000000080)=0x6e428ffe) ioctl$DRM_IOCTL_ADD_BUFS(r9, 0xc0206416, &(0x7f0000000240)={0x5000000000000000, 0xffffffffffffff69, 0x100000000, 0x3, 0x18, 0x838}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x4000012, 0x2}, &(0x7f0000000680)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000640)='/dev/dmmidi#\x00', 0x3, 0x40) ioctl$sock_ifreq(r1, 0x897f, &(0x7f0000000700)={'veth0_to_bridge\x00', @ifru_ivalue=0x20}) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r2, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r2, 0x2000000000000015) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000006c0)={0x403f, 0x9, 0x80000000003}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mq_notify(r3, &(0x7f00000005c0)={0x0, 0x1d, 0x1, @thr={&(0x7f0000000480)="7069b521047c3a545a09f815b6726abdbbc4f38ee10e5bb6a4864d", &(0x7f00000004c0)="93bb97cd6fd1786218beb79de6bb8506484840bcf9724ae35d1404d24f19db44c67568da7a327a3a2acad0bad93a7a7c417df7a52ed9ad1dec6278f098fed40a33e46c8b1f12912bdf9199285e844157e6ad4034704fdd2bc9e7119092ddd31e9a6f6bace61f225e18b22a223284cf99c050a1623c237eb9fb5aa9d561287e67bd49913366bf197071ab2136b370f4682374eca899f8d08497f57d467b6def0c029889eed28c2cec1d4ec3428f969553ac162e634ed2654acdc03927d9cdbb48dc6df9"}}) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x85b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x1f, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) r7 = dup2(r4, r6) ioctl$CAPI_CLR_FLAGS(r7, 0x80044325, &(0x7f0000000300)) 03:37:51 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x104, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 549.615181][ T375] binder: 363:375 unknown command 0 [ 549.632420][ T375] binder: 363:375 ioctl c0306201 20000140 returned -22 03:37:53 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x5}) 03:37:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x80, 0x0) timer_create(0x6, &(0x7f00000002c0)={0x0, 0x14, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_getoverrun(r2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000280)={0x9, 0x1dc6, 0x10000, @remote, 'ip6gre0\x00'}) ioctl(r0, 0x3f, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x400) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x600401, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f00000000c0)={0xfffffffffffffd1b, &(0x7f0000000140)="f13d736a4007ffd4dd849a5c829b663bfadee406f8adb8649f8969105f5f3e7d27c3292a7f8302982b4a60500ed2f678ce7608487b4bf28a346b218f21fa11e03ad05d4f0380f7dc38a9214b06b93015fe1daf58b21bf3fa61f28cc38f018a0875822d96db6206fe5d070c26e01451f394e67cbccbfeb0c67e5bb359d2bebc00e966acced0f5247d93427f5fbf7c56f92435e0f6e32b40a68ceb8200bfd934b3809fb682d65ea6c480a78f17c09c8090fa7a6068d674392953ae5a8c9f30b40e0b26500097606f895a613876658a4b4a375c103ad269982ab4a05d141ac4a260c8c3d121d2f5862c70ad46f72476dd95e1938657"}) r4 = socket(0x15, 0x80005, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 03:37:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.2MB.max_usage_in_bytes\x00h\xc8\x8a\xa1\xe4\xc6\xb4\x1e\x19\"g\xeb\xaf\xfe\xb4\xa7\xde#^Z\x93\x8b\x981\xd0d\x12\xc7g\xb0\xf9Zb~\xe4\x88\xa0\xd5(\x00\x00\x00\x00\x00\x00\x00\x00\xa6\xbc\x18P\xaf_\x11\xde\x05b$\x9bR\xe4(h\xcd\x11I%\xa4=\xa9\xe1\xcf\xe09\x00a\xd6+\xea\x93\xed\x96\x03\x9e\xf2\x02\x96\x99\xf9?k\x95\xf7\xd14\xb0\xc4\f\xab\xd8\x86\'\xf7<\xbb\xe4W\x0fBI\xf61\xf5\xeat:\xae\x1c\x98\x04M\xf6\x96\xb2\x89\x99\xedeiDK\x90$+_LF|\xfe\xf1b', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890e, &(0x7f00000000c0)="0a0900000000000000b0705958790195b3ce4c83a628c6bdd8447a8aabff4e6cf2aa86d7d35fed41a5891ecd999a89abc826932f91e7f64a11edae1b12073390da719117fb2143fbaf48bdf19e6e61269bd88df1d40926c659e9cfd52d25c8102fd5275e9ec57597e1716dd3806ba502c2562390676207a3dceb17c5ad9f57f7") r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0x78f9, 0x4) 03:37:53 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x104, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xff, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14, 0x80000) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000b80)={@multicast1, @multicast1, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c80)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002180)={0x0, @rand_addr, @initdev}, &(0x7f00000021c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002300)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000002400)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002500)={0x0, @dev, @multicast1}, &(0x7f0000002540)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000025c0)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002780)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000027c0)={'yam0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002800)={'bond_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002880)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002980)={'syzkaller1\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000029c0)={0x0, @dev, @local}, &(0x7f0000002a00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002d80)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000002e80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002ec0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002f00)={'nlmon0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003000)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000003100)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000003140)={@rand_addr, @multicast1, 0x0}, &(0x7f0000003180)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003340)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000003440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003580)={@multicast2, @rand_addr, 0x0}, &(0x7f00000035c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004c80)={'veth1_to_bridge\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000004d00)={@empty, 0x0}, &(0x7f0000004d40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004ec0)={'team0\x00', 0x0}) getsockname(r0, &(0x7f0000004f00)=@hci={0x1f, 0x0}, &(0x7f0000004f80)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004fc0)={'veth1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005000)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000005100)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000006400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006440)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000006540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006580)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000006740)={0x0, @initdev, @broadcast}, &(0x7f0000006780)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000067c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000068c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000006900)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000006a00)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000006a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006a80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000007780)={&(0x7f0000000140), 0xc, &(0x7f0000007740)={&(0x7f0000000d00)=ANY=[@ANYBLOB='l\f\x00\x00', @ANYRES16=r2, @ANYBLOB="04022cbd7000fcdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="4400020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r4, @ANYBLOB="180102005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000900e908010000003b06990700000000000001ff07000000090000ff02000000080081740008000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040002000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff01000008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="ac01020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ffffff7f38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000200000008000100", @ANYRES32=r13, @ANYBLOB="ac0102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000300000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400c0ffffff08000600", @ANYRES32=r16, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400a900000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="ac010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000104000008000600", @ANYRES32=r20, @ANYBLOB="3c00010024000100757365725f6c696e03007000000000000000000000000000000000000000000008000318060000000400042108000600c483747af2fada121c655a73c35a48ec586d0100000000000000e8aa056905d1a5485d3fd737c65c429d1125bca258995de7b09d54126590c0b8c8a8699a8a3cd1403f66d804294c11db6c5c77b09a7f912e3cdcd9d515492edd031def5a85453a51e8c942fc531b6a8000000034a6c0138cc4ea4a42d16df638613b9c04dc48531404f3dd13c983f4122af4097ad0056dae791bffdf8a2eac631063ff5ae4c71dd117716787", @ANYRES32=r21, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c0004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100008008000600", @ANYRES32=r22, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000010000008000100", @ANYRES32=r23, @ANYBLOB="ac0102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400060000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r27, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r28, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000008000100", @ANYRES32=r29, @ANYBLOB="400202005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400faff030540000000f906080509000000670002ff010000008100a304ff0300000500fd9dff07000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400500d00003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r30, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r31, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r32, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004002b93000008000600", @ANYRES32=r33, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r34, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r35, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004004000000008000600", @ANYRES32=r36, @ANYBLOB="08000100", @ANYRES32=r37, @ANYBLOB="440102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r38, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000140004000100ff00060000000010030003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004006462000008000600", @ANYRES32=r39, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r40, @ANYBLOB="08000100", @ANYRES32=r41, @ANYBLOB="800002003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400000000000800070000000000"], 0xc6c}, 0x1, 0x0, 0x0, 0x840}, 0x4010) r42 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_SET_ONE_REG(r42, 0x4010aeac, &(0x7f0000000180)) mq_open(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0xa0, &(0x7f00000000c0)={0x1, 0x0, 0xf2, 0x2, 0x600, 0x6, 0x83, 0x10}) 03:37:53 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80001) close(r0) socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x5eb5) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 551.483160][ C1] net_ratelimit: 24 callbacks suppressed [ 551.483170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.494700][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:54 executing program 5: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2}, {}], {0x4, 0x1}, [], {}, {0x20, 0x2}}, 0x34, 0x3) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000840)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0xc004, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532312c72713d307830303030303030ba33a1b0353030303030303030342c73713d30783030303030303030303017877fbc8b3030303030302c73713d3078303030303030303030303030303030382c73713d3078303030303030303030303030303030302c72713d3078103030303030303030303030301030342c74696d656f75743d30783030303030303030303027f40870a5e9786b6f774ac9", @ANYRESDEC=0x0]) keyctl$assume_authority(0x10, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2842, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x200000af}], 0xf, 0x0) dup(0xffffffffffffffff) write$FUSE_LSEEK(r1, 0x0, 0xfffffffffffffe64) [ 551.565085][ T383] binder: 382:383 unknown command 0 [ 551.623148][ T505] binder: BINDER_SET_CONTEXT_MGR already set [ 551.629844][ T505] binder: 382:505 ioctl 40046207 0 returned -16 [ 551.643177][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 551.643214][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 551.648975][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 551.654820][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 551.666258][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:54 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x0, 'syz1\x00'}) r2 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x306, @link_local}, 0x2, {0x2, 0x4e22, @rand_addr=0x9}, 'nr0\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x800) [ 551.672104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 551.677898][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 551.683745][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 551.794842][ T383] binder: 382:383 ioctl c0306201 20000140 returned -22 03:37:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x567, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20900, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x20200, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e24, @loopback}, {0x306}, 0x32, {0x2, 0x4e20, @multicast1}, 'veth1_to_bond\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x0, [], [{0xfffffffffffffffa, 0x5, 0x80000001, 0x800, 0xfffffffffffffff9, 0x7}, {0x5, 0x6, 0x5, 0x4, 0x3, 0x3}], [[], [], []]}) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0xe500, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) 03:37:54 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x1c000000000, 0x200) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, 0xa, 0xb1a, 0x3, 0x1000, "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"}, 0x100c) r1 = getpgrp(0x0) r2 = gettid() r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @loopback}, {0x1}, 0x32, {0x2, 0x4e22, @local}, 'vxcan1\x00'}) getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f0000000040)=""/11, &(0x7f0000000080)=0xb) rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffa}) 03:37:55 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001700)) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000140)) 03:37:55 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x104, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$inet_int(r1, 0x0, 0x100000000012, &(0x7f0000000080)=0xffffefffffffffbb, 0xffffffffffffff2c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in={0x2, 0x4e20, @broadcast}], 0xfffffffffffffded) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in], 0x10) 03:37:55 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x2, 0x0, 0x2, 0xfffffffffffeffff, 0x80000000, {0x0, @in6={{0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, [], 0x13}, 0x3f}}, 0x0, 0xd8, 0x3, 0x5, 0x80000000}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x0, 0xff, 0x200, 0x8, 0x6, 0x6, 0x400, 0x9, r3}, &(0x7f00000001c0)=0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) connect$rds(r2, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000240)=0x9) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:55 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2c000, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) splice(r0, &(0x7f00000000c0)=0x5e, r0, &(0x7f0000000100), 0x1f, 0x1) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0x1000, 0x10000, 0x100000, 0x4000], 0x5, 0x28, 0x23}) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev={[], 0x21}, 'veth1\x00'}}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1f) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x400) close(r0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x400, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x6546) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x101000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x490, 0x0, 0x0, 0x170, 0x290, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000300), {[{{@ip={@local, @empty, 0xff, 0xffffffff, 'yam0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0x20}, 0x0, 0x110, 0x170, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x5, 0x4, 0x1}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x40, 0x2, 0x200, 0x9, 0x43f6f82f], 0x5, 0x7}, {0x3f, [0x55f, 0x2, 0x1f, 0x40, 0xffff, 0xffffffff00000001], 0x1f, 0x10001}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffffff, 0x0, 'veth1_to_team\x00', 'eql\x00', {0xff}, {}, 0xde, 0x2, 0x3c}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x8, 0x8, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x9, 0x81}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xff}}}, {{@ip={@loopback, @broadcast, 0xffffffff, 0xff, 'ip6erspan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0xc, 0x3, 0xb}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x2, 0xc}}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x1, 0xf, [0x2a, 0x37, 0x3f, 0x32, 0x2, 0x6, 0xf, 0x3e, 0xa, 0x21, 0x6, 0x6, 0x3, 0xd, 0x31, 0x11], 0x2, 0x2, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000840)={0x0, 0xfffffffffffffff9}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000008c0)={r5, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x0, 0x80}, &(0x7f0000000980)=0x90) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f00000009c0)={{0x1}, 0x8, 0x3c, 0xffffffffffff46c3}) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000a00)) vmsplice(r4, &(0x7f0000001c00)=[{&(0x7f0000000a40)="6d9b6be81efe7f84ddffa5ec36b44f6b83c774a5c988f64a0668ae3b86cc3f731a74583bb6da20a9044272e9f252a8ca948eddbfd02eb371a6555487818df74c7a9f4d63d8f8c7f9d62b78a40ef5cb41297fd553412550f17375ed418bb1b237f3abf75972a6d162004857e6f02e68338c82f88bec87c18d0c82e361cf0715a735ea1b9b646e2464d626eb355eeb4d55115d179db7a591394d898eaa20f8f00229dd44e3047bbee1399cfa0f8b046507787467038ab07847d183e7fb6f25f198c61525c723a345decd203559ae93bbd48ecab3db2a6e737929cd81907815f686b7aeaea2131632be120411c6f9513303", 0xf0}, {&(0x7f0000000b40)="ce622bbaa605c44d080a11e4788be60b669e5fb89a82960e26c7a67b", 0x1c}, {&(0x7f0000000b80)="eeba892cfb4138947ecf79b096d1058fb141c4f2e5f2e098fe4df6f0db716c29b70b756f2da0b319a445317e415821ee2d430070d105c4e09972995ceb2c61abfdf1e1f9671e0c02d4da9d002f33993441eebadc6171cf", 0x57}, {&(0x7f0000000c00)="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", 0x1000}], 0x4, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001c80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001c40)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000001cc0)={0x9, 0x108, 0xfa00, {r6, 0x9f, '<\'e', "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"}}, 0x110) splice(r4, &(0x7f0000001e00), r3, &(0x7f0000001e40), 0x4, 0x2) socket(0x15, 0xa, 0x86c) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001e80)={r5, 0x7f}, &(0x7f0000001ec0)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001f00)={{{@in6=@empty, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000002000)=0xe8) connect$rds(r3, &(0x7f0000002040)={0x2, 0x4e23, @remote}, 0x10) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002080)=0x400, 0x4) 03:37:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) lstat(&(0x7f0000000240)='./control\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000580)={0x19980330}, &(0x7f00000005c0)={0x1, 0x89f}) r2 = open(&(0x7f0000000000)='./control\x00', 0xc40beb2474dfd22a, 0x100) fchown(r2, 0x0, r1) [ 552.824469][ T845] binder: 841:845 unknown command 0 03:37:55 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='bdev\x00', 0x0, 0x0) 03:37:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$P9_RWSTAT(r1, &(0x7f00000004c0)={0x7}, 0x7) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000003c0)={0x20}, 0x20) 03:37:55 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000000)=0x9, 0x4) [ 552.911228][ T845] binder: 841:845 ioctl c0306201 20000140 returned -22 03:37:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000480)="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", 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='Uemory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYRESDEC=r1, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES64, @ANYRES64=r3, @ANYRES64=r2], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES64=r3], @ANYPTR], 0x38) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) splice(r1, 0x0, r3, 0x0, 0x100000000ffe0, 0x0) fcntl$setpipe(r1, 0x407, 0xe5) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0xffffffffffffff78, 0x1}) 03:37:55 executing program 5: r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) ftruncate(r1, 0x8007ffc) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14}, 0x14) sendfile(r0, r1, 0x0, 0x400008bca) 03:37:55 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 03:37:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x17) getsockopt$netlink(r0, 0x10e, 0xc, 0x0, &(0x7f00000000c0)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f00000002c0)={0x7, "a99d493047606d70b2405595e22d6071f1264b4890901fb50332da36f08773a9", 0x5, 0x3, 0x6, 0x3, 0x10, 0x3, 0x3ff, 0x7440}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r2, r4, 0x3, 0x1}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000629bd7000fddbdf2506000000583b35540700030002000000000000000c00040080000000000000000c00090000000000000000c6ed39080002001f00000008000100010400000c000400040000000000000008000100"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) 03:37:55 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xdc, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:55 executing program 1: socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 03:37:55 executing program 2: r0 = epoll_create1(0x80000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000240)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000280)={r0, r0, 0x20}) rt_sigtimedwait(&(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000100)={0x0, 0x989680}, 0x8) r3 = epoll_create1(0x0) close(r0) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000140)={0x5}) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) [ 553.397067][ T985] binder: 982:985 unknown command 0 [ 553.407542][ T987] Unknown ioctl 1079268894 [ 553.420528][ T991] Unknown ioctl 1079268894 [ 553.427298][ T985] binder: 982:985 ioctl c0306201 20000140 returned -22 03:37:55 executing program 5: getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsuid(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000003c0)={0x3, 'ip6_vti0\x00', 0x3}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, 0x0, 0x4000001) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={0x0, r0, 0x6, 0x1}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0x4) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)=0x80000002) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000004c0)={{0xbd3d, 0xc6}, 'port1\x00', 0x10, 0x10, 0x5, 0x5, 0x1, 0x8001, 0x1000, 0x0, 0x0, 0xcce}) connect$pppoe(r3, &(0x7f0000000700)={0x18, 0x0, {0x0, @broadcast, 'ip6erspan0\x00'}}, 0x1000000f5) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000006c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={r6, @empty, @local}, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x7) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) connect$pppoe(r3, &(0x7f0000000280)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'team_slave_0\x00'}}, 0x1e) [ 553.482602][ T996] binder: BINDER_SET_CONTEXT_MGR already set [ 553.539023][ T996] binder: 982:996 ioctl 40046207 0 returned -16 03:37:56 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 553.699815][ T7726] binder: release 982:985 transaction 626 out, still active [ 553.728263][ T7726] binder: unexpected work type, 4, not freed [ 553.746001][ T7726] binder: undelivered TRANSACTION_COMPLETE [ 553.845537][ T859] cgroup: fork rejected by pids controller in /syz3 03:37:56 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)=@can, 0x80, 0x0, 0x0, &(0x7f0000000240)=""/2, 0x3e4}, 0x0) 03:37:56 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1fd, 0x8100) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000000)=ANY=[@ANYBLOB="a2a5c75f6c"]) 03:37:56 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xdc, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000180)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x1000000002) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:37:56 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xa2, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) dup(r0) 03:37:56 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x2) clone(0x2002102801ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0xffffffffffffffff}, 0xa00000000, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000000)) 03:37:56 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x3, 0x4) r2 = epoll_create1(0x0) close(r2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x3, 0x9, 0x20, 0x0, 0x12}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x5}) getsockopt$inet6_buf(r1, 0x29, 0xd3, &(0x7f0000000200)=""/186, &(0x7f0000000100)=0xba) [ 554.030788][ T1244] binder: 1241:1244 unknown command 0 [ 554.062493][ T1244] binder: 1241:1244 ioctl c0306201 20000140 returned -22 03:37:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/dlm-monitor\x00', 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x22200, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000840)=0x7) ppoll(&(0x7f00000005c0)=[{}], 0xba, 0x0, 0x0, 0x0) 03:37:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x8) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)="10", 0x1}], 0x1, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="ba"], 0x1) 03:37:56 executing program 1: seccomp(0x3, 0xa, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x9dea, 0x8001, 0x8, 0x800, 0xb3, 0x0, 0x10001, 0x6, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x4}, 0x8) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'syz_tun\x00'}}) 03:37:57 executing program 5: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x90000, 0x80) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000040)) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@broadcast, @broadcast, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80, [], 0x2b}, @in6=@mcast2, 0x4e23, 0xfff, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0xfaaff5bf920c4fb1, r3, r1}, {0x4, 0x9, 0x4, 0x6, 0x4, 0x1000, 0x22991b2, 0x7d8}, {0x7fffffff, 0x100000000, 0x0, 0x80}, 0xfffffffffffffffb, 0x6e6bb8, 0x1, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x6f}, 0x2, @in6=@ipv4={[], [], @multicast1}, 0x3504, 0x5, 0x2, 0x7ff, 0x3, 0x400000, 0x101}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x14, 0x4, 0x4, 0xcef, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 03:37:57 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xdc, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:57 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\x19\x86\x983uoG\x18\xd4\xc8*R6\x84\xfb\xfbU0xffffffffffffffff, 0xffffffffffffffff}) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000900400000000000038020000680300000000000000000000780500007805000078050000780500007805000006000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd4b000000000000000000000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c0000000000000000000000000000000000000000000000000002800434845434b53554d000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d80000000000000000000000000000000000000000000000000040005450524f5859000000000000000000000000000000000000000000000001c8780000e1fffffffe8800000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280054544c0000000000000000000000000000000000000000000000000000000000000000000000ffffffff7f000001000000000000000065727370616e3000000000000000000069703665727370616e30000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00020000000000000000000000000000009800e000000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000600000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4f0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x11) 03:37:57 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000100)={0x6e105c92, 0x1ff}) r3 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x3, {{0x4, 0x1, 0x1, 0x80000000, 0x8000, 0x2, {0x4, 0x100, 0x7, 0xf1e9, 0x0, 0x5, 0x800, 0x81, 0x81, 0x7, 0x7, r3, r4, 0xce, 0x6}}, {0x0, 0x2}}}, 0xa0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x5, 0x4) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2(0x0, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000480)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x36, @local, 0x0, 0x0, 'ovf\x00', 0x1, 0x8, 0x57}, {@empty, 0x4e20, 0x10001, 0x0, 0x10001}}, 0x44) fcntl$getown(r1, 0x9) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000001940)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000000c0)="0f011bbaf80c66b8cc3a258d66efbafc0c66edf36764f08001f366b99b0200000f32018600000f01d165662ed24fd366b9800000c00f326635000400000f30ddcd66b8000000000f23c80f21f866350800c0000f23f8", 0x56}], 0x1, 0x10, &(0x7f00000002c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfe2f) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000180)={[{0x80000000, 0x100000001, 0x0, 0x20, 0x0, 0x100, 0x8, 0x0, 0x20, 0x40, 0x81}, {0xfffffffffffffffa, 0xa6, 0x4, 0x9, 0x2, 0x0, 0x1, 0xe24, 0x100000001, 0xffffffffffff8001, 0x7, 0xff, 0x800}, {0x1, 0x7, 0x7fffffff, 0xde, 0x78ac00000000000, 0x1, 0x7, 0x800, 0x4, 0xffffffffffffffe0, 0x9, 0x200, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:37:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x4, 0x4) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8c0, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x5, 0xa020}) 03:37:57 executing program 3: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x4, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace(0x8, r0) 03:37:57 executing program 5: r0 = socket$packet(0x11, 0x5, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x2}, 0x51) 03:37:57 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0x10, 0x8000}) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) [ 554.876777][ T1489] binder: 1480:1489 unknown command 0 [ 554.910423][ T1503] binder: BINDER_SET_CONTEXT_MGR already set [ 554.964942][ T1489] binder: 1480:1489 ioctl c0306201 20000140 returned -22 03:37:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x71, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 555.012553][ T1503] binder: 1480:1503 ioctl 40046207 0 returned -16 03:37:57 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:57 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 555.135773][ T7726] binder: release 1480:1530 transaction 629 out, still active 03:37:57 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3ce93489ca47e9a5"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000008000000e7ffffdf2583cbaac2f7980eff4ac88ab0b380d95d000000b7d8a18659092bc8a630908953b7237e364cbe6123c8cb91eebab29535b23a9b3a7e681aea9d06f6b5c9c476f7e7007fdccbfdfe8ce0a18bf3dccf59d22abd6c7a7dfdc36ba598ac70224d2d"], 0xfffffffffffffd14}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x202200) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 03:37:57 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) r2 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x5}) [ 555.340637][ T1639] binder: 1638:1639 unknown command 0 [ 555.370201][ T1639] binder: 1638:1639 ioctl c0306201 20000140 returned -22 [ 555.393539][ T1647] binder: BINDER_SET_CONTEXT_MGR already set [ 555.414706][ T1647] binder: 1638:1647 ioctl 40046207 0 returned -16 03:37:57 executing program 5: r0 = socket$packet(0x11, 0x808000000002, 0x300) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x7, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x7, 0x5, 0x6, 0xf3, 0xff, 0xff}, 0x200, 0x0, 0x3ff}) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000140)=0x1db) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) 03:37:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") unshare(0x4000400) r1 = socket(0x22, 0x2, 0x2) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000140)) 03:37:57 executing program 1: fchdir(0xffffffffffffffff) keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x2000, 0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000200)={0x8000000000001, 0x80003fb}) getuid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaab3f, &(0x7f0000000200), 0x0, &(0x7f0000000740)={[{@gid={'gid'}}]}) 03:37:57 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000280)={@dev, 0x0}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x7, &(0x7f0000000100)=@raw=[@alu={0x7, 0xffffffffffffffff, 0x0, 0xf, 0xe, 0xfffffffffffffffc, 0xffffffffffffffff}, @alu={0x7, 0x9, 0x0, 0x6, 0xf, 0xfffffffffffffff8, 0xffffffffffffffff}, @ldst={0x1, 0x3, 0x6, 0x2, 0x1, 0x30}, @exit, @jmp={0x5, 0x2, 0x9, 0xf, 0x6, 0x42, 0xfffffffffffffff8}, @map={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000180)='syzkaller\x00', 0xcd77, 0xbe, &(0x7f00000001c0)=""/190, 0x40f00, 0x1, [], r1, 0x7}, 0x48) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r3) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0x5}) fsetxattr(r2, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', &(0x7f0000000040)='/dev/vbi#\x00', 0xa, 0x2) 03:37:58 executing program 5: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6009, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x40) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002047e0002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xee, 0x80) write$P9_RLERROR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="160000000702000d002f006585c431ea1727a37e"], 0x14) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000000)={{0x2}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x88841, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="9e8b4a908a5067e6"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 03:37:58 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/procnet/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)="5f28cc0b52e8b9d4bcff890e691da0947cf84725e42cc9de074d75f5722899cc5e586c64fc9957d12977c327b956374f2930029575f0e0d6ecf9a7cda944173fc91771d529d4c7e84cbf899f62fd6ad572b918982db62c352b15a995815f8bd8f65d553ce82569c2847819027aa76eceef10fbb77c724696e1c531738a5ebd9b9d1f30c6fb4d746c7d10c64d0de02f6633dc2e5857ffcd090e371d17c14f33dd1448c9c703e561d15fbbcfd054f5caaf91dd5fcb49cdec20e25ec7ea7e90b40e263f5f286c8a0c461e56bb42f19846775a2cf086ca24ca17f0dfc33f10910a4d45781563") clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x140, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0704000600000800450000140000000000ccc54df006ccd7cf470c1e1bfd219078ac1414bbac1414c3f60000"], 0x0) [ 555.692877][ T1664] binder: 1661:1664 unknown command 0 03:37:58 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000240)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000280)) accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x80000) setsockopt$inet_buf(r2, 0x0, 0x24, &(0x7f00000001c0)="f6a1cba5836b30a13aaf8bf24c3736a6c70e2f78b3d4a1c7b218ad32075bafc588618410a9b46b40435666563c1d9163b59478bd614b8808f08e28e285ed7e65605e71c6f3df3881", 0x48) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) close(r0) r5 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000c85000)={0x80000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000180)={'ip6gretap0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) [ 555.756806][ T1664] binder: 1661:1664 ioctl c0306201 20000140 returned -22 [ 555.783355][ T1673] binder: BINDER_SET_CONTEXT_MGR already set [ 555.865796][ T1673] binder: 1661:1673 ioctl 40046207 0 returned -16 03:37:58 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{}, [@netrom, @netrom, @rose, @rose, @rose, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000180)=""/104, &(0x7f0000000100)=0x68) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:37:58 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r0) 03:37:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x28040, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0x3f, 0x57, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x7ff}}) fcntl$getown(r1, 0x9) 03:37:58 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 556.192551][ T7726] binder: release 1661:1664 transaction 632 out, still active [ 556.215965][ T7726] binder: unexpected work type, 4, not freed [ 556.235907][ T7726] binder: undelivered TRANSACTION_COMPLETE 03:37:58 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000000)={0x5}) 03:37:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0xfffffffffffffe18) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x1e4}, 0x7) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x315, 0xea225aec34b1dd0e, 0x0) [ 556.554338][ T1722] binder: 1700:1722 unknown command 0 [ 556.583306][ T1722] binder: 1700:1722 ioctl c0306201 20000140 returned -22 [ 556.608576][ T1819] binder: BINDER_SET_CONTEXT_MGR already set [ 556.616107][ T1819] binder: 1700:1819 ioctl 40046207 0 returned -16 03:37:59 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lapb0\x00', 0x10) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000240)=0x80, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x2003b, &(0x7f0000000280)=ANY=[], 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xffffffffffffff39) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) pipe2(&(0x7f0000000100), 0x4000) socket$l2tp(0x18, 0x1, 0x1) 03:37:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000400), &(0x7f00000003c0), 0x8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x102, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000004c0)) mq_notify(r1, &(0x7f0000000540)={0x0, 0x0, 0x3, @tid=r2}) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003600)=""/253, 0xfd}], 0x1, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}], 0x2, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300)=[{&(0x7f0000007140)=""/136, 0x88}, {0x0}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x3, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}, 0x1}], 0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3f}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x31f, 0x8, 0x81, 0x1, r4}, &(0x7f00000002c0)=0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) clock_gettime(0x0, &(0x7f00000005c0)={0x0}) fanotify_init(0x1, 0x101403) semtimedop(0x0, &(0x7f0000000580)=[{0x2, 0x4, 0x1000}, {0x2, 0xfd8b, 0x1000}, {0x6, 0x6, 0x4f90fc55277a8a2d}], 0x3, &(0x7f0000000600)={r5}) r6 = memfd_create(&(0x7f0000000100)='team\x00', 0x7) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r7 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x7ff, 0x1) bind$alg(r7, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) creat(&(0x7f0000000340)='./file0\x00', 0x100) close(r3) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') ioctl$IMDELTIMER(r1, 0x80044941, 0x0) 03:37:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0xcc01}}, 0x0}, 0x48) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x9, 0x4, 0x3ff, 0x1000, 0x0, 0x10001, 0x800, 0xa, 0x2, 0x1, 0x7fffffff, 0x3f, 0x7, 0x81, 0x3, 0x0, 0x80000001, 0x6, 0x0, 0x10001, 0x8, 0x62317932, 0xfffffffffffffd6f, 0x21, 0x101, 0x6, 0x4, 0x7fffffff, 0xc9f000000000000, 0x1, 0x4, 0x380000000, 0x2, 0x0, 0x8001, 0x80000001, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x5b}, 0x0, 0x100, 0x8, 0xf, 0x3, 0x3, 0x7fff}, r1, 0x3, r2, 0x9) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r3 = getpgid(0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, r3, 0x0, r4, 0x0) 03:37:59 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000180)={0x3, 0x0, 0x2080, {0x0, 0x3000, 0x2}, [], "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", "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"}) write$P9_RRENAMEAT(r2, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) 03:37:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0x1) getsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 556.828181][ T7726] binder: release 1700:1722 transaction 635 out, still active [ 556.836178][ T7726] binder: unexpected work type, 4, not freed 03:37:59 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 556.872531][ T7726] binder: undelivered TRANSACTION_COMPLETE [ 556.886568][ T1822] Unknown ioctl -2147202750 03:37:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x260, 0x80000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0xffffffffffffffc7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80001, 0x0) renameat2(r0, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)='./file0\x00', 0x3) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff8d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ecf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x591f}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40000}, 0x4) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000780)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000880)=0xe8) r9 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) getresuid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000b80)={{}, {0x1, 0x4}, [{0x2, 0x9d37903898824a54, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x3, r7}, {0x2, 0x1, r8}, {0x2, 0x4, r9}, {0x2, 0x0, r10}, {0x2, 0x2, r11}], {0x4, 0x4}, [{0x8, 0x2, r12}], {0x10, 0x567cd1063a42a14e}, {0x20, 0x1}}, 0x6c, 0x2) 03:37:59 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 557.011828][ T1833] binder: 1831:1833 unknown command 0 [ 557.044762][ T1938] Unknown ioctl -2147202751 03:37:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8020000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000000c0)=0x6, 0x4) unshare(0x8020400) [ 557.073623][ T1939] binder: BINDER_SET_CONTEXT_MGR already set [ 557.138564][ T1833] binder: 1831:1833 ioctl c0306201 20000140 returned -22 [ 557.153541][ T1950] binder: 1831:1950 BC_INCREFS_DONE u0000000000000000 no match 03:37:59 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac2314bbac1414000304907800000000450000000000000200060000ac2314aaac14140089e1b7598ed8c21725dd31bdd86ff6c7a99bc23b8078c5d98c47af2cf8ffd6bb44ec9406f7ccae85600f2d91cdcedc091b8009b5030108b213691e8176c1df852d1a00a354a6247683aebf8a396f3f000000afd1ecbeae550de583c3a5dc780c0e26af9be366feb3a6a04a692f2b076543ac7fc3d7d7bd730b50c810f92a5533d02804cd5b67c6acf1925f61b0f4fb3d46a876df1feffd8de9124e7ef40d821cf7caa0ff86a0c448f3bac0996b62a022"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x40002, 0x100) r1 = accept4$ax25(r0, &(0x7f00000004c0)={{0x3, @netrom}, [@null, @default, @null, @bcast, @default, @bcast, @remote, @netrom]}, &(0x7f0000000540)=0x48, 0x80800) accept$ax25(r1, &(0x7f0000000580)={{}, [@default, @null, @rose, @rose, @bcast, @default, @rose, @rose]}, &(0x7f0000000600)=0x48) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x202000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x11c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10}, 0x40804) timer_create(0x3, &(0x7f0000000180)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000000)="7d045519b06e", &(0x7f0000000100)="a568cc38a03b2e1872c6e23be9fa1061d799f3e501b20f0924759f4b139654d17d0830d7b29ea15e44d83850368feaa6fee26d4ba6bdf8350f425b2132a21d681e59b687ce5d28a784d7bbc6e7b8"}}, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000200)={{0x0, 0x1c9c380}}, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x8, 0xc7ae, 0xffffffff, 0x3, 0x2, 0x4000}) r5 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0x8000) recvfrom$ax25(r5, &(0x7f0000000340)=""/210, 0xd2, 0x21, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 03:37:59 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000000)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000300)=""/156, 0x9c}], 0x4, &(0x7f00000003c0)=""/60, 0x3c}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@mcast2, 0x4e20, 0x80000001, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5e, r3, r4}, {0x4503, 0x9, 0x2, 0x1ff, 0x9, 0x1ff, 0xdc00000000000000, 0xfffffffffffff7bd}, {0x10001, 0x10, 0xe4e, 0x7}, 0x3ff, 0x6e6bba, 0x3, 0x1, 0x1, 0x3}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@multicast1, 0x3504, 0x3, 0x2, 0x2, 0xfffffffffffffffb, 0x4}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 557.199150][ T1938] Unknown ioctl -2147202750 [ 557.204294][ T1833] binder: 1831:1833 Release 1 refcount change on invalid ref 1 ret -22 [ 557.234354][ T1953] Unknown ioctl -2147202751 [ 557.262818][ T1825] EXT4-fs (sda1): re-mounted. Opts: (null) [ 557.269282][ T1939] binder: 1831:1939 ioctl 40046207 0 returned -16 03:37:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0f85403, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 557.329141][ T1922] EXT4-fs (sda1): re-mounted. Opts: (null) 03:37:59 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x10, 0xfffffffffffffffc) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) 03:37:59 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:37:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3}, 0x14) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r4, 0x0, &(0x7f0000000240)) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x8) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x90000, 0x0) io_submit(r4, 0x5, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, r1, &(0x7f0000000180)="a7979b7e13d14e1cc0fcdec84dd0e1a47517086edf92db07678f9bffa607def0d6d698f5aa5a8f2d44f0f10f6fac4452f87063c7e7", 0x35, 0x10000, 0x0, 0x1, r6}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f0000000280)="dc615c7751f04aa9d6a3307c1a261213bb98a0758e110f17a2ee63d0bdb1e7353156847d0f1b1d35cf06", 0x2a, 0x0, 0x0, 0x1, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xd, 0x2, r0, &(0x7f0000000300)="5def08236dec0f68fe03b1bd693db704c2a66dcae61d553ec98c873995384e4224c2b5ee81553a27b189239c74f5b420c06fb1400b7109ceab2e4b58fdedc99d3df596909ff64f75182b07ed15320215a694fd402642e04975e0c6428f4795b6276185a624", 0x65, 0x683405ca, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9, 0x8, r2, &(0x7f00000003c0)="28fbb7e513a70bdd132f6a1235fc1d564e0a959c07558233bbe0af23181a1a477c3c76433a7c5ad7b4dcb557b44d4e00e43856b89b79c215181b48aaa96b324744edee3471ffd8", 0x47, 0x1850, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x7f3, r2, &(0x7f0000000480)="434667871b4d78141eda5f9c47295a802b99a8fd4f884a05f39ccae2", 0x1c, 0x99, 0x0, 0x2, r5}]) fsetxattr(r2, &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='bridge_slave_0\x00', 0x83, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x200, 0x8be3, 0x0, 0x1c83}) 03:37:59 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$NBD_DO_IT(r2, 0xab03) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 03:37:59 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) sysfs$3(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) r3 = geteuid() setuid(r3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x6, 0x3ff, 0x8d, 0x6}, 0x8) [ 557.431388][ T7707] binder: release 1831:1944 transaction 638 out, still active 03:38:00 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10c01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000380)={0x3, 0xcf, "0f7dc417042dd03b73550a637bf0720a00297b39fecefc9470774db62d2e2dceb75c0ad6166f2e21d49a8aec0d61d106e5033b56ecc2549d24d9c6b1995023f34c752b8e10172d44a87abdd128c6b20173244b0a3a87e19fd6dad6665e2661c4885df03eec4c69dbaebd93f2a806515038d716a70903307a78cf561cf4857bdeb43fc7bcf05abb438715ce3037c43de4eb5365a653fa25fb7078d46f934e9367cfcf6a088fcf490ee2e2abef9264fc5f09f24dde89bb4419bfd3b1838e29103923f7c6cde5f2e0609dc8d49df96315"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0xc}, 0xfffffccc) r4 = socket$inet6(0xa, 0x80801, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r4, 0x0, 0xff2b}]) 03:38:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec705f2288a933d66593ae164c990a0028e6640c522b60bdfedb810dcfa16bf33733b7a8961f9ec26a783f8", 0x30) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000003c0)={@ipx={0x4, 0x0, 0x3f, "65a665aeac49", 0x6}, {&(0x7f00000002c0)=""/204, 0xcc}, &(0x7f0000000180), 0x44}, 0xa0) r3 = accept$alg(r1, 0x0, 0x0) getpeername$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) read(r3, &(0x7f0000000bc0)=""/93, 0x5d) recvmsg(r3, &(0x7f0000d43000)={0x0, 0x0, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0x75}], 0x1}, 0x0) 03:38:00 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000280)={0x1, 0x0, [], {0x0, @bt={0x7, 0x80, 0x1, 0x0, 0x401, 0x5, 0x80000000, 0x3ff, 0x6, 0x97c, 0x7f, 0xc6, 0xe32f566, 0xfffffffffffffff9, 0x2, 0x4}}}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) getsockopt(r3, 0x0, 0x67fa9f88, &(0x7f0000000180)=""/232, &(0x7f0000000000)=0xe8) [ 557.662968][ T2079] binder: 2077:2079 unknown command 0 [ 557.707604][ T2229] binder: BINDER_SET_CONTEXT_MGR already set 03:38:00 executing program 3: munmap(&(0x7f0000411000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x4000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) [ 557.723133][ C1] net_ratelimit: 23 callbacks suppressed [ 557.723143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.734747][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:00 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x8000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = msgget$private(0x0, 0x410) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r4 = getgid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) r8 = getpid() msgctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x100000000, r3, r4, r5, r6, 0x190, 0xca90}, 0x9, 0x3f, 0xc3, 0x700, 0x36d, 0x67d, r7, r8}) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x0, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2]}}, 0x1c) open_by_handle_at(r0, &(0x7f0000000080)={0x40, 0x0, "4c2fd75d19f8245fa6f9e2a82e5f8107c002455890e3b5ea171beb335ffe89512b9e614926647614e229d7365e5a7be9af0f51a598392fbe"}, 0x100) socket$inet6(0xa, 0x7, 0xfffffffffffffff8) 03:38:00 executing program 1: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x40) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000500)={{0x1, @addr=0x100000001}, "69b299a0351a768312c56031cf90f71133cd39628f576184276fd64cdd9ccfe8", 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x6800) clock_gettime(0x5, &(0x7f0000000600)={0x0, 0x0}) timerfd_settime(r2, 0x4, &(0x7f0000000200)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000480)) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000000000000000000000000000000000000000000000000000000003d1f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000062079c4e94749ea19bb1536909d22c1d6b57008141f3735000fbd32f87c2d1e525481e27b4d72bf5928bd8"]) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000080)={{0x2, 0x1000, 0xd5, 0x80000000, 0x6, 0xb11}, 0x4, 0x6c, 0x6, 0xec, 0x5, "17ad79dba88744b323b30997bd140296f126404b8425b39a18dd2d0249ea5ec5819c102680deb71d0b13c4c95303f405c04b8704b51966eb484c1330f0567cb6d918ae491708b953bca2b0e485125b13fdd8a49940551f49b083d447b9abc729017ebde012319f992b9d04b340b731d98fe7965416d63409b873e7d59ffd3a0d"}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000000)) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0xffffffff, 0xfc37, 0x7, 0x0, 0x8, 0x20000, 0xb, 0x55, 0xffffffff00000000, 0x100000000000, 0x9, 0x200, 0x3, 0xff, 0x1ff, 0x12, 0x8, 0x5, 0x9255, 0x7, 0x13, 0x9, 0xf8d5, 0xfffffffffffffffc, 0x9, 0x3f, 0x101, 0x0, 0x8, 0x5, 0x9, 0xffffffffffffffff, 0x2, 0x1f, 0x3ff, 0x0, 0x2c9, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x4, 0x1000, 0x557, 0x7, 0x6, 0x460, 0xd61b924}, r5, 0x5, r2, 0xa) r6 = add_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000340)="d8c964157258aca79abb00813341d6b044a1ec0cd4acdc48cd87bc64a1ab0c75450215d909fecf51c145b337dc5939a8c514700947c836ce97ca2c9124d8a7ef7ba3ba0d744f5053758ce369365eb7a7d777c914a07b100ae762ce5814891b560991b79ec9727a2f3c15f9c18276176df4eb2793fe3eea8853d8eafb9b654bb73755a27c72b72aa5c606f6389341", 0x8e, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r6) [ 557.782238][ T2079] binder: 2077:2079 ioctl c0306201 20000140 returned -22 [ 557.784041][ T2229] binder: 2077:2229 ioctl 40046207 0 returned -16 03:38:00 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x66b, 0x200000) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000040)={0xbf, @broadcast, 0x4e23, 0x0, 'rr\x00', 0x28, 0x23, 0x29}, 0x2c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 557.883118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 557.883124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 557.883173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 557.888936][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 557.894770][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 557.911905][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 557.917795][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 557.923589][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000001c0)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r2 = shmget(0x2, 0x2000, 0x78001218, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000400)={0x3000000000000000, 0x3000, 0x10000000, 0x2}) r3 = getpid() fcntl$setown(r1, 0x8, r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28) fstat(r4, &(0x7f0000000600)) getresuid(&(0x7f0000000680), &(0x7f0000000780), &(0x7f00000007c0)) mount$9p_tcp(0x0, 0x0, 0x0, 0x7fe, 0x0) setxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.evm\x00', &(0x7f0000000440)=@v2={0x7, 0x1, 0x8, 0x3ff, 0xd3, "6300b188b5f2b5650ee74b4b2c5e00eee824d4272536afa67763000da8637ea0e66b1e7eaaac56782aa0af7f003e1fd536df841789ec5bf0a6107adf742467833496793f6f934eb3a7250460bde92edc46b12b586937654e4eb9d12d14e720d93269795cd30ee61538c3b7b6d50a483fd219323a5ce2df0554dac4ea80edcac78441108d7cf33668bc82358fba1f1efe0e0a2dc0428c3edbf31951391daed83216367953f5e38378afbafd4ecdbc86b09580e5b64115bd5fd2144871331fa2762958573cb103ca1084a6bf057613bfeef16faa"}, 0xdd, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000200)={0x800343, 0x0, 0x1, 0xffffffffffffffff}) r8 = dup2(r6, r7) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x9}) 03:38:00 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x0, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f6fee"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x202000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000180)={{0x9, 0x7}, {0x76d}, 0x6, 0x4, 0xbeb3}) 03:38:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x541001) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000740)={0x0, 0x0, 0x2080}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0x34}, 0x98) 03:38:00 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0xd2800) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0xf, 0x8000, 0x7, 0x3, 0x31f0, 0x400, 0x8, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0xb7, "2cdd2416ed6cc4ee8fe4f9d56ae975ba1b886a950b27ed4d1969f3ebfe65faba253133639fa4f51db6aa6fb72ecc4e96fb6399043716eb38c761fe850184d33bb663025bc8c6e33baa6f4531775f73ae3f993b43af7312ffd518594df66f24877e2d6590c20bd4b4d11527c2d70ab9bbe35e5c41a6a16d2cb6e4201b3777c9f6e5515e79b36f13f9f0333bc103f05478b6cf172c2333aa78b1e7b81ff42996226525f247b20497c113e13a5170685abac7d3ca3f4af6a8"}, &(0x7f0000000200)=0xbf) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) 03:38:00 executing program 2: r0 = epoll_create1(0x0) r1 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/dev/vbi#\x00', 0xfffffffffffffffc) keyctl$invalidate(0x15, r1) r2 = epoll_create1(0x0) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40000) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x78) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)) [ 558.300237][ T2429] binder: 2421:2429 unknown command 0 03:38:00 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x18, 0x7, 0x10, 0x16, 0x1, 0x5, 0x6, 0x160}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x2}, 0x10, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "4b4c5b60deaf9c014565624603133c9bb884f37db0b19be6d566a07e92be34e30817f0321bdb4f7590be68ab7be1b1a952ad826dc78fc3443ba7c14325ef5405"}}, 0x80}}, 0x0) 03:38:00 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20800, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x2ee0097, 0x80, 0x8fa2, 0x10001, 0x6, 0xe231, 0x0, 0x80000001, 0x1000, 0x7, 0x2, 0xf65, 0x9}, {0x9, 0x5, 0x1, 0xfffffffffffffffa, 0x5, 0x1f, 0x268, 0xc5, 0x1, 0x224b, 0x0, 0x0, 0x1000}, {0xfff, 0x1810, 0xffffffffffff0000, 0x5, 0x7, 0xab1, 0x1, 0x2, 0x5cc0, 0x1, 0x8001, 0x1ff, 0x3}], 0x3ff}) [ 558.346617][ T2548] binder: BINDER_SET_CONTEXT_MGR already set [ 558.365638][ T2429] binder: 2421:2429 ioctl c0306201 20000140 returned -22 03:38:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x9, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000001540)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x6, 0x7f, 0x3, 0x10001, 0x40}, &(0x7f0000001600)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001640)={0x0, 0x1, 0x1a5}, &(0x7f0000001680)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001740)={0x0, 0x78, &(0x7f00000016c0)=[@in6={0xa, 0x4e24, 0x848, @rand_addr="22eee056ddd7f277f1281fc97a33c9d1", 0x4}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @multicast1}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000017c0)={0x0, 0xd0, "da41e3143265978ae271f564845b77a55e278c8430760da3088b872412b721f63036b0abba4f76ae61721aa3c8c4746d2d7e1cc7cb37ef8eef1181677cc3df8958ec20dd0dd6814c21b4b39da7f55abd3856bce939ac10a7f8094a520807201409b717fe9a10a42be79400fea796b5cdccf79ccfa4caede59a0908a4b00f3ce2f09cf6cc6252d8747d42a919db1ef71496fcbd41f87b0787d35aa1b349daec9daefa91d5c36e4334c320bcb26e3b35872fe8bc59d92b25261eba5d259ecab9bbb74f31fadb6f1b8a76aaf2f16e673b51"}, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001a40)={&(0x7f0000000140)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001400)="10a19edcf6950c11eb74c80f161bc31a6eb651c0c88a5c2d28324fd37e9b23412f614c986c74a162ce2f3085f75f5dc14badd2086022775bcfa9e97f4e7446eae170713e8eac46e29f582d0e3d436305de41f19ee4234fdcd6e9d8b6d4810416566bff8f4f2fbb9f20bd07dcb8b65ef0f40525de7baa246a663f37075eb528a0d4af680ba237cbb779893cd851fa043b32bb343545725d42f3c7c24ad2f27a94bfff6f8f790a6fcc9206e3cc8797ec270f95", 0xb2}], 0x1, 0x0, 0x0, 0x40}, 0x20000001) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x77, 0x0, [0x4b564d02, 0x3]}) r4 = add_key(&(0x7f0000001a80)='id_resolver\x00', &(0x7f0000001ac0)={'syz', 0x1}, &(0x7f0000001b00)="9861b0a25e31db0d0fb550a7844a154ec25fc4d9aa3428fb77c34be4ad443953a35d6406946efb3fd604e4d3f72e305fbb84d9056fc0f406f5764c", 0x3b, 0xfffffffffffffff8) r5 = add_key(&(0x7f0000001b40)='id_resolver\x00', &(0x7f0000001b80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000001e00)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fee000/0x1000)=nil, 0x3000, 0x1}) r7 = add_key(&(0x7f0000001e40)='rxrpc\x00', &(0x7f0000001c00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001c40)={r4, r5, r7}, &(0x7f0000001c80)=""/74, 0x4a, &(0x7f0000001d80)={&(0x7f0000001d00)={'sha3-256\x00'}, &(0x7f0000001d40)="04f1d3e6a2e71505656514537986178b62b147d7ea567c8237573e50", 0x1c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 558.419631][ T2548] binder: 2421:2548 ioctl 40046207 0 returned -16 [ 558.452553][ T2579] binder: 2421:2579 Release 1 refcount change on invalid ref 1 ret -22 03:38:01 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) [ 558.613983][ T2988] binder: release 2421:2579 transaction 641 out, still active 03:38:01 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) socket$kcm(0x29, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000000010200, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000d80)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000070000000880000003f0000000066781096ce49b3616fe3ce2fc295c464c9e317656d5574f42819a514df74d307"], 0x0, 0x39}, 0x20) getsockopt$netlink(r3, 0x10e, 0x0, &(0x7f0000000200)=""/97, &(0x7f0000000000)=0x61) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 03:38:01 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000800)=ANY=[], 0xfffffd5b) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) r4 = geteuid() getgroups(0x1, &(0x7f00000002c0)=[0xffffffffffffffff]) r6 = getegid() fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x3}, [{0x2, 0x6, r3}, {0x2, 0x2, r4}], {0x4, 0x5}, [{0x8, 0x7ae1862e9623c2a1, r5}, {0x8, 0x5, r6}, {0x8, 0x3, r7}, {0x8, 0x0, r8}], {}, {0x20, 0x4}}, 0x54, 0x3) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x8000, 0x0) accept4$nfc_llcp(r9, 0x0, &(0x7f0000000500), 0x80800) sched_getparam(r2, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x80000}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setaffinity(0x0, 0x0, 0x0) [ 558.808241][ T2767] binder: 2766:2767 unknown command 0 [ 558.853523][ T2767] binder: 2766:2767 ioctl c0306201 20000140 returned -22 [ 558.854131][ T2774] binder: BINDER_SET_CONTEXT_MGR already set 03:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10002) r3 = getuid() r4 = getgid() fchown(r0, r3, r4) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x376, 0xf, 0x3, "8fdd0bc764b81dab3a0cba8e69b66eea57a297615951170eda0bb86b95ed7356", 0x35315258}) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000001c0)=""/30) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000100)=0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x6, 0x8, 0x80000000}}, 0x28) io_submit(r6, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) read$eventfd(r1, &(0x7f00000000c0), 0x8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) 03:38:01 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) add_key$user(&(0x7f0000000640)='user\x00', 0x0, &(0x7f0000000940), 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f0000000680)='trusted.overlay.opaque\x00', &(0x7f0000000800)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ffff07e8ff00307f2a9174075826bd6d22640008", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48, 0x7}, 0x0) setxattr$security_selinux(&(0x7f0000000880)='./bus\x00', &(0x7f00000009c0)='security.selinux\x00', &(0x7f0000000a40)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x2) setsockopt(r1, 0x6, 0x1, &(0x7f00000008c0)="5878a5efa0fceea020a445ae3a6938bb003dc14df5cd49a8025eab7320ec8b3ede6324a95ed865e6a458719c4c0a73922616e96eae9e0f21d9f2efd793068bc52edac10ae124a7b92ea7b4d9e86dce501bee6a1a7f1c9b53f90a491194a5439f0aa8a9659b41c5c8fa006b319af511b5e6346db51aae296f3613e91f3bf00212b7683d1d0025cb2cf070353ffcee9157c42774d97ea6e41c07b3672dbf266a795da8b0b18415559d42e39660ee1b778df48a53dd2d211d314850cd8340ef271118de70008d072fd3f40c1319de011ba8ad46bb82407aa689d516d8ff03461021afd0f76c699d", 0xe6) [ 558.922013][ T2774] binder: 2766:2774 ioctl 40046207 0 returned -16 [ 558.952011][ T2778] device lo entered promiscuous mode [ 558.962956][ T2774] binder: 2766:2774 BC_INCREFS_DONE node 645 has no pending increfs request [ 559.037033][ T2779] binder: 2766:2779 Release 1 refcount change on invalid ref 1 ret -22 03:38:01 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x80140912, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x2, 0x2) ioprio_get$uid(0x3, r1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0x40, 0x4) [ 559.086744][ T2860] binder: 2766:2860 BC_ACQUIRE_DONE node 645 has no pending acquire request 03:38:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x6000000}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x2c}]}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251, 0x0, 0x0, [], 0x0, 0x8}, 0x48) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x3f, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffff0001}, &(0x7f0000000100)=0x14) 03:38:01 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x4, 0x4, 0x101, 0x10001, 0x9}) 03:38:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0xfffffffffffffd28, 0x20000005, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040)="d7", 0x1, 0x4008000, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='p', 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x129500) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x3d, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x10, 0x9, 0x3e}, 0x2c) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x7, 0x4) 03:38:01 executing program 5: prctl$PR_GET_DUMPABLE(0x3) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7d, 0x7, 0x2, 0xfffffffffffffffe, 0x5}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x3, 0x4, 0xbd, 0x0, 0x82}, &(0x7f0000000380)=0x98) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'eql\x00', 0x43732e5398416f1a}) r3 = memfd_create(&(0x7f0000000600)='/d-\x1b\xb3\x82\xf9/J\xb0p*\xd8\x00\xea\x03\x83\xd8\x16\x88Qt\xceh\xeb\xb2\xc4\xfbf\xe1\xd5\xe5\x9aS\x964\xb5L/\xdb\xb4\xec\xd7C\xed\xcf\f\x01\x15\xae!T\x9eU\xee\xc6]3\xdb\xadx\x19\xf0w}y\x0f\xc3\xf2\xea;\x93\xe9\x13\x97E\xd8i\f6\xb6\xf9\\\xbd\xd1\\\x19\x0e\x93\x05\nC\x1b8)\xe3\x9b{\x8bT\x8a\xec\a\xc9-;\xf55n\xd1~\x7f\xa8eB\xc40&l\'a\x19\xdf\xad\x9aan\xaa\xc1h\x9e\x9a\xa94\xdcI{\xa9\xf3\x00u\xfb\x83\xa2An\x1cN\x05w\xcb\x811A\x98G\x87j\x02\x8cC\xed#\xb8+\xf2G6\xe5\xe8\x88<2\x92\x13&\x96\xe6\xdbl\xb0\x99\x9e\xe8Q\xd3\xe9S0\xb9\xb0\'\xf5\x05\xecV}\x89Z\n\xc5.\xf5\xa7\xe1\x97\x9dq\xe8\xa6\x99\x9d8b\xd3\xd9\xbe\x02D\x13\x19b\x7fm2\xed\xad\x04\x80\x12GM\x9dZ@=\xc9\x14\xf8\xdcb\x92@\xd1\xbb\xd2\xa331\x19\x8a\xc8:\xa1\xe6\xc2)7R\x1f\xd7\xea\xc2\x8b\xb7\xb3\xf4\xa7\xf1\x05\xea\xa6\x13D\xd2C\x98#5\xd6\x1dh(\xc7\xfe_-\x88\x86\xb4DP\x97\xd3J\xb5\xb5\xe4\x84\x84\x06\xcd\xa59\x9e\x1f\xb4\x03\xce1XP|T%\xfa\xb9\xf5\xc2\xbb\x9b\xc8Q\n\xd9\x86l\xf2\x98\x8dC\xa5\xb8\xe9N1;\xc0[\xd5\xa8K\xfdE\x86\xb3\xf7?\xd9\xdeu\x10\x8fe\xfa\xe2c\x0ep\x9c\xb0\x80\x8e\x82\x1dz\xd5\x95\xff\xbc\xc7\xc8\xf7\xb7\x1e%\xd9\x8c\xf0<5a\xe8\xd2\nnO\xb4F\xe5\x8e\x1a\xcdc3\xe8\x85@j\x96Kk\xdc\xbfyB\xc0\xf4N\r\xd2w\xda\xe4\xa8]\xc0\xb9\xe5qJn\x91f8uxi\x04\r\x89\x8e8\xf7\xcc\x13E\xcc\x1b\xf4tK\x8ao\t\xb4\xc2?\xa6\xf0\xf9\x86/\x9d\xee\x9f\xb8x(\x1d\x90\xac=\xd6', 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x1) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000400)={'ip6_vti0\x00', 0x403}) dup3(r3, r2, 0x0) 03:38:01 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={0x0, 0x0, 0x0, 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x101000) close(r2) close(r1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2) close(r0) [ 559.353809][ T7764] binder: release 2766:2767 transaction 644 out, still active [ 559.361540][ T7764] binder: unexpected work type, 4, not freed 03:38:01 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0xb18, [0x20001ac0, 0x0, 0x0, 0x20001af0, 0x20001c50], 0x0, &(0x7f0000000040), &(0x7f0000001ac0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'gre0\x00', 'syz_tun\x00', 'team0\x00', 'nr0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0x1], @broadcast, [], 0xf8, 0xf8, 0x130, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0xd5afcef767b71f8}}}, @ip={'ip\x00', 0x20, {{@local, @remote}}}]}}, @snat={'snat\x00', 0x10, {{@local}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, ',ose\x00\v\x00\x00\x00\x00T\xf19X\b\x00', 'vlan0\x00', 'syzkaller0\x00', 'ifb0\x00', @dev, [], @empty, [0x2], 0x928, 0x928, 0x958, [@devgroup={'devgroup\x00', 0x18}, @among={'among\x00', 0x850, {{0x0, 0x0, 0x0, {[], 0x3, [{[], @local}, {}, {[], @multicast1}]}, {[], 0x1, [{[], @local}]}}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0xb90) accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80000) accept4$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x800) [ 559.398927][ T7764] binder: undelivered TRANSACTION_COMPLETE 03:38:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xf5, "abf75012380631ed4bcbdf0b4897cecb8a1e2663f45f52cd1bc4f8197e31d43f67b026d94d472e1bb7efd5f17ecf8e55bf6ea36e1db293cb9a49231a0b0343b8a8467a64ab626beeba2c5c3511e38394400be00547c52b3d472ace74e999adf4cea8d1b4a8503e30cb7af3dfd013bc984015f5f5be6955ac23be240606f0c87fc4865b665f442be4521930a2bbe9f9c412c6c3e928e2a2ba292b5bb4a4f004176152de908a08b282e9ef131474939c439d2528a454387acc49054550592601d38374e2bed88e591dc151ce3fd8c2883552ae4d6140f14fe915c94d5aeeca90e127eee629ee16da1dfa48c1f4a74ba33893abfebddc"}, &(0x7f00000001c0)=0xfd) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r2, 0x0, 0x30, 0x0, 0x5}, &(0x7f0000000240)=0x18) lseek(r0, 0x0, 0x2) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, 0x0) sendfile(r0, r1, 0x0, 0x40d09) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 03:38:02 executing program 3: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x100000, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x101000) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000340), 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@my=0x0}) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000000c0)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x2e, &(0x7f0000000100)={@multicast1, @loopback, @local}, &(0x7f00000002c0)=0xc) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 03:38:02 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4002, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x10, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x4, 0x1937b49d}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x12}, 0x4}}, 0x101, 0x2}, &(0x7f0000000240)=0x90) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 559.664034][ T3134] binder: 3129:3134 unknown command 0 03:38:02 executing program 3: socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) getpid() prctl$PR_SET_FP_MODE(0x2d, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00!\x01\a\x00\x00\x00L\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 559.726295][ T3134] binder: 3129:3134 ioctl c0306201 20000140 returned -22 [ 559.757857][ T3286] binder: 3129:3286 Release 1 refcount change on invalid ref 1 ret -22 03:38:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000340)={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'}, &(0x7f0000000280)=0xfffffffffffffef2) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x8040) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000680)=""/227) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000000)={0x64763bc5, 0x1}) fcntl$notify(r0, 0x402, 0x80000000) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000300)={0x0, 0x1ff}) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, &(0x7f0000000240)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2842, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbac, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x9, 0x20a, 0x7, 0x5, 0x0, 0x7fffffff, 0x7ff, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xf95}, &(0x7f00000004c0)=0x8) poll(&(0x7f0000000000), 0x1, 0x2) r4 = memfd_create(&(0x7f00000000c0)='/dev/loop#\x00', 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000640)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) sendfile(r1, 0xffffffffffffffff, 0x0, 0x102000002) [ 559.782558][ T26] audit: type=1804 audit(2000000282.206:11865): pid=3249 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir124039892/syzkaller.TiLzZ4/563/bus" dev="sda1" ino=16753 res=1 03:38:02 executing program 5: bind$ax25(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0xfffffd20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) wait4(r2, 0x0, 0x80000000, 0x0) exit_group(0x0) select(0x40, &(0x7f0000000180)={0x9, 0x1, 0x8, 0x0, 0x43f, 0x27, 0x1}, 0x0, &(0x7f0000000240)={0x6, 0x77, 0xffff, 0x9, 0x0, 0x0, 0x3, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r3, 0xc294, 0x0, 0x10a, 0x978}, &(0x7f0000000200)=0x18) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r4, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 03:38:02 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80001) close(r1) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x5}) 03:38:02 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:02 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x202000, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000002c0)={{0x5, 0x5, 0x0, 0x80, 'syz0\x00', 0x3}, 0x2, 0x2e, 0x3733, r2, 0x2, 0x800, 'syz0\x00', &(0x7f0000000400)=['cgroup\x00', '\xf5#o\xed\x9a\xcc\xd9`N\xb8\x01\x00\x85'], 0x14, [], [0x5, 0x86, 0x1, 0x6]}) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@null=' \x00', 0x0, 'veth0\x00'}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000180)={r1, r1, 0x9}) rt_sigsuspend(&(0x7f0000000140)={0xf6d}, 0x8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x800100b, 0x7f, 0x2}) 03:38:02 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@caif=@dbg, &(0x7f0000000140)=0x80, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000680)={@loopback, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000009c0)={0x0, @initdev, @multicast1}, &(0x7f0000000a00)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000a40)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000a80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000e00)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000f00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10010a00}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)=@ipmr_delroute={0x78, 0x19, 0x1, 0x70bd26, 0x25dfdbfc, {0x80, 0x14, 0x10, 0x80000001, 0xff, 0x2, 0xff, 0x8, 0x2700}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_IIF={0x8, 0x1, r2}, @RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x33, @ipv4=@multicast2}}, @RTA_MULTIPATH={0xc, 0x9, {0x7f, 0x7, 0x401, r3}}, @RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_UID={0x8, 0x19, r4}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_IIF={0x8, 0x1, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x10000, 0x0, r6}}, @RTA_OIF={0x8, 0x4, r7}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0xf00000000000000, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x6, 0x0, r8, 0x0, [0x305f, 0xa]}, 0x2c) r9 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x80) ioctl(r9, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x1c}}, 0x4040) [ 560.174194][ T3303] bond0: Releasing backup interface bond_slave_1 [ 560.196982][ T2988] binder: release 3129:3286 transaction 647 out, still active 03:38:02 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 560.385548][ T3449] binder: 3421:3449 unknown command 0 03:38:02 executing program 2: r0 = epoll_create1(0x80800) r1 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 560.428017][ T3449] binder: 3421:3449 ioctl c0306201 20000140 returned -22 [ 560.533518][ T26] audit: type=1804 audit(2000000282.956:11866): pid=3288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir124039892/syzkaller.TiLzZ4/563/bus" dev="sda1" ino=16753 res=1 03:38:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000500)={0x0, 0x5}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x2, 0x400, 0x80000002}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x12f, 0x8, 0x0, 0x3f, 0x3, 0x0, 0x1, {0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x8001, 0xd4fa, 0x3, 0x1, 0x1000}}, &(0x7f00000006c0)=0xb0) sendmsg$inet_sctp(r1, &(0x7f00000007c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="23814bae5d63b7cc4e9cb2edb5ef8ac841f395c36a91fb2a514b56846b0a1623f1bc1e96cc2153e49cdd211c5e0052efe597f3a658ddef9e5c0d3213138d5f104d48a534abe468389c8141676cf0a285af1e6d", 0x53}, {&(0x7f0000000140)="d9451022167a43b48d8e0a1499c9f2f34d18a531a098c6cf4cd0605afb0f0e97b188e3aa3403f2915d75e89fd718bc71fb269192db0dc5b3e5a5aa51abb71041f9b9cf245a8ce0f2818868e5e0738de77d7d1ae0a21c8f1b79fdebc3f3975b8e3e6452dbadcc2b8b4fc6c704f769bddb8db6389c60bf18d89b23af12", 0x7c}, {&(0x7f00000001c0)="9bd66f116b2833dadee2c60f85203471dea0942cb4a5f082fd00bc49ebf888c8c63fcd9ed552c8413d21e8df5f088e0a65cd1d9570634f58bd1daa2188be7fb48e0fca61ca73c0f28f297917de2d0098963de6fc6925400996dc2ed41dd36c4be61d81981e0e17c756516428ecc9e1f224bcfae7f4dbfd9d32b4c305ad9b724f6fdd82b7ce5681ce1c177bd3f64c89bf", 0x90}, {&(0x7f0000000380)="c4e0b06b3ab257fcacbda764643b176724a97458400c4ab17cc2c5eaca3af3e699c72ec944fe7162bdaeca145fe7406f0f2b40cfdb6e859a4dfa8fdc828b35d889e2e1f2cdf6e87647d23a8c974c0b84840aa922e01576df5c30efd8ea75bee11f3bd572dff24e39eea9a6b293e937425b28a077206ab72caeb8c466617faeebe4a4086cd1ff06871b4800ed7d7624f0ed52b57873f7e0bf95d84416491a947ea5615d881aef8a8229d1aef2a4d4b2280c6000447746a346983863db7afc4f0371ad6eab539d8ee65625", 0xca}], 0x4, &(0x7f0000000700)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x3f, 0x0, 0x3, 0x7, 0x6, 0x200, 0x7ff8000000000000, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x7fffffff, 0x101, 0x8002, 0x100, 0xffff, 0x20, 0x6534, 0x300000000, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x10000, 0x1, 0x1, 0x63, r4}}, @init={0x18, 0x84, 0x0, {0x7fffffff, 0x80, 0xc9, 0x100000001}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0xc, 0xd1, 0xfffffffffffffffa, r5}}], 0xb8, 0x400c0c1}, 0x4000) r6 = gettid() setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e617400000100000000000000000000e4dbb7748700100067908155d000006366fbc0040100000000000000000000001b00000005030000180a0000cc000000ac01800000000000e090e195916dd282f2ce8b9c42853704000000ba6410779bc6b8bdcb885a0c15629383e1fd9044ecfbc9d2ae21de7246fcf729915221db8a35fc5d4cc33381472821730000008fcf08a317fd07756f7f252d7b32d8e3bae34cdac28919e4"], 0x1) ptrace$setopts(0x4206, r6, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r6, 0x3c) 03:38:03 executing program 1: getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x6, &(0x7f0000000300)=[{&(0x7f0000000080)="68cb83dc69223a063ae13ac29d336f48", 0x10, 0x5}, {&(0x7f00000000c0)="873263d62353da1314", 0x9, 0x7fff}, {&(0x7f0000000100)="fb0a3efff01cd74e0a00ab602a939e911810cf768aea31da212767ca5c6f251b", 0x20, 0x9}, {&(0x7f0000000140)="c46200a3bd424e9c97e623b051bfda57881737af1ce500edca87a34d91000cd3b32a67a96876d5658f1cac85db89e275c66e4b51b287e0cb4e9409bdef0cb67ac9007e69df1810e29078dc617aa38b", 0x4f, 0x5}, {&(0x7f00000001c0), 0x0, 0x7fff}, {&(0x7f0000000200)="afc35fae9daa74096e1dc4175ac94dce7e2ae6620db6e114cb8f07513799ca1f85cf571d685eec4c24638a60139a935d6449d2373650909bf0e50ddd190931767a301692926deca65f66290084eaa3c7c99336f109278ed12a8a566c398135b6b4dcbea400f4a6659e89dd9a206483ba5b0add2ca2a1935792707046afb92d16ac4a3f9dbe2f38e66dbb2eace080fab53f880a366a1678370533d2b8e33c355c9da7b5966a611373b5f9331c1092728b800089c7ac080ad4e216c3b698479f1ba9bfde", 0xc3, 0x5}], 0x40, &(0x7f0000000480)={[{@disable_sparse_yes='disable_sparse=yes'}, {@fmask={'fmask', 0x3d, 0x9f2}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'em1$mime_type{!cpuset'}}, {@appraise='appraise'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'GPLcpusetkeyringem0'}}, {@appraise='appraise'}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.wlan0\\em0)+'}}, {@subj_type={'subj_type', 0x3d, 'vmnet1cgroupvboxnet0()ppp1%\'#systemeth0'}}]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r1, 0x0, 0x0) 03:38:03 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)={0x4, 0x7, 0x1ff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 561.915039][ T3336] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 561.943535][ T3593] bond0: Releasing backup interface bond_slave_1 03:38:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) pread64(r0, &(0x7f0000000200)=""/251, 0xfb, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x2200, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x6) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6tnl0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 03:38:05 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7, 0x400000) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000200)={0xff, {0x500000000000, 0x7f, 0x0, 0x7, 0x1, 0x8}}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x7fff, @local, 0xffffffffffffffff}, @in6={0xa, 0x4e22, 0xb8fa, @rand_addr="59243f08bcb1648c560682b1fa0eb366", 0x3}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x1000000000000000}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0x7, 0x8}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0xe70, 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc00, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:38:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2284, &(0x7f0000000080)=0x101) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000100)={0x6}, 0x8, 0x0) 03:38:05 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258"}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0xa000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x802, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0x2c, 0x31, 0x301, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}]}, 0x2c}}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "2c3cca70034911676a88e99cb9cb2a6b"}, 0x11, 0x2) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) write$capi20_data(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1000ca000183ff0746000000000000001200910646ede709725ab3804a5c00b1cb4d6648"], 0x24) [ 563.094976][ T3977] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 563.137468][ T3979] sd 0:0:1:0: device reset 03:38:05 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x440980, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x9, 0x1, 0xff, 0x2, 0x4, 0x326e}, &(0x7f0000000100)=0x20) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 563.163823][ T3975] binder: 3974:3975 unknown command 0 [ 563.178324][ T4005] sd 0:0:1:0: device reset [ 563.243875][ T3975] binder: 3974:3975 ioctl c0306201 20000140 returned -22 [ 563.273884][ T4054] binder: BINDER_SET_CONTEXT_MGR already set 03:38:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'nr0\x01\x00', 0x4005}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x240, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x2, &(0x7f0000000300)=""/200, &(0x7f00000004c0)=[{0x800, 0x61, 0x8, &(0x7f0000000080)=""/97}, {0xff, 0x70, 0x6, &(0x7f0000000400)=""/112}]}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x10000) close(r2) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 03:38:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x3, 0x4, 0x2, 0x0, r3}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x4) [ 563.311122][ T4054] binder: 3974:4054 ioctl 40046207 0 returned -16 03:38:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00010032002907e5000000000093e1e9d00000180000001400010004000000040000000000000020c30000"], 0x1}, 0x1, 0x0, 0x0, 0x1080000000000}, 0x40000) 03:38:05 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258"}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:05 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$RTC_UIE_ON(r2, 0x7003) 03:38:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) write$binfmt_misc(r1, &(0x7f0000000340)={'syz1', "b3764701795788238c54e3431abb86470c7d6b7672640005c046821fa98d77ad0b0d18c5cd11c88c88555aedc39df4eefd6681a261be530629393dae64f4b3ec9b82cf017137f9ad8890d2e1afaeeb16beb203b4374e099518cea0fbdb302bb3723e801e8acd6df0508e309bc21b7cadbc3148e9a6b22ba3f31e7f50"}, 0x80) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x620}], 0x1}}], 0x1, 0x0, 0x0) 03:38:06 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280)=r1, 0x4) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={r4, 0x28}, 0x8) ioctl$VIDIOC_LOG_STATUS(r3, 0x541b, 0x70a000) [ 563.534742][ T4219] device nr0 entered promiscuous mode [ 563.560915][ T4222] binder: 4211:4222 unknown command 0 [ 563.629985][ T4222] binder: 4211:4222 ioctl c0306201 20000140 returned -22 [ 563.645376][ T4291] binder: BINDER_SET_CONTEXT_MGR already set 03:38:06 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='+r$ma +cpu +cpu -rdma \x00pids \x00rdma '], 0x22) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x3d43}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f00000000c0)=0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000300)=0x8000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="b200e2006a0cc8d371611b220fdd51083d8ed8230ba81459c43fc6efb40879aff1ec867273c3f619a95f6536bf10cd374fa615c22b23830d2c86a5f33aa38b30545a3dff5dc561b48ea89f21a402778c9da0378907fec0e81a30eab1ba2277c537a29446d185f995b9d7131b450439ce607e936b2950c420644d815a8dff234a0cf53ff43b80412ec2eaaea42402354297f7fcf0e110cf4e78d1e20384e24c0614e2524e3e98c48601ffcf02d6f13363060023ec60cde61e48664dcc73b9f2b0c7133b713bda5c0f000e1d07fde44521ae0300b705548e41ff65583cc9c818906e1dfd5943cb"], 0xea) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='cgroup2\x00', 0x0, &(0x7f00000002c0)='nos\x00') 03:38:06 executing program 2: r0 = epoll_create1(0x4000000000000000) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000000)={{0x0, 0x1, 0x3, 0x3}, 0x5, 0x7fffffff, 0x8aec}) [ 563.678915][ T4291] binder: 4211:4291 ioctl 40046207 0 returned -16 03:38:06 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x24040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r1, 0x0, 0x2, 0x4}}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xa5f, 0x4) io_submit(0x0, 0x1, &(0x7f0000000c80)=[&(0x7f0000000380)={0x300000000000000, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10080, 0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000040)="91619578cc56d746d9d4ea23605fd4dd4a0e49ee0bf496", 0x17) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x2, 0x0) [ 563.787191][ T4323] e cgroup2: Unknown parameter 'nos' 03:38:06 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0x114, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258"}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x2, {0xa, 0x4e23, 0x80000001, @loopback, 0x5}, r1}}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000300)={0x3, r3}) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x101) ioctl$CAPI_GET_PROFILE(r4, 0xc0044308, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x4, r1, 0x30, 0x1, @in6={0xa, 0x4e23, 0xfff, @rand_addr="eb8f2482f8f6154b234ee89493c68b4f", 0x79e6}}}, 0xa0) r5 = dup3(r4, r4, 0x80000) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f00000000c0)=""/79) [ 563.963140][ C1] net_ratelimit: 26 callbacks suppressed [ 563.963149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 563.974805][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 564.051464][ T4404] binder: 4389:4404 unknown command 0 [ 564.065023][ T4404] binder: 4389:4404 ioctl c0306201 20000140 returned -22 [ 564.077855][ T4404] binder: BINDER_SET_CONTEXT_MGR already set [ 564.091747][ T4404] binder: 4389:4404 ioctl 40046207 0 returned -16 [ 564.123116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.123596][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 564.128931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 564.134702][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 564.146544][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 564.152600][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 564.159500][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 564.165739][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 564.299859][ T2988] binder: release 4389:4404 transaction 650 out, still active [ 564.308202][ T2988] binder: unexpected work type, 4, not freed [ 564.330054][ T2988] binder: undelivered TRANSACTION_COMPLETE 03:38:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x1}, 0xc) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x101000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000001240)=0x1008) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000001280)={0x1f, 0xd0bf, 0xd041, @remote, 'bridge_slave_1\x00'}) fsetxattr$security_selinux(r1, &(0x7f00000012c0)='security.selinux\x00', &(0x7f0000001300)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x70, 0x600}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x4, 0x100000000}, &(0x7f0000000100)=0x361) 03:38:06 executing program 2: r0 = epoll_create1(0xfffffffffffffffc) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x200, 0x200, 0x80000001, 0x6}) r1 = epoll_create1(0x0) close(r0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x86000, 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000180)="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", {0x0, 0x2, 0x3136564e, 0x4, 0x78, 0x1000, 0xd, 0x9}}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:06 executing program 0: munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4, 0x4042) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000280)=0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) splice(r0, &(0x7f0000000200), r2, &(0x7f00000002c0), 0x7fff, 0xa) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0xfffffffffffffc3d, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000974c895a2a7e1d83c6759f24e6a3dae37c3cdf6299004209373e0005010000f4140611d5b1a05d5c0d"], 0x1}}, 0x0) r5 = semget$private(0x0, 0x4, 0x0) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000000)=""/23) 03:38:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x0, 0xfffdfffffffffff7}, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb080045000014000020000000907800000000ffffffff00009078e0000001129b19e11b438f8519b912b865992858f61207498971e351733340f9fceb2634210cc2819a"], 0x0) 03:38:06 executing program 1: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3ee}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x7c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @mcast2, 0x4}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @empty}]}, &(0x7f00000001c0)=0x10) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='::,n\nnxllb:'], 0x0, &(0x7f0000000100)='ceph\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unlinkat(r0, &(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2000, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0xe, 0x3d4, 0x6, 0x2, 0x0, 0x70bd27, 0x3}, 0x10}}, 0x40000) 03:38:06 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xf8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:07 executing program 5: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000280)={0x9, 0xffffffffffffffff, 0x4, 0x8000, 0x10, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x8f6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r2, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @mcast2, 0x11c9}, 0xffffffffffffff37) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x8000, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x13}, 0x4}, 0x1c) r5 = dup(r1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000002c0)={0x2, 0x7e}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r4, 0x7, 0x6, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)={'team0\x00'}) accept$packet(r5, &(0x7f0000000400), &(0x7f0000000440)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000980)={@mcast2, 0x0}, &(0x7f00000009c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81, r6}) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r7 = fcntl$getown(r0, 0x9) syz_open_procfs(r7, &(0x7f0000000780)='net\x00') r8 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x4, 0x40000) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) getegid() getresgid(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 03:38:07 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x2000000}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) listen(r2, 0x0) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) write$input_event(r2, &(0x7f0000000040)={{r3, r4/1000+30000}, 0x2, 0x0, 0x1}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 564.567533][ T4452] binder: 4450:4452 unknown command 0 03:38:07 executing program 3: mkdir(&(0x7f0000000240)='./file0/bus\x00', 0x80) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0x14}, 0x14) fchdir(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) 03:38:07 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$addseals(r0, 0x409, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x188, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) [ 564.611584][ T4452] binder: 4450:4452 ioctl c0306201 20000140 returned -22 03:38:07 executing program 1: exit_group(0x6f2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000019c0)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001a00)={@multicast1, @loopback, r1}, 0xc) r2 = add_key(&(0x7f0000001a40)='asymmetric\x00', &(0x7f0000001a80)={'syz', 0x2}, &(0x7f0000001ac0)="581cb52ed35a40", 0x7, 0xfffffffffffffff9) r3 = request_key(&(0x7f0000001b80)='blacklist\x00', &(0x7f0000001bc0)={'syz', 0x3}, &(0x7f0000001c00)='/dev/rfkill\x00', 0xfffffffffffffffc) keyctl$search(0xa, r2, &(0x7f0000001b00)='trusted\x00', &(0x7f0000001b40)={'syz', 0x3}, r3) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001c40)={0x12713, 0x2, 0x2000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fcntl$addseals(r0, 0x409, 0x1) sendto$packet(r0, &(0x7f0000001c80)="895239947b1981652d54c088fb13ce91d2542caa5f476903c42f20fdb49fa8ddc6e4233f93548874424f54bfd978fbf0daada14222f68dbd839358af31148600eaf5da6bc363701134eb47d33633a05e350185a5a2bacff25482b61bbf0b2a200d89cb53e0ebc14cbc25093c6bd0b3286174750caecb7aec7c744bb577f5d4e41dde50d1f33c50670f6a44e0cd1514003171b326f1b8990b30e74046a8f297402e0fd55e1a72c497b2c690ee21698a67fb917166a62f5704a7227a7956e042d50b4421e4cdbe42773e3c0580cdafbc17", 0xd0, 0x5, &(0x7f0000001d80)={0x11, 0x2, r1, 0x1, 0xb55f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) write$apparmor_current(r0, &(0x7f0000001dc0)=@profile={'permprofile ', 'trusted\x00'}, 0x14) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000001e00)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000021c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000002180)={&(0x7f0000001f00)={0x264, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa6d, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x13}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800000000, @rand_addr="71eff5656ef033de5f1c59b7050afa49", 0x7}}}}]}, @TIPC_NLA_LINK={0xfc, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x600000000000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x590}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f08}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff2b}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa5b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x19}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x40000}, 0x4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002200)='/dev/mISDNtimer\x00', 0x2, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002240)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002280)=0x0) ptrace$setregset(0x4205, r7, 0x202, &(0x7f0000002380)={&(0x7f00000022c0)="c6c4882b4fba014216a94e38fcf2ccdd9271ba8ac8c26612aaa8ce429ea89a28988315e9ec5adfb4da26b3865d9de8328e64c464251b90a3378f549a17632a11ca18329a67875409728ac77e835ef79a5e005fec7dc98c115e5c9066cb637b5703baa2e674c0de0d1277df0acdef10e0de3d6d61d65826822d106a371d07b24aac0410e2d910a3d2c25416162dba7a7338a7d0005c0b54f34d26ff6f6749aa20969c6d93f241c7ec0bbd085bace7f49c8ae5cc4ac3287eb693", 0xb9}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000023c0)={0x0, @speck128, 0x1, "feb55b56ff384d60"}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000002400)={0x4, 0x81}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002440)='/dev/dlm-control\x00', 0x201, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) keyctl$negate(0xd, r2, 0x7, r2) accept4$tipc(r8, 0x0, &(0x7f0000002480), 0x80000) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f00000024c0)=0x14ae7856, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000002500)={{0x0, 0x1, 0x80000001, 0x3, 0x7a1}, 0x7, 0xfffffffffffffff7, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000025c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002580)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002600)={0x7, 0x8, 0xfa00, {r9, 0x401}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000002640)={'bcsh0\x00', {0x2, 0x4e23, @broadcast}}) [ 564.686336][ T4571] binder: BINDER_SET_CONTEXT_MGR already set [ 564.725110][ T4571] binder: 4450:4571 ioctl 40046207 0 returned -16 03:38:07 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@newsa={0x134, 0x10, 0x400, 0x70bd25, 0x25dfdbfd, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0x2b}, 0x4e21, 0xffff, 0x4e20, 0x6, 0x2, 0x80, 0x80, 0x2f, r3, r4}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x32}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {0x0, 0x10000, 0xfffffffffffffffb, 0x23, 0xffffffffffffffe1, 0xffffffffffffff80, 0x7, 0x7fff}, {0x0, 0x2, 0x3f, 0xf2c}, {0x3, 0x3, 0x3}, 0x70bd25, 0x34ff, 0x2, 0x0, 0x6, 0x40}, [@mark={0xc, 0x15, {0x350759, 0x2}}, @replay_thresh={0x8}, @output_mark={0x8, 0x1d, 0x8}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@mcast2}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x11) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/148, 0xfffffffffffffc1d}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r1, &(0x7f0000000480), 0x10000000000000f1, 0x0) [ 564.928759][ T4582] [ 564.931133][ T4582] ====================================================== [ 564.938149][ T4582] WARNING: possible circular locking dependency detected [ 564.945163][ T4582] 5.0.0-next-20190306 #4 Not tainted [ 564.950441][ T4582] ------------------------------------------------------ [ 564.957453][ T4582] syz-executor.0/4582 is trying to acquire lock: [ 564.963770][ T4582] 00000000f3009928 (&(&u->lock)->rlock/1){+.+.}, at: sk_diag_fill.isra.0+0x9c0/0xf30 [ 564.973247][ T4582] [ 564.973247][ T4582] but task is already holding lock: [ 564.980608][ T4582] 000000008f1a958b (rlock-AF_UNIX){+.+.}, at: sk_diag_fill.isra.0+0x8cb/0xf30 [ 564.989469][ T4582] [ 564.989469][ T4582] which lock already depends on the new lock. [ 564.989469][ T4582] [ 564.998362][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 564.999867][ T4582] [ 564.999867][ T4582] the existing dependency chain (in reverse order) is: [ 564.999880][ T4582] [ 564.999880][ T4582] -> #1 (rlock-AF_UNIX){+.+.}: [ 565.021370][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 565.022946][ T4582] lock_acquire+0x16f/0x3f0 [ 565.022961][ T4582] _raw_spin_lock_irqsave+0x95/0xcd [ 565.022983][ T4582] skb_queue_tail+0x26/0x150 [ 565.048923][ T4582] unix_dgram_sendmsg+0xc31/0x11e0 [ 565.054568][ T4582] sock_sendmsg+0xdd/0x130 [ 565.059501][ T4582] ___sys_sendmsg+0x3e2/0x930 [ 565.064723][ T4582] __sys_sendmmsg+0x1bf/0x4d0 [ 565.069918][ T4582] __x64_sys_sendmmsg+0x9d/0x100 [ 565.075371][ T4582] do_syscall_64+0x103/0x610 [ 565.080475][ T4582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.086875][ T4582] [ 565.086875][ T4582] -> #0 (&(&u->lock)->rlock/1){+.+.}: [ 565.094434][ T4582] __lock_acquire+0x239c/0x3fb0 [ 565.099884][ T4582] lock_acquire+0x16f/0x3f0 [ 565.104906][ T4582] _raw_spin_lock_nested+0x35/0x50 [ 565.110538][ T4582] sk_diag_fill.isra.0+0x9c0/0xf30 [ 565.116253][ T4582] unix_diag_dump+0x35c/0x550 [ 565.121451][ T4582] netlink_dump+0x55d/0xfb0 [ 565.126471][ T4582] __netlink_dump_start+0x5b4/0x7e0 [ 565.132186][ T4582] unix_diag_handler_dump+0x390/0x740 [ 565.138075][ T4582] sock_diag_rcv_msg+0x322/0x410 [ 565.143527][ T4582] netlink_rcv_skb+0x17a/0x460 [ 565.148812][ T4582] sock_diag_rcv+0x2b/0x40 [ 565.153747][ T4582] netlink_unicast+0x536/0x720 [ 565.159031][ T4582] netlink_sendmsg+0x8ae/0xd70 [ 565.164310][ T4582] sock_sendmsg+0xdd/0x130 [ 565.169241][ T4582] sock_write_iter+0x27c/0x3e0 [ 565.174523][ T4582] do_iter_readv_writev+0x5e1/0x8e0 [ 565.180235][ T4582] do_iter_write+0x184/0x610 [ 565.185337][ T4582] vfs_writev+0x1b3/0x2f0 [ 565.190178][ T4582] do_writev+0xf6/0x290 [ 565.194856][ T4582] __x64_sys_writev+0x75/0xb0 [ 565.200050][ T4582] do_syscall_64+0x103/0x610 [ 565.205158][ T4582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.211556][ T4582] [ 565.211556][ T4582] other info that might help us debug this: [ 565.211556][ T4582] [ 565.221773][ T4582] Possible unsafe locking scenario: [ 565.221773][ T4582] [ 565.229211][ T4582] CPU0 CPU1 [ 565.234568][ T4582] ---- ---- [ 565.239918][ T4582] lock(rlock-AF_UNIX); [ 565.244158][ T4582] lock(&(&u->lock)->rlock/1); [ 565.251513][ T4582] lock(rlock-AF_UNIX); [ 565.258348][ T4582] lock(&(&u->lock)->rlock/1); [ 565.263192][ T4582] [ 565.263192][ T4582] *** DEADLOCK *** [ 565.263192][ T4582] [ 565.271327][ T4582] 5 locks held by syz-executor.0/4582: [ 565.276767][ T4582] #0: 0000000078f0bda3 (sock_diag_mutex){+.+.}, at: sock_diag_rcv+0x1c/0x40 [ 565.285804][ T4582] #1: 0000000035880812 (sock_diag_table_mutex){+.+.}, at: sock_diag_rcv_msg+0x19d/0x410 [ 565.295720][ T4582] #2: 000000001e2fb1bc (nlk_cb_mutex-SOCK_DIAG){+.+.}, at: netlink_dump+0xe7/0xfb0 [ 565.305102][ T4582] #3: 00000000fa71f21c (unix_table_lock){+.+.}, at: unix_diag_dump+0x10d/0x550 [ 565.314138][ T4582] #4: 000000008f1a958b (rlock-AF_UNIX){+.+.}, at: sk_diag_fill.isra.0+0x8cb/0xf30 [ 565.323444][ T4582] [ 565.323444][ T4582] stack backtrace: [ 565.329335][ T4582] CPU: 0 PID: 4582 Comm: syz-executor.0 Not tainted 5.0.0-next-20190306 #4 [ 565.337911][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.347963][ T4582] Call Trace: [ 565.352072][ T4582] dump_stack+0x172/0x1f0 [ 565.356402][ T4582] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 565.362478][ T4582] check_prev_add.constprop.0+0xf11/0x23c0 [ 565.368278][ T4582] ? check_prev_add.constprop.0+0x664/0x23c0 [ 565.374262][ T4582] ? check_usage+0x570/0x570 [ 565.378862][ T4582] ? check_usage+0x570/0x570 [ 565.383462][ T4582] ? is_dynamic_key+0x1c0/0x1c0 [ 565.388310][ T4582] ? __lockdep_reset_lock+0x450/0x450 [ 565.393853][ T4582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 565.400089][ T4582] ? find_first_zero_bit+0x9a/0xc0 [ 565.405193][ T4582] __lock_acquire+0x239c/0x3fb0 [ 565.410047][ T4582] ? lockdep_hardirqs_on+0x418/0x5d0 [ 565.415331][ T4582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.421570][ T4582] ? mark_held_locks+0xf0/0xf0 [ 565.426426][ T4582] lock_acquire+0x16f/0x3f0 [ 565.430930][ T4582] ? sk_diag_fill.isra.0+0x9c0/0xf30 [ 565.436209][ T4582] _raw_spin_lock_nested+0x35/0x50 [ 565.441315][ T4582] ? sk_diag_fill.isra.0+0x9c0/0xf30 [ 565.446681][ T4582] sk_diag_fill.isra.0+0x9c0/0xf30 [ 565.451798][ T4582] ? unix_sysctl_unregister+0x80/0x80 [ 565.457168][ T4582] ? lock_downgrade+0x880/0x880 [ 565.462018][ T4582] ? kasan_check_read+0x11/0x20 [ 565.466869][ T4582] unix_diag_dump+0x35c/0x550 [ 565.471545][ T4582] netlink_dump+0x55d/0xfb0 [ 565.476042][ T4582] ? netlink_broadcast+0x50/0x50 [ 565.480973][ T4582] ? lock_downgrade+0x880/0x880 [ 565.485827][ T4582] __netlink_dump_start+0x5b4/0x7e0 [ 565.491026][ T4582] unix_diag_handler_dump+0x390/0x740 [ 565.496398][ T4582] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 565.501862][ T4582] ? sk_diag_fill.isra.0+0xf30/0xf30 [ 565.507148][ T4582] ? retint_kernel+0x2d/0x2d [ 565.511731][ T4582] ? unix_diag_handler_dump+0x740/0x740 [ 565.517273][ T4582] ? sk_diag_fill.isra.0+0xf30/0xf30 [ 565.522660][ T4582] ? sock_diag_rcv_msg+0x2f4/0x410 [ 565.527771][ T4582] sock_diag_rcv_msg+0x322/0x410 [ 565.532709][ T4582] netlink_rcv_skb+0x17a/0x460 [ 565.537468][ T4582] ? sock_diag_bind+0x80/0x80 [ 565.542137][ T4582] ? netlink_ack+0xb50/0xb50 [ 565.546731][ T4582] ? kasan_check_read+0x11/0x20 [ 565.551605][ T4582] sock_diag_rcv+0x2b/0x40 [ 565.556036][ T4582] netlink_unicast+0x536/0x720 [ 565.560797][ T4582] ? netlink_attachskb+0x770/0x770 [ 565.565903][ T4582] ? _copy_from_iter_full+0x259/0x8f0 [ 565.571270][ T4582] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 565.577513][ T4582] ? __check_object_size+0x3d/0x42f [ 565.582712][ T4582] netlink_sendmsg+0x8ae/0xd70 [ 565.587475][ T4582] ? netlink_unicast+0x720/0x720 [ 565.592405][ T4582] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 565.597959][ T4582] ? apparmor_socket_sendmsg+0x2a/0x30 [ 565.603411][ T4582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.609655][ T4582] ? security_socket_sendmsg+0x93/0xc0 [ 565.615110][ T4582] ? netlink_unicast+0x720/0x720 [ 565.620053][ T4582] sock_sendmsg+0xdd/0x130 [ 565.624936][ T4582] sock_write_iter+0x27c/0x3e0 [ 565.629701][ T4582] ? sock_sendmsg+0x130/0x130 [ 565.634557][ T4582] do_iter_readv_writev+0x5e1/0x8e0 [ 565.639754][ T4582] ? vfs_dedupe_file_range+0x780/0x780 [ 565.645212][ T4582] ? apparmor_file_permission+0x25/0x30 [ 565.650752][ T4582] ? rw_verify_area+0x118/0x360 [ 565.655599][ T4582] do_iter_write+0x184/0x610 [ 565.660188][ T4582] ? dup_iter+0x260/0x260 [ 565.664519][ T4582] vfs_writev+0x1b3/0x2f0 [ 565.668846][ T4582] ? vfs_iter_write+0xb0/0xb0 [ 565.673545][ T4582] ? kasan_check_read+0x11/0x20 [ 565.678401][ T4582] ? ksys_dup3+0x3e0/0x3e0 [ 565.682820][ T4582] ? kasan_check_read+0x11/0x20 [ 565.687670][ T4582] ? __fget_light+0x1a9/0x230 [ 565.692348][ T4582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.698587][ T4582] do_writev+0xf6/0x290 [ 565.702738][ T4582] ? vfs_writev+0x2f0/0x2f0 [ 565.707245][ T4582] ? do_syscall_64+0x26/0x610 [ 565.711935][ T4582] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.718006][ T4582] ? do_syscall_64+0x26/0x610 [ 565.722686][ T4582] __x64_sys_writev+0x75/0xb0 [ 565.727368][ T4582] do_syscall_64+0x103/0x610 [ 565.731965][ T4582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.737850][ T4582] RIP: 0033:0x458079 [ 565.742440][ T4582] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.762484][ T4582] RSP: 002b:00007fb7a030dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 565.770893][ T4582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 03:38:08 executing program 1: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000200)={0x102c, 0x7fff}) r0 = msgget$private(0x0, 0x2c) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/102) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000100)=0x200, 0x4) 03:38:08 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='-\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x324) close(r2) [ 565.778855][ T4582] RDX: 0000000000000001 RSI: 00000000200002c0 RDI: 0000000000000007 [ 565.786822][ T4582] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 565.794794][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb7a030e6d4 [ 565.802757][ T4582] R13: 00000000004c4b00 R14: 00000000004dd2b8 R15: 00000000ffffffff 03:38:08 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/98) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10203, 0x2, 0x3004, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0xef, 0x200, 0x5, 0x1ff}) 03:38:08 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xf8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 565.834630][ T7764] binder: release 4450:4452 transaction 653 out, still active [ 565.854379][ T4597] kobject: 'nr0' (0000000065de5819): kobject_add_internal: parent: 'net', set: 'devices' [ 565.866340][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 565.868651][ T7764] binder: unexpected work type, 4, not freed 03:38:08 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x22000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x4, 0x7, 0x9, 0x1, 0x7fffffff}) readahead(r0, 0x1, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0xffefffff00000004}}) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="56e8ea53d5239a2a0101a43cb37c78d3", 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000000c0)={0x4, 0xffff, 0x10001, 0x49}, 0x10) [ 565.888354][ T4597] kobject: 'nr0' (0000000065de5819): kobject_uevent_env [ 565.889949][ T7764] binder: undelivered TRANSACTION_COMPLETE [ 565.928076][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:08 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) move_pages(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000001000/0xb000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000009000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000005000/0x4000)=nil], &(0x7f0000000200), 0xfffffffffffffffd, 0x0) [ 565.934767][ T4597] kobject: 'nr0' (0000000065de5819): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 565.970181][ T4708] binder: 4657:4708 unknown command 0 [ 565.978572][ T4708] binder: 4657:4708 ioctl c0306201 20000140 returned -22 03:38:08 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f00000001c0)=""/10}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 565.989252][ T4597] kobject: 'queues' (000000001a504d9b): kobject_add_internal: parent: 'nr0', set: '' [ 565.992588][ T3875] kobject: 'loop4' (0000000065c5b6f1): kobject_uevent_env [ 566.007661][ T4597] kobject: 'queues' (000000001a504d9b): kobject_uevent_env [ 566.017907][ T4597] kobject: 'queues' (000000001a504d9b): kobject_uevent_env: filter function caused the event to drop! 03:38:08 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/98) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10203, 0x2, 0x3004, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0xef, 0x200, 0x5, 0x1ff}) [ 566.037605][ T4597] kobject: 'rx-0' (0000000078da3e4b): kobject_add_internal: parent: 'queues', set: 'queues' [ 566.052122][ T3875] kobject: 'loop4' (0000000065c5b6f1): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 566.070961][ T4597] kobject: 'rx-0' (0000000078da3e4b): kobject_uevent_env [ 566.088595][ T4597] kobject: 'rx-0' (0000000078da3e4b): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 566.101853][ T4597] kobject: 'tx-0' (0000000087093130): kobject_add_internal: parent: 'queues', set: 'queues' [ 566.121837][ T4597] kobject: 'tx-0' (0000000087093130): kobject_uevent_env 03:38:08 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/98) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10203, 0x2, 0x3004, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0xef, 0x200, 0x5, 0x1ff}) 03:38:08 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$addseals(r0, 0x409, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x188, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 03:38:08 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x7fffe) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000002400)={0x0, 0x7f, 0x10}, &(0x7f0000002440)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000002480)={r3, 0x343}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) recvmsg$kcm(r2, &(0x7f0000002380)={&(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x4}, 0x40002102) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000023c0)={r4, 0x2800000000, 0x4, 0x200, 0x2, 0x1ff, 0xffffffff}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000024c0)=@sack_info={r3, 0x80000001, 0xa1f8}, 0xc) 03:38:08 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x6, 0x1, 0x2, 0xff, 0x2, 0x1, 0x4, 0x7, 0x7, 0x5, 0x7f, 0x40, 0x8, 0xfffffffffffffffc, 0x9cc]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r3, 0x5}, 0x8) [ 566.131063][ T4597] kobject: 'tx-0' (0000000087093130): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 566.151599][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 566.166751][ T4597] kobject: 'batman_adv' (00000000ff49137a): kobject_add_internal: parent: 'nr0', set: '' [ 566.178071][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:08 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x6, @broadcast}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x98, "d83182f8b3f3be73052fe2990f78625d344ebeccd2edcf3171143250b28046bc1b4eba94174f9fd58cf7a394e6df63fcff72bb24cae63d7dded675d36029759a7e7152018ad2b739b1db243836a5445be875bfd2c2c6a45c454b4789a76427a0d9d508c8aeb2272e7529dae877a5ab165f35839332f024447d179915d2f5c21293fa5dbac467acbf26996d8cab3ab1a5119514768bb416b2"}, &(0x7f0000000100)=0xa0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x761b, @rand_addr="da1174f0ab453b688dd9c5696541c0d7", 0x1ff}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000200)=0x10) r3 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) fcntl$setflags(r3, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) [ 566.189604][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env [ 566.226011][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 566.239714][ T4692] kobject: 'batman_adv' (00000000ff49137a): kobject_uevent_env [ 566.269654][ T4692] kobject: 'batman_adv' (00000000ff49137a): kobject_uevent_env: filter function caused the event to drop! [ 566.288531][ T3875] kobject: 'loop4' (0000000065c5b6f1): kobject_uevent_env [ 566.302578][ T3875] kobject: 'loop4' (0000000065c5b6f1): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 566.326449][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 566.334935][ T4692] kobject: 'batman_adv' (00000000ff49137a): kobject_cleanup, parent (null) [ 566.339837][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 566.355545][ T4692] kobject: 'batman_adv' (00000000ff49137a): calling ktype release [ 566.363743][ T4692] kobject: (00000000ff49137a): dynamic_kobj_release [ 566.370435][ T4692] kobject: 'batman_adv': free name [ 566.374577][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env [ 566.382959][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 566.397798][ T4692] kobject: 'rx-0' (0000000078da3e4b): kobject_cleanup, parent 000000001a504d9b [ 566.410611][ T4692] kobject: 'rx-0' (0000000078da3e4b): auto cleanup 'remove' event [ 566.424203][ T4692] kobject: 'rx-0' (0000000078da3e4b): kobject_uevent_env [ 566.431435][ T4692] kobject: 'rx-0' (0000000078da3e4b): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 566.442607][ T4692] kobject: 'rx-0' (0000000078da3e4b): auto cleanup kobject_del [ 566.450601][ T4692] kobject: 'rx-0' (0000000078da3e4b): calling ktype release [ 566.458003][ T4692] kobject: 'rx-0': free name [ 566.462668][ T4692] kobject: 'tx-0' (0000000087093130): kobject_cleanup, parent 000000001a504d9b [ 566.471680][ T4692] kobject: 'tx-0' (0000000087093130): auto cleanup 'remove' event [ 566.479533][ T4692] kobject: 'tx-0' (0000000087093130): kobject_uevent_env [ 566.487039][ T4692] kobject: 'tx-0' (0000000087093130): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 566.498011][ T4692] kobject: 'tx-0' (0000000087093130): auto cleanup kobject_del [ 566.505650][ T4692] kobject: 'tx-0' (0000000087093130): calling ktype release [ 566.512926][ T4692] kobject: 'tx-0': free name [ 566.517582][ T4692] kobject: 'queues' (000000001a504d9b): kobject_cleanup, parent (null) [ 566.526783][ T4692] kobject: 'queues' (000000001a504d9b): calling ktype release [ 566.534294][ T4692] kobject: 'queues' (000000001a504d9b): kset_release [ 566.540990][ T4692] kobject: 'queues': free name [ 566.546154][ T4692] kobject: 'nr0' (0000000065de5819): kobject_uevent_env [ 566.553271][ T4692] kobject: 'nr0' (0000000065de5819): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 566.603276][ T4692] kobject: 'nr0' (0000000065de5819): kobject_cleanup, parent (null) [ 566.612302][ T4692] kobject: 'nr0' (0000000065de5819): calling ktype release [ 566.620282][ T4692] kobject: 'nr0': free name [ 566.627778][ T4597] kobject: 'nr0' (0000000038a1169e): kobject_add_internal: parent: 'net', set: 'devices' [ 566.638210][ T4597] kobject: 'nr0' (0000000038a1169e): kobject_uevent_env [ 566.649738][ T4597] kobject: 'nr0' (0000000038a1169e): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 566.659653][ T4597] kobject: 'queues' (00000000aeb7837c): kobject_add_internal: parent: 'nr0', set: '' [ 566.669794][ T4597] kobject: 'queues' (00000000aeb7837c): kobject_uevent_env [ 566.681363][ T4597] kobject: 'queues' (00000000aeb7837c): kobject_uevent_env: filter function caused the event to drop! [ 566.692357][ T4597] kobject: 'rx-0' (00000000eeb600d1): kobject_add_internal: parent: 'queues', set: 'queues' [ 566.702493][ T4597] kobject: 'rx-0' (00000000eeb600d1): kobject_uevent_env [ 566.709604][ T4597] kobject: 'rx-0' (00000000eeb600d1): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 566.720542][ T4597] kobject: 'tx-0' (00000000efa06728): kobject_add_internal: parent: 'queues', set: 'queues' [ 566.730795][ T4597] kobject: 'tx-0' (00000000efa06728): kobject_uevent_env [ 566.737882][ T4597] kobject: 'tx-0' (00000000efa06728): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 566.749819][ T4597] kobject: 'batman_adv' (00000000669ac926): kobject_add_internal: parent: 'nr0', set: '' [ 566.761808][ T4692] kobject: 'batman_adv' (00000000669ac926): kobject_uevent_env [ 566.769381][ T4692] kobject: 'batman_adv' (00000000669ac926): kobject_uevent_env: filter function caused the event to drop! [ 566.780760][ T4692] kobject: 'batman_adv' (00000000669ac926): kobject_cleanup, parent (null) [ 566.790239][ T4692] kobject: 'batman_adv' (00000000669ac926): calling ktype release [ 566.798088][ T4692] kobject: (00000000669ac926): dynamic_kobj_release [ 566.804718][ T4692] kobject: 'batman_adv': free name [ 566.810021][ T4692] kobject: 'rx-0' (00000000eeb600d1): kobject_cleanup, parent 00000000aeb7837c [ 566.819016][ T4692] kobject: 'rx-0' (00000000eeb600d1): auto cleanup 'remove' event [ 566.826864][ T4692] kobject: 'rx-0' (00000000eeb600d1): kobject_uevent_env [ 566.833995][ T4692] kobject: 'rx-0' (00000000eeb600d1): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/rx-0' [ 566.845139][ T4692] kobject: 'rx-0' (00000000eeb600d1): auto cleanup kobject_del [ 566.852721][ T4692] kobject: 'rx-0' (00000000eeb600d1): calling ktype release [ 566.860078][ T4692] kobject: 'rx-0': free name [ 566.864882][ T4692] kobject: 'tx-0' (00000000efa06728): kobject_cleanup, parent 00000000aeb7837c [ 566.874548][ T4692] kobject: 'tx-0' (00000000efa06728): auto cleanup 'remove' event [ 566.882364][ T4692] kobject: 'tx-0' (00000000efa06728): kobject_uevent_env [ 566.889477][ T4692] kobject: 'tx-0' (00000000efa06728): fill_kobj_path: path = '/devices/virtual/net/nr0/queues/tx-0' [ 566.900398][ T4692] kobject: 'tx-0' (00000000efa06728): auto cleanup kobject_del [ 566.908054][ T4692] kobject: 'tx-0' (00000000efa06728): calling ktype release [ 566.915377][ T4692] kobject: 'tx-0': free name [ 566.920026][ T4692] kobject: 'queues' (00000000aeb7837c): kobject_cleanup, parent (null) [ 566.932255][ T4692] kobject: 'queues' (00000000aeb7837c): calling ktype release [ 566.939808][ T4692] kobject: 'queues' (00000000aeb7837c): kset_release [ 566.946548][ T4692] kobject: 'queues': free name [ 566.951608][ T4692] kobject: 'nr0' (0000000038a1169e): kobject_uevent_env [ 566.958730][ T4692] kobject: 'nr0' (0000000038a1169e): fill_kobj_path: path = '/devices/virtual/net/nr0' [ 566.993257][ T4692] kobject: 'nr0' (0000000038a1169e): kobject_cleanup, parent (null) 03:38:09 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000007006080290000000000800002ffe700005a11a2e721bd78ac69d6b21dfb007779e6821ddf2d408a69ef8a14b6a16424b0800974"], 0x14}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c83115ab7, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000080)={0x6, 0x2}) 03:38:09 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/98) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10203, 0x2, 0x3004, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0xef, 0x200, 0x5, 0x1ff}) 03:38:09 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xf8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:09 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) 03:38:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x240800, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r2 = socket(0x22, 0x2, 0xfffffffffffffff7) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000)=0x40, 0x8) r3 = socket(0x10000000000000c, 0x800000, 0x80) getsockopt$inet_int(r0, 0x0, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r3) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}, {0xa, 0x4e22, 0x1f, @remote, 0x52e}, 0x7, [0xfffffffffffffffe, 0x0, 0x81, 0xb0c, 0x4, 0x3, 0x0, 0x9]}, 0x5c) [ 567.002244][ T4692] kobject: 'nr0' (0000000038a1169e): calling ktype release [ 567.009851][ T4692] kobject: 'nr0': free name [ 567.024984][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 567.032183][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:38:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000500), 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r2) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) pwrite64(r1, &(0x7f0000000040)="345067ac251e4e4699a8d061f38dfb16412cd042ac91e581c11e122e2d6684f32aae0290a3821338323af9e2d8b69a59a672198938990d4216d01da7e48ec6ef9716495a84dedef16fa52609a78ff6fda36f14d256c1a22b31d46ae7f348748389a69be43cd36210d9a23fa94bf3a09e4658e12158e6f6fa31c4da3f05471bd64dcffbc2baa6", 0x86, 0x0) 03:38:09 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x22400, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x2d, 0x4, 0x0, {0x1, 0xfff, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x2}, 0x8) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0x3fe, 0xa, &(0x7f0000002740)=[{&(0x7f0000000280)="8d5e316fc11dfdb4eeb35ab0cea3be4d57d57a221140c92e5379e6e324c42a41c79769bb8d2b065372b01d2c50e903cb04da24c018a82521ad6817d3849daaf5683efda6d962e94a4ac6a90cd5815a0a62b1380efe21", 0x56, 0x1}, {&(0x7f0000000300)="b06a49b4ab4c84c7f7fad237303890dd1601203cba8847e3851706f768aae1a036767adccc9ea779755866981e2d4a97765a2ab6214fee0486c9d761d8d127a612419f212b3018a37a18f5103e3755240407e543668691130cc0fb6ff59c86", 0x5f, 0x401}, {&(0x7f0000000500)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000000380)="5f430484df3334ebfec05d02dfa8adf02afd1323d38ee4433b61f554e00f4a2450b3c36d154537e38be79cf3f3f896b500064c72ad35a40c13e4f1571615629d9368771d796d2534d8c483b68e90c088f4574cade214ae05beca812a080c48260cceb8879138693949901d13e2e2f434eca82c93e2943ec6e6b7e33bf1482332cb3420a0ce91579cb594baf2e4dbf72e4a539258e9711c8806aac9f2f78497400b9e76a3198bceded07b96faa3d84a3bb5d0e6e6364acc958b14259d1cb04edfa35fdf3705a030fc1e95025f624bf5161bebe1e73519855dd116ac", 0xdb, 0x401}, {&(0x7f0000001500)="de2211c29b6adc85dbf845999b203f948e2268fa07e605d540a24abf4e7d1a025cc4f68b9f84500398ff345b903eff8b569f4adb32da46ae27f252e91d2554f8a0a1cdc5c3726d3e9a15dbd000a947368ad305d016f4e6edc58cb7fdcdc6c239f432257ae68fa14b7f1fa9393fd66d3c9ab09fab9621e3a294480fd57245ca931cd0dc556162e468961358ac48d139641269a60e94e875f4e5cad1b2bbc6a0e217acfebbc4fea24479def0c015c4a6f90b02fec191d1d3926199f86cf08e3d2ae977b5535dcbfe08b202c902e6ac654fb93ebfea17d229", 0xd7, 0x6}, {&(0x7f00000001c0), 0x0, 0x10001}, {&(0x7f0000001600)="e0d1eef9201baf762a6b4fb4a4849bb41c1e89fb405ce31f1949f10202154c9e343cdec3a2cef985a07339881bb9f2be9821150db6fe6fb02ea611f80f4976ba8eff47d8bd5076c0fd2c6d33307c302bf9be8289a9ad720d3e9f46344228308a93527f137a9924552916364a2e606ca12fc965d4701aa14e60e2b8317535775fced2247fef1a1e57245ea3d60ac4703bdaf078fa097c435b4c70cf9b9d6bf423c34a423939d386689e22001417b656b7c577e138a9600b3e4eaa494d32f530dc69ec7b80d2b907394d18bcb9129fb656b95adc7b84288ce11f673036d685148862222122edc33d3c1f3f977d741edef60614fb29d6d09e33f7872278087a35e50cf2b01c85ce53c8e0a6fd114da0d2e24029f521c5553b5044bcc3eb6a383f8d99f715b84693ee3c098b657909addf3e95b9d31ecf40459c9e2c421759974fed61706c50c387e556e67973a684236e14d63e4e277c1c30adc59d5c6a52c57f8f8e44b499a5948f59435824a40659d45fd9f783e246abd8fb334c28f9e5993df27c270ffe6f915a36dc824bb2385c3b4da0701de3cd6d3520b3e9552e768f1473d4da25d38a477ccfb1ebbaaace78b1a34bb59d2b565f277e0840efc5d78a249551da53b13852a841c921af1a6327dc1ea2f5a4784d987b412e7f3d37a0a24101d5d80315ba5b95c97ccf06dccdf869b71dab32f794328ed158f01cecded703468d1a6da871a70a0246612e310cf1f029cad6c463d84c6f35e08da5b8d64c43175c1e19b6368afb345b47bb847d3c0cd1ee33f081a9d4d119258141b9d6d4abe7f19883d5047ba59456ddeb2c2f2bc05fa949099277f885f71531e05c952a724ee6c5386e422c935b19155200efed7a9bad183ff4f689b4a8a3345b27b953f7099cb8bb25b14030796f6dd543b3d857d5139234c5fddf4289dced7b5bfbaf16c94ce749da34442d334d211d85aba6bb0d325764ce80fc54bb6ef820fdd3fe0245f6cbc818c47ab551953f8a1d26442c535fb7afc3cbd9a0082481522550da86aaf1c67593936cef9f9fd15648fb10de1cf24dd20d92feb6e2394b6ba447c21c2c015fe46bca1a9a2df3580434a3358ec8be6e5216087de658ac90ae60273dcd5a164656961ce085bc4e9c46b7588ca2fc7138999edec36b1a9b8c7e910a92c46ef40f56dd45e711f058bcfeb5d8b5cab2fcecc159a5a3af9d1c7955f4a76410cc525a668e61cac1659d13432efd680db277dce7fec47d7cd717dd01bd392e7a1393c3d08587e4c5be3408ad64d499918cc26fd78a65f6ddcea5b1852edb02c5b84580e3f74de23628024f93ff7e6ac3ec089b0ec6f765f2f3d0a98b6f4a2b364951e6f009630f569714939c2656a75edc3c79ad0fc39c76e89dbe3970b66336a97a6eb61e5525107d8b70348b818b27261a0eaa4300c88da389f500ccd70f83b2f718205d540ece68cef4f63a1cf96567e29f8a3bcbf199a26de21edcbfc7cae0a3111f8a69b0bfaf7a5caa1188035b7050babea42f9721b33c8bd4e65a998e78d4754d54f9748ce8eaa2684b8a7349e1192607eb0fd4b869e174a9dd8cdcfb57cc69943301afa6f5fe4aaa61e6978edba316bd3edbd000a1f243cc197b407f69d091921e88bfb2d71fd2617ef94500694784457a5a58fdea3f75c283387f8183244545db060b8a33ac91ddb5599b626f024e135af0d3da4c5ae3ab292af1b9aab1410a51f28ac00b0823aa7a5cc4c7e46190dbe69318b8f9cc6fba56794eb0fb94f89e5e4ff316e5567202ec490e384a3baf34b3fe97afec6a06cb303b9755740e63e9de872dfbdac4a67aab73921db5095ce7a15aa9ca3c60eef1c9391e3e5b33aab74fb580422fe1f8004420eb1a2a9852d5eb640ab9e431cd81fbec0ead4d36c54e52101f37c18592d3cff638b681c5a782e053b056c5335646b00ea69f4b41fe92d106aa01acc2e5a94c121ba5bac51e809db1e8085385acabd29eb4f1a521f9add91f608d4e3e39fb25a61d3cf0a16a3071e1f4da4e649d646b11beb4f4799d618b616b4956a73e2a9b3903327e6fe59feb7fb6a9a7ad018684196968b4ca68dd7424b139775f9d11a89137a33086983fcecf6e62d8e809e1e4a9d7d85ba8321663cb58d7ec0279d48ef00bda736a6b8203552cc2bb97dba0ddee0fc67dca1ea7829635c0b13cfe064a9aff835e101d2ae0447920cc845015c5d7aadc6e9cfa654bb1b141decffd14487198fb7bd4e1ba7aec2c69e0ed1a69b7a8569495984e712b1174874454665902871435c85ce0084e1b9ec2c0b6855faadf7aeaad9ae604d7ef211824ba2a9063a9740d82ebcb395ec39f4c6f8fe1c26814ddfc48cbe5a8e94e719783af30be33d5fa244160e09edc714014cad9122055be35951065efbf2ae56edcc4f0cce9eede5ba0cd1b808871601ad52bcb511bb778345afee80419a19a26aba7f157626d1ca8450bca87a7b84524522bbb2cb78ce810a074c218b6c88d814681aa4a88da29a9411fdfedad70bbc8431662c5fd0d0e718effb9af47890ee0606e4d7590fa79517fc9ccdd78975570811b94e727303b53a9349f1a6f1c6b048529f02ecb728a9e8f3eff77e1f8636aaa0d4d89538e9722938f7372400a6e0212bf53ef07b3c5e0a0d045cd0170c2c061f14b20969499dc89442c45bf8f7c177887673131d33dfd30f40981885f81b95d7813acf4ca82e7cf412da21aefde06ce2e688f25e2532f07949ba0d00cf40855c950312caa4283475b07ae32affba9029a5cade2178d75b75bb7e8cf12da3c34101b377cf7947ea6e1ccae528e1b62c69710749d2ed31dee1f1c68a2ca89a37931549c2a01210e4e66057761c619d3739165b6515eaa250142dff38a97bc67d0ab1f0fb59998dd9ebabd41790edc051feb548c60361040effee5589ac63fb7870d6fd3faaa64e1054931aa529d488ee8e1b9a690b867df8430ccdfe83e8bcedc6e33d112744962fa377016daac513a57ad87221844997195fdfaf676953731bea99bf4cdf5c28c5e6beeec4f97a583719df0516a31931d3a9962562603089de4fcd77cf6087d196bccee6fcc3a10c3972d7627f465627d62a422e71d061b48e6bc49d147ce39e8c4a0e20ccbe1807b4caa2faa33b3be784ba33c0ffc4d4dbe69b91fbc57c29178235142bcc0be33f261ee3bac9b266ca20191ac050c152e68d15578d2dcb20bcf66ba05c552f03b2126296212d0fffb4650ae46a454d2072e9d4da3850b1093403667329f1d6f06992cc17808fd94f538abb93b45b3d928b130ea3c7044d86b6a3ed803fefa35edeb5f7965d2401653a9edd0d1d86397c29bbaa30d703379c90854474883a776c0d24f87b8bbac3c1e8a82d9241d8696759451b973842f26b528714fad427f8575989f0b1f2cee464741552b496783a407269e06851782a5843d51dab3d17291088ec6d42ba3ee80a70c576b44cf6830a4bbd1e5b7c9b68c88f50dd61762f28b082d073aab50840caedab80a6de47c8ea1e16d98cac63ecd8f47bc77e9fb9f7864c545d0ea508f94bfc26c2cd2ca1b4178916b749a2f761d0d3be32e34c7f4eb1bfc973ae59eb52fe11364015bd5d246f991ea775b8ebd128343a1575d7853507c09c8f9fa869c99854a9bee4f02b1f8ac3aaa47f8f40092139b1977688dd4cf3bef48415eda9e18f65a8a5b40a5c983d9671cb4158fd46225a20ff348329f7c6b352c1f595ecedd9eca4b333ad31b64de917d6e966e55441abc453f1b9d2c639c9480a646d3bb3f66a52656a84809be3dfda50fde19d752284c8b87d59b05cb32ef0758ad15d0e984096d1eb99b10fe5fe5fcf9a63e1738e3a144c8811f7cba6bfb685807cf0e4ffe1df307cc8ef729bcc6d7a32e794647980d45a7f6bd7c2212137f5dea34f7d2eacae01fce0fffa81549c21d4de0590dad2b8f5a9c9f042b050fbfe19c8f95d89b70e0061551cd0f3302b9e00b2c6cee18a6b4470d27b753c1463b1a228f427b8acfe6dd6759c6a10ee6c2e8b651482e11a89cddaa0fc1e5eb0d29e5f4941b6c35142dc67c74a302370c44c1143a8caae85c148f21939605a500907fc7e68fcfa8755055979c05a6ab0882d0a5656e621dd4317dd2574221fe0a52f57794034a7dc6768085ce775514cd7fbc168aac26a9a57d2955a27ef6a99d760be21f302bfc151c5c603833c867ec9315c8e08e9af2d950b6a26112d1d0af6db4b5527a36c3657b68e608b5f24ebcb4dbdd36f6c3776f6ca04a4b136dc15cd1f6d01cbf8d89ee388f0f79618449b11a04756cda7c0f3ca494f140a10836dc1dedc03c61001a0596d32a05d0a9e6d6f576ab521b1dcea846f86807ddd63d3b3c643190381bc8d0b0222c8ab559352fde05e0615cd2c34747d0d907d22b6654b6ad3845e608f17dd56fa8c65139775682c4146ab228a81942618d715fbfffce462960c96a6dbd4c5e6f65f3da8f968f78ec0d84f913134accadceebec81af74027d5642fff4adb9c2817f8450ef5ca8524bea772617e6973ede0e599db2445d0edd97b5a3a3803401becf1e26575dc6518c9bb68255cd0b08648fffb59efd930ced7397be2d653e0d8b89bdc6f0624e1e04230a9795f309a49606126b5186ce63faaf98765d699ec614e9530a506b676cb010a76fe7d914750e2b144594745109c71946565f857d5b5e30013f01ee32d5c42bd87544a25ecd18f2a6bf3ba44f2ffc46b9a21a3bc1b0128660319a9c14de6add77d8d1280e78a6dfa8adc86cb48cc83ad734479ca46615dfd9afe8742971048e9252943380d8710eadf2564836381f53a9434d99881f58b35a8092c1b8af5255ccb8821371946c961c479cd5d1a99a7b500084e2fa283407958cfb67725cb8ce9e70109d49976d91406a3bfd858d46df05e35b2c135dbb53b15cd5bf891e2318235f8b0094c423526523cb58ee4518722b862bca1d61a00194a561a78063b153e2f9dc0196bbdfe3ccdec4fbb44395982654145b6a892a657d687f1f058b7a855cbf2002e7c71bb76749b4eee1724ed041d26cfcf671d5465edcad810766d2a8a8e04938d633fdbf42d20fb15be78a16a60e39a91dc6b320a8980df8582b0c333c7d1a89a862fa5e99cef3f66e0baf879d0461bf619d8720412df67987b90235155343844138575681e2e6c492163241ef926c99ca540277df56d92c3dade4726fc611f6df8087609131bdcdfd1de0e38ee88153c493c0f64c757ccbb4d789fcd722c3cb29ca023bd9c1f3501e2095fdb5a7618e72b83f33e27ae1917f49a2b1912e8b756f75ea2cb3705ba306b27eed83911cd85e0429172cf5ba5ad0da539d6c3e9a7597cb308bee1655d5a9fdbaf352d7a696c4183b6433bb3b6d4eff2e0dbf3d3aab994997830230acdc2de3222f28ff3f5404a6973addbfa77a3f6e0e055296a077055b00d4fcfdda418df5da6967d546874561bcbb8532345ecf5f0a95ad3b02424eb3cdc58cfa1fdc5c53daa5a999e7b84fbd4b4e68ea395a631f1c56f784de76346fc99c66d5a147824fd2488b74d9c0df9f68599582d0199a56410ab63434ca66e347a8361afa285c3af39e148901d2a7f207e8922bcdd2ac68fb57bb5f118fcb6a7268a314e231587d1261301fbe67323eaadbebc2351cc223ae275049dbe266e4c7ed2539c217ca9f9d4cf4dfc71494c72945ac4531145258084ba505a58e6cca9b465ec8cb8b046b55a39df020949ecbd3c517e97ec83261cc59646274f02d31aa7cce6eb8c1fb95df34f01b694e09549c48e0d8ef35fb51fc468fb4ffd41927f8", 0x1000, 0x200}, {0x0, 0x0, 0x80}, {&(0x7f0000002600)="7a5da45ba53f48bd6343d7dd432544889a4a2ee9a265f831e9c2966ccb79194b2e0b192568d6d93764c99cce806a74b3971cd81acdb1f05d296381d5e70ab628791357a9ad54f77b29d4acaff4dd5faa2ca5332b00246de719efde52911903ef4144135353686e2f1c2f13a935a250a0b685223cde5bf0985c1c1f722d528bb3969a8e69ea5ab227b574a300a08a942bbdd186c832", 0x95, 0xffff}, {&(0x7f00000026c0)="5ba644fe6600c5af110d1205d6a7951c28ba766a132f31333c9733265969212cc0e7bcdb937f638e672dc561bb495ea007ad860a399de8c85f8200c6f1e6a86d658df6af00380a9d4671627c90d8c4f4804fb93c7bf5e87a3e7fd8ac8c5dd8423e25f21703e87014", 0x68, 0x4}], 0x11, &(0x7f0000000480)='/dev/hwrng\x00') connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="756b6f2f2c0025e2debcff4b7ccae0acd6b000", 0x13}], 0x0) 03:38:09 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) fcntl$dupfd(r0, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/78) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 567.145174][ T4944] binder: 4943:4944 unknown command 0 [ 567.169280][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 567.189149][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 567.203086][ T5056] binder: BINDER_SET_CONTEXT_MGR already set [ 567.209091][ T5056] binder: 4943:5056 ioctl 40046207 0 returned -16 [ 567.229332][ T4944] binder: 4943:4944 ioctl c0306201 20000140 returned -22 03:38:09 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000500), 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r2) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) pwrite64(r1, &(0x7f0000000040)="345067ac251e4e4699a8d061f38dfb16412cd042ac91e581c11e122e2d6684f32aae0290a3821338323af9e2d8b69a59a672198938990d4216d01da7e48ec6ef9716495a84dedef16fa52609a78ff6fda36f14d256c1a22b31d46ae7f348748389a69be43cd36210d9a23fa94bf3a09e4658e12158e6f6fa31c4da3f05471bd64dcffbc2baa6", 0x86, 0x0) 03:38:09 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x10000, 0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, r3, 0x702, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x47d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff795}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff000}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) [ 567.260982][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 567.283972][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:09 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xc0, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:09 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:09 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) [ 567.345386][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 567.380527][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000500), 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r2) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) pwrite64(r1, &(0x7f0000000040)="345067ac251e4e4699a8d061f38dfb16412cd042ac91e581c11e122e2d6684f32aae0290a3821338323af9e2d8b69a59a672198938990d4216d01da7e48ec6ef9716495a84dedef16fa52609a78ff6fda36f14d256c1a22b31d46ae7f348748389a69be43cd36210d9a23fa94bf3a09e4658e12158e6f6fa31c4da3f05471bd64dcffbc2baa6", 0x86, 0x0) [ 567.464606][ T3875] kobject: 'loop4' (0000000065c5b6f1): kobject_uevent_env [ 567.471834][ T3875] kobject: 'loop4' (0000000065c5b6f1): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:38:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) 03:38:10 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:10 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:10 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) [ 567.554693][ T5140] binder: 5138:5140 unknown command 0 [ 567.567101][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 567.569527][ T5140] binder: 5138:5140 ioctl c0306201 20000140 returned -22 [ 567.588488][ T5140] binder: BINDER_SET_CONTEXT_MGR already set [ 567.595084][ T5140] binder: 5138:5140 ioctl 40046207 0 returned -16 03:38:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000500), 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r2) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) pwrite64(r1, &(0x7f0000000040)="345067ac251e4e4699a8d061f38dfb16412cd042ac91e581c11e122e2d6684f32aae0290a3821338323af9e2d8b69a59a672198938990d4216d01da7e48ec6ef9716495a84dedef16fa52609a78ff6fda36f14d256c1a22b31d46ae7f348748389a69be43cd36210d9a23fa94bf3a09e4658e12158e6f6fa31c4da3f05471bd64dcffbc2baa6", 0x86, 0x0) [ 567.629898][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 567.661019][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env 03:38:10 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:10 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:10 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000040)=""/105, &(0x7f0000000100)=0x69) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) [ 567.709503][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 567.779820][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 567.816313][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:38:10 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xc0, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) 03:38:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000500), 0x10) sendmsg$can_raw(r2, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r2) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 03:38:10 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:10 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000000)={{0x3, 0x2, 0x6a3, 0x3, 0x6}, 0x57, 0xd3}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x80000001, {{0xa, 0x4e21, 0x0, @local, 0x4}}, {{0xa, 0x4e23, 0x1, @ipv4={[], [], @broadcast}, 0x8}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0xa, {0x2, 0x81, 0x401, 0x100000001}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x400, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x6, 0x3c5c, 0x1, 0x9, 0x9, 0xfffffffffffffffd, 0x4}, 0x1c) getrandom(0x0, 0x0, 0x2) [ 567.871305][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 567.908311][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 567.951055][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 567.960392][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:10 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:10 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0xb1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0x50, &(0x7f0000000240)}, 0x10) 03:38:10 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000500), 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r1) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) [ 568.028307][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env [ 568.032496][ T5225] binder: 5221:5225 unknown command 0 [ 568.055741][ T5225] binder: 5221:5225 ioctl c0306201 20000140 returned -22 03:38:10 executing program 1: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) [ 568.096591][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 568.107823][ T5247] binder: BINDER_SET_CONTEXT_MGR already set [ 568.134189][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env 03:38:10 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0xb1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0x50, &(0x7f0000000240)}, 0x10) [ 568.153748][ T5247] binder: 5221:5247 ioctl 40046207 0 returned -16 [ 568.187265][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:10 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xc0, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) 03:38:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000500), 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r1) 03:38:10 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) fcntl$setflags(r0, 0x2, 0x1) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) set_tid_address(&(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x5}) epoll_create1(0x80000) 03:38:10 executing program 1: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:10 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0xb1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0x50, &(0x7f0000000240)}, 0x10) [ 568.242442][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 568.293819][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 568.320231][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env 03:38:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000500), 0x10) close(r1) 03:38:10 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0xb1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r2, 0x50, &(0x7f0000000240)}, 0x10) 03:38:10 executing program 1: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) [ 568.340800][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 568.361769][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env 03:38:10 executing program 2: r0 = epoll_create1(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400082, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000280)={0x2, 0x0, [0x6, 0x2, 0x7ff, 0x7, 0x8, 0x6, 0xfff, 0xc4]}) r2 = epoll_create1(0x80000) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) r3 = semget$private(0x0, 0x3fffd, 0x80) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000180)=""/73) close(r0) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x5}) getsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r1, 0x0, 0x25, &(0x7f0000000300)='nodev(!nodev:md5sum:@cpuset#security\x00'}, 0x30) migrate_pages(r5, 0x6a, &(0x7f0000000380)=0x8, &(0x7f00000003c0)=0x2) [ 568.393401][ T5270] binder: 5269:5270 unknown command 0 [ 568.399181][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:10 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) 03:38:10 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0xb1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30) [ 568.444601][ T5277] binder: BINDER_SET_CONTEXT_MGR already set [ 568.451497][ T3875] kobject: 'loop4' (0000000065c5b6f1): kobject_uevent_env [ 568.475928][ T5277] binder: 5269:5277 ioctl 40046207 0 returned -16 [ 568.482934][ T3875] kobject: 'loop4' (0000000065c5b6f1): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 568.506301][ T5270] binder: 5269:5270 ioctl c0306201 20000140 returned -22 [ 568.526562][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 568.547046][ T5289] binder: 5269:5289 Release 1 refcount change on invalid ref 1 ret -22 [ 568.563911][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 568.586827][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env 03:38:11 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xf8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000500), 0x10) close(r1) 03:38:11 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0x59, &(0x7f0000000040)="8e7084e380dbf3ae9ce0f9bd5c7169d0f5bfa7646c9a3ea61eb68d6f87264a9d794e565fcc07f733898e0a154fd888a5b3b1847f506841912f77dd185d86bd2e44b495bb634ba5667a2508a82845aeea11dcdfb119031e0dfe"}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x5}) 03:38:11 executing program 1: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0x3, 0x4) 03:38:11 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)={r2, r0, 0xb1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) [ 568.605655][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 568.632922][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env [ 568.641215][ T2988] binder: release 5269:5298 transaction 656 out, still active [ 568.650392][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' 03:38:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000500), 0x10) close(r1) 03:38:11 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) 03:38:11 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:11 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r2 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="a4de8b0a2eb9e47c1dbd78202d8832c73c9bae8eb71d9919a08d4c174997a7a9e1562e973a9b0b301b7123f87102a853cdeaff8b6057295b1e512aed18b322f05c9be8ba003bc979820002d36558815f38ac5923a8ac4c3026244b1b6a8dfbb3", 0x60, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="cd5a4fe01785404e2d18984047", 0xd, r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) exit(0x67f) [ 568.731664][ T3875] kobject: 'loop4' (0000000065c5b6f1): kobject_uevent_env [ 568.751772][ T3875] kobject: 'loop4' (0000000065c5b6f1): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 568.767988][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 568.809968][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 568.877767][ T5314] binder: 5313:5314 unknown command 0 [ 568.903705][ T5314] binder: 5313:5314 ioctl c0306201 20000140 returned -22 03:38:11 executing program 1: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r1) [ 568.928186][ T5337] binder: BINDER_SET_CONTEXT_MGR already set [ 569.028638][ T5337] binder: 5313:5337 ioctl 40046207 0 returned -16 03:38:11 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xf8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 569.072804][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 569.091459][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:38:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) socket$inet6(0xa, 0x2, 0x8) 03:38:11 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) 03:38:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r1) 03:38:11 executing program 1: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:11 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) [ 569.155036][ T3875] kobject: 'loop4' (0000000065c5b6f1): kobject_uevent_env [ 569.179044][ T3875] kobject: 'loop4' (0000000065c5b6f1): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:38:11 executing program 1: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(r1) 03:38:11 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) read$alg(r0, &(0x7f0000000140)=""/4096, 0x1000) [ 569.262435][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 569.278539][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 569.286562][ T5359] binder: 5357:5359 unknown command 0 [ 569.332846][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env [ 569.336947][ T5359] binder: 5357:5359 ioctl c0306201 20000140 returned -22 [ 569.358401][ T5370] binder: BINDER_SET_CONTEXT_MGR already set [ 569.366344][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 569.390983][ T5370] binder: 5357:5370 ioctl 40046207 0 returned -16 [ 569.411189][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 569.430747][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 569.495675][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env [ 569.510366][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 569.543379][ T2988] binder: release 5357:5374 transaction 659 out, still active [ 569.554191][ T3875] kobject: 'loop4' (0000000065c5b6f1): kobject_uevent_env [ 569.561386][ T3875] kobject: 'loop4' (0000000065c5b6f1): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:38:12 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r3, 0x207, &(0x7f0000000100)={&(0x7f0000000040)="ec4e990d3bbc3380875ac9ff5a32e682a358d01d376cff02d8eeb822380013e9c8e4e978dbe5531386e70d6f764fe78920a002a816fd392f78f4ab93ad3c56248b84fac5973a1b72f631d978e887186559f759a58898a05db5a42e2ebc84d4", 0x5f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:12 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) 03:38:12 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000500), 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(0xffffffffffffffff) 03:38:12 executing program 0: read$alg(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) 03:38:12 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xf8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() lsetxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0xffffffffffff6488, 0x6b71}]}, 0xc, 0x1) fallocate(r1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 03:38:12 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x6}, 0x8) [ 569.649187][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 569.665768][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000500), 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(0xffffffffffffffff) 03:38:12 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0xb, &(0x7f0000000100)}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) [ 569.740129][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 569.750604][ T5387] binder: 5386:5387 unknown command 0 [ 569.752931][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:38:12 executing program 0: read$alg(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) [ 569.792565][ T5387] binder: 5386:5387 ioctl c0306201 20000140 returned -22 03:38:12 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:12 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40000, 0x0) r1 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) 03:38:12 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0xc4000, 0xd0) getsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000180)=""/216, &(0x7f0000000040)=0xd8) close(r0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x5}) 03:38:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x103040, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000140)=""/31, &(0x7f0000000100)=0x1f) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000500), 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x5}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e19a2b01000000580f02000000003f420f0000000000b2bd0000000000003f420f0000000000856b76b5050000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) close(0xffffffffffffffff) [ 569.849525][ T3875] kobject: 'loop0' (00000000ec11da61): kobject_uevent_env 03:38:12 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000040)={0x6}, 0x8) 03:38:12 executing program 3: r0 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) [ 569.917311][ T3875] kobject: 'loop0' (00000000ec11da61): fill_kobj_path: path = '/devices/virtual/block/loop0' 03:38:12 executing program 0: read$alg(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000) [ 569.995776][ T3875] kobject: 'loop2' (00000000bf6477e6): kobject_uevent_env [ 570.032863][ T3875] kobject: 'loop2' (00000000bf6477e6): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 570.064688][ T3875] kobject: 'loop5' (00000000ed98ae2d): kobject_uevent_env [ 570.103176][ T3875] kobject: 'loop5' (00000000ed98ae2d): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:38:12 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000500)=0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xbb}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r2, &(0x7f0000000040), 0x0, 0x1}, 0x20) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000005c0)={0x2, 0x7fffffff, 0x5f29, 0x7fff}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)={0xf8, r4, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr="6a575e53f6b140ad120630e0d7835258", 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev}, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2fbdd5736b101509) unlink(&(0x7f0000000900)='./file0/file0\x00') r5 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clone(0xf93f00, 0x0, &(0x7f0000e32000), 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000640)={r8}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000eb6e819d8e88196e690b785fb67441dbc26628089dc8907ce4cc814e613f0764c3da535f86d80abf74787b272a923f76ba4db4b7a781244a8d5bb892bbcdbea25205804b69078bc664efc7985b57e6f393636cf005232edfa8b9589c266b1e028ad6493c5e517e88cc2f52acf765c21ec43cc4f6480b8128"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) ioctl$BINDER_WRITE_READ